similar to: SMB Network design guidelines

Hi, We have an old domain with a samba-3 PDC and LDAP backend in our HQ and two BDC in our branch offices. Since we don't use the domain in our HQ anymore and one of the branches will be moved to our new domain (2003/2008) I'm thinking about decomissioning the PDC and promote both BDCs as PDC for their branch offices and networks. I would also get rid of LDAP. Changing the backend to

Hello, Our company is trying to implement central Windows Domain at HQ and replicated across all its regional offices. The implementation will have a PDC/LDAP-master on HQ and BDC/LDAP-slave on each regional office. In the hopes of saving bandwidth we are trying to avoid the use of WINS between WAN links. Is there any way of not using WINS and still have the clients find the PDC (for updating

Another old thread I’m resurrecting; apologies, but I have also been experiencing this issue. I have 10 international remote sites over very lossy WAN links. Getting traffic to them from HQ is a challenge; them trying to talk directly each other over umpteen paths is even worse. They are able to accomplish this (somewhat) because we have a mesh VPN setup with direct site-to-site connectivity, but

At work, I have 4 branch offices at which I've deployed asterisk. Call termination/origination at each branch office is handled either through a frac PRI or 3rd party SIP provider. Soon, I'll be replacing the legacy PBX at our HQ with asterisk. Each branch office has between 3 and 20 employees, each with their own extension and DID, and at headquarters, we have about 70 people, again

We're about to start migrating from Windows NT 4.0 to a Samba controlled setup. I've got a question about the functionality of the Samba PDCs and BDCs. In my Windows setup I have three domains that are defined by geographic locations. Each of these domains "trusts" the other. In Samba 2.2.7, I can't have the trusts, so I'm looking at creating one giant domain that

Since we're on the subject of Samba over the WAN.... (BTW, I'm running three offices with a Samba 3.0.9 PDC and two Samba 3.0.9 BDCs over an FreeSwan based WAN and it works just fine. The WINS server is a must in my book though.) Last Thursday and Friday, one of the remove office's WAN lines went down. While the outages were significant, nothing major happened because of it. But,

hi: our company want to use samba3+openldap with singal sign on. we have several branches.people would travel arround head quarter and branches with their notebooks. so we don't have roaming users, but we do have roaming computers. we want to use a single domain for every site, and we want every site keep working even when wan link is broken. my plan below: 1. place

Hello, I am trying to figure out how to implement a samba domain in a number of remote offices around the world with partly bad and often interrupted WAN connections/VPNs. The goal is to administer the directory from the central data center. My obvious choice would be to set up a central server with SAMBA+OpenLDAP+smbldap-tools and in each remote office a SAMBA server with OpenLDAP as a

Hi! We're trying to figure out the best way to use samba4 in our environment and after testing back and forth we are now left with a question; why would we want to have several samba4 servers? The environment is one HQ with multiple branch offices where each branch office as a network connection to HQ with at least a 2Mbit DSL. The initial idea was to put a samba4 DC in every branch

Hi Jermey, I have checked now (when member look work fine) so i get this informations: klist -k /etc/krb5.keytab Keytab name: FILE:/etc/krb5.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1 host/pl0024.hq.kontrast at HQ.KONTRAST 1

Hi folks, Everything is working great and I am not having any issues with the three domain controllers that I currently have set up. We are migrating from Puppet to Ansible for configuration management, and I decided to create a playbook that will do all the things necessary to set up a DC and join the domain. I have found that in the domain joining process, an error stops replication from

I have been trying in vain to get ADS domain authentication working. I can't figure out what is wrong and have read the docs and looked through the mailing lists. I'm not sure why better documentation hasn't been written on the web site for the ADS feature since it's pretty spectacular to be able join a Samba server natively to an AD domain. I have successfully joined the samba

We recently upgraded our PDC from Debian 4 to Debian 5. That entailed an upgrade of Samba from 3.0.24 to 3.2.5. Since the upgrade we've had a very specific problem connecting to shares on a commercial NAS running Samba 3.0.34. The problem happens when users try to connect to shares from standalone servers--e.g., Windows XP Pro boxes that we use for testing. From those boxes users should be

so i add the pam yesterday and now after 10 hours no connection to member is possible. :( Same errors in logs i send yesterday OLIVER WERNER Systemadministrator > Am 03.10.2016 um 18:54 schrieb Rowland Penny via samba <samba at lists.samba.org>: > > On Mon, 3 Oct 2016 17:56:07 +0200 > Oliver Werner <oliver.werner at kontrast.de <mailto:oliver.werner at

hey, now after observe last changes on the weekend… i have also the issue. After 10 hours i can’t connect to the shares on my member server. On Log of DC i found this: [2016/10/02 20:35:45.601265, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: AS-REQ PL0024$@HQ.KONTRAST from ipv4:<member-ip>:55578 for krbtgt/HQ.KONTRAST at HQ.KONTRAST [2016/10/02

Hi, i have a permanent problem with my samba members. there lost after some times his connections to DCs and i need to restart winbind. Also same problem with winds client that running 24x7. After few days i can not logged in. i think thats a problem with kerberos tickets. i have checks samba logs and found that samba member and windows client ask for new tickets and get new expiration. in my

Hi, i have three problems in my AD. i have three DCs, four samba members and some Mac and Windows clients. first problem After some times my Windows and Mac clients can not login with the account cendentials. So i need to reboot the system and works fine. When the problem exists i got on my DC following log: [2016/03/03 12:39:10.029089, 3] ../lib/ldb-samba/ldb_wrap.c:320(ldb_wrap_connect)

I scripted the creation of snapshots and it works fine. Now I'd like to run the script as non-root. virsh snapshot-create-as --domain hq-live-v01 \      --name snappy \      --diskspec vda,file=/var/lib/libvirt/images/hq-live-v01.snappy,snapshot=external \      --diskspec vdb,file=/var/lib/libvirt/images/hq-live-storage.snappy,snapshot=external \      --disk-only --quiesce --atomic This

hi: i am new to asterisk and dundi. we have some branch office which will use asterisk in the future. they will form a full-mesh structure so every site can contact each other directly. i want to try setup dundi, then we don't need to modify every pbx when a new site add in the cloud. thanks to the great dundi document "caveman can do it" and other resource in the

Hello everybody, we have an issue with our samba instance of ad member as fileserver when i add an user to a group it will adding the user without problems. i can verify on our two domain controller that the user is in the group with wbinfo -r <user> Now when i will check it on the member (fileserver) the user will not in the group. Anyone has an idea what we’ve misconfigured? Our