similar to: Log files created for every machine not joined to the domain...

Dear Help, We are currently running Samba 3.0.22 on a distributed network/domain as a PDC (primary domain controller) and several as BDCs (Backup domain controllers) in our branch offices located around the country. At this point, the PDC is set up in our corporate office (where I'm located) and users have no trouble authenticating (via logging into windows and accessing shares) and also

Hello all, We have Samba (2.2.5) running on three servers, each in a different subnet. One of them is a PDC (domain master = yes). The Samba PDC is also the NIS master. The smbpasswd is replicated using rsync to the other machines that act as Samba BDCs (domain master = no). They are also NIS slave servers. The smbpasswd synchronization takes place automatically every time smbpasswd is updated,

Dear Help, I currently have a Samba PDC along with multiple BDCs using an eDirectory LDAP backend. While trying to figure out how to get the bad password account lockout feature to work, I managed to somehow mess up the samba PDC. If a user attempts to authenticate against the PDC with the correct password, all is well and works as usual. However, if I use an incorrect password, the Windows

Dear Help, Here is my situation: We have offices located in several areas around the country, all of which can communicate with each other through VPNs we have established. I have set up a Samba domain in which the PDC is located here in our home office, and there are BDCs for the same domain in each of the remote offices. I have been able to successfully join machines here in our home office

How much of a resource hog is a PDC? My understanding is that authentication is done vs a BDC if available. I configured my new file server as the domain PDC because I figured it would already have to run samba. I have two other machines configured as BDCs to serve as logon servers. I'm looking for opinions on whether I'm asking for performance problems by making my file server the

We're about to start migrating from Windows NT 4.0 to a Samba controlled setup. I've got a question about the functionality of the Samba PDCs and BDCs. In my Windows setup I have three domains that are defined by geographic locations. Each of these domains "trusts" the other. In Samba 2.2.7, I can't have the trusts, so I'm looking at creating one giant domain that

Replication has been running smoothly until I upgraded to 4.5.0. I had various errors with all BDCs and a force sync didn't resolve it. I shutdown all BDCs, demoted them with --remove-other-dead-server then joined new BDCs with new names. At first replication was intermittently failing (consecutive failures counter kept resetting), but it seemed OK, just slow if anything. Now they all

People, I have one PDC and a BDC on the matrix side and two BDCs on the branch office. I don't know if it is a problem. Anybody could help me? PDC # net rpc testjoin get_schannel_session_key: could not fetch trust account password for domain 'DOMAIN_NAME' net_rpc_join_ok: failed to get schannel session key from server PDC for domain DOMAIN_NAME. Error was

Hi people: I've been using Samba for a long time with some "basic" features like Samba working as a PDC, integrated with OpenLDAP, being a print server, among others, for a small number of "almost controlled" users (no more than 30 or 50 users). But now I'm interested to implement a Windows domain using Samba for a University with 6000-8000 users distributed through

Hi, I'm reading http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-pdc.html , http://samba.org/samba/docs/man/Samba-HOWTO-Collection/samba-bdc.html and http://samba.org/samba/docs/man/Samba-HOWTO-Collection/domain-member.html and I'm still not quite sure... If I set up a network with one samba 3 PDC and a few samba 3 BDCs, all pointing to the same OpenLDAP server and

Here's the situation. We've got an old NT4 domain (not a Samba domain in NT 4 mode) which we'll call CRUSTY. There is of course an NT4 PDC and several NT4 BDCs. We have some Linux/Samba file servers (Samba 3.0.1) that are member servers (security = domain) of the NT4 domain. We also have several NT4 BDCs and about 200 workstations of varying vintage (2000, XP) in several

OK, I think I've hit a misfeature in samba 3.0(release, Debian/sid) when it comes to using both Samba BDCs and domain trusts. It seems that the domain trust password is stored in the secrets.pdb on the server establishing the trust. This, obviously doesn't facilitate BDCs exercising the trust relationship, or being at all accessable from workstations on the other side of the trust. I

Andrew Barlett wrote: > > Domain trusts (in terms of us being a PDC trusting other DCs) are > currenetly a work in progress. We hope to have it finished for Samba > 3.0. > > However, why do you need domain trusts? (There are lots of > good answers > to this question, but make sure you do have one of the answers). > > Samba 2.2 has always supported being a member

Hi Everybody, Here in my company we have migrated from nt4 to Debian Sarge with Samba 3.0.14a + OpenLdap 2.2.23 + db4. Well, it's working fine except for one problem. When I have to get back to a backup copy on my ldap slaves on my BDCs some, or sometimes all, Windows XP machines need to be rejoined to the domain. I manage a workaround stopping Samba every time I need to reset the ldap

I have a samba classic domain, with a Samba 3.5.10 domain controller. I am trying to join a Windows Server 2012 R2 client. I have updated the registry. HKLM\SYSTEM\CCS\Services\LanmanWorkstation\Parameters DWORD DomainCompatibilityMode 1 DWORD DNSNameResolutionRequired 0 These changes allow Windows 7 Pro desktops to join the domain. I have not tried with Windows 8 or

Hello, On a computer, a sparc64 with Debian, with hostname tw89 and domain name KUDDE thinks `smbpasswd` that the domain name is TW89 | tw89:~ | # grep workgroup /etc/samba/smb.conf | # Change this to the workgroup/NT-domain name your Samba server will part of | workgroup = KUDDE | tw89:~ | # ldapsearch -LLxW -H ldaps://tw89 -D cn=admin,ou=people,dc=gst,dc=stappers,dc=nl \ | -b

I have been using 'net ads testjoin' but the issue is it seems to ask for a password when the box is not joined to a domain (even if I specify '-U username%pass'). This *seems* like a bug - I would expect it to pass or fail using the creds passed in. Is this by design and if so, why? Is there a better alternative? ('net ads info'?) -aps

Hi I'm currently working on a project aiming at replacing all windows servers (about 20) in my company by linux servers. Some of these windows servers are windows 2000 domain controlers (one PDC and few BDCs) with active directory. We have about 900 client windows 2000 workstations and about 2/3 of them are domain members. Our goal is to replace the windows servers that are domain controlers

Hi, My doubt is about Idmap + LDAP + winbind, related do BDC + PDC. We are using Samba 3.0.33 (Slackware 12.0.0). Our layout is almost like this one http://us1.samba.org/samba/docs/man/Samba-Guide/images/chap6-net.png, but we have more BLDGn than this example. Actually, we are taking ideas from http://us1.samba.org/samba/docs/man/Samba-Guide/happy.html and from

Every 12. day or so domain members changes passwords in the NT domain, and after a while (5 minutes normally) the NT PDC starts to sync against the BDCs in the domain. Before this syncing is done the authentication of new connections usually fails. We have a pretty large NT domain with 40.000+ users and the syncing process can take up to one hour, causing samba authentication to fail during this