similar to: Winbind and Global Catalog

We are new to Samba and looking for some help please. We are attempt to authenticate users of a website with a Windows active directly connection using Samba 4.8.3 on centos 7 with apache NTLM_auth module. The active directory for the windows domain is a forest domain that has 3 domains. With a Global catalog on a number of sites. We can manage to authenticate against one domain. As

Fresh install of 4.0.6 from source on CentOS 6 minimal. Provisioning worked fine as did adding a Win7 Pro machine to the domain. Now trying to use the RSAT (Remote System Administration Tools), specifically the Active Directory Users and Computers tool. When looking at the properties for the "Administrator" account, clicking on the "Member Of" tab results in a 30 second

Hi When I work with RSAT on Samba4 appear the following message: "A global catalog (GC) cannot be contacted. A GC is needed to list the objects group memberships. ..." Occur, for example, when I access properties about an user or computer, as member of or Unix Attribute tab I have executed some tests, and for me looks like is healthy my DC. Is there another test to verify the health

Hi agains....im new in samba4...so i have some errors..aparently after compiled all runs ok, i create my domain, create my user with admin privilege, add machines correctly..for that way all see ok..after install rsat, connected into my samba server start the problems...when i create a new user send me a kind of error (from w7 pc using rsat): (im spanish user sorry manual translate, it a

Hi Samba Team, Have recently followed Samba guide and successfully migrate from PDC to AD and from BDC to join AD forest. Need some advice here as I encountered global catalog (GC) cannot be contacted issue when using RSAT. This message pops up when I click "member of" tab while viewing user properties although it will display correctly after I acknowledged the error. Another similar

On Tue, 15 Nov 2016 20:19:23 -0200 Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote: > Hi > > When I work with RSAT on Samba4 appear the following message: "A > global catalog (GC) cannot be contacted. A GC is needed to list the > objects group memberships. ..." > Occur, for example, when I access properties about an user or > computer, as

On 19/07/2019 11:13, Alfonso Conner via samba wrote: > Hi Samba Team, > > Have recently followed Samba guide and successfully migrate from PDC to AD > and from BDC to join AD forest. > Need some advice here as I encountered global catalog (GC) cannot be > contacted issue when using RSAT. > This message pops up when I click "member of" tab while viewing user >

On Tue, 13 Dec 2016 08:38:16 -0500 Adam Tauno Williams <awilliam at whitemice.org> wrote: > On Mon, 2016-12-12 at 19:45 +0000, Rowland Penny via samba wrote: > > You seem to be missing two FSMO roles: > > > > DomainDnsZonesMasterRole > > > > ForestDnsZonesMasterRole > > > > Just what version of Samba are you using ? > > > My Samba 4.5.2

On 22/07/2019 01:21, Alfonso Conner wrote: > Hi Rowland, > > Currently using Samba 4.8.5 > 2 x DCs running on CentOS 6.10 (Final) > Configured 1 DC via classic upgrade, and the latter DC join AD forest. > Would it be alright if I were to redo the classic upgrade? You can if you want to, but I feel that your problem may have nothing to do with Samba. Your first problem is your

On 22/07/2019 09:23, Alfonso Conner wrote: > Hi Rowland, > > In fact currently in my test environment using the same version of OS > 6.10 and Samba 4.8.5. > I ran 'netstat -plaunt | egrep "ntp|bind|named|samba|?mbd"', I have > :::3268, :::3269, I do not see 0.0.0.0:3268 <http://0.0.0.0:3268> and > 0.0.0.03269. > While I use a Windows PC join to my

Hi Rowland, Just a curious question. Since the origin of my AD comes from PDC. If I were to try and do a classicupgrade, using same IP, same hostname, same realm, will my windows pc have login issues? Regards On Mon, Jul 22, 2019 at 5:04 PM Alfonso Conner <c1581634 at gmail.com> wrote: > Hi Rowland, > > Noted with thanks. > > Regards > > On Mon, Jul 22, 2019 at 4:31

On 22/07/2019 10:24, Alfonso Conner wrote: > Hi Rowland, > > Just a curious question. > Since the origin of my AD comes from PDC. If I were to try and do a > classicupgrade, using same IP, same hostname, same realm, will my > windows pc have login issues? > To be honest, I am not entirely sure, you should get the same results every time you run the classicupgrade, so your

> > Initially, it appears to have worked. ... > > It shows the same on one of the S4 DCs, but the > > DomainDnsZonesMasterRole still shows as "no current owner" on the > > third S4 DC [all Sernet 4.5.2].  Argh. > You could try checking the database on the third DC, 'samba-tool > dbcheck --help' for more info. > You could also try forcing

Hi Rowland I'm using Samba 4.2.1 on Debian 7 Regards, Márcio 2016-11-15 20:30 GMT-02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 15 Nov 2016 20:19:23 -0200 > Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote: > > > Hi > > > > When I work with RSAT on Samba4 appear the following message: "A > > global

Hi all, Running Samba 4.0.0apha18 with good results but getting an error when I attempt to replicate the Global Catalog to a Windows 2008 Machine. Samba machine = DC1 Windows 2008 machine = DC0 samba-tool Showrepl result: Default-First-Site-Name\DC1 DSA Options: 0x00000001 DSA object GUID: 05c3c860-0a0d-4672-a39e-a212ccb0ce9c DSA invocationId: abb0cab3-13d3-456c-8a16-e65a4855a2df ==== INBOUND

> You seem to be missing two FSMO roles: > DomainDnsZonesMasterRole > ForestDnsZonesMasterRole > Just what version of Samba are you using ? My Samba 4.5.2 domain also appears to be missing these roles. Can I simply seize these roles? [root at larkin27 ~]# samba-tool fsmo show SchemaMasterRole owner: CN=NTDS Settings,CN=TEMP2008R2DC,CN=Servers,.. InfrastructureMasterRole owner:

Hi Rowland, Noted with thanks. Regards On Mon, Jul 22, 2019 at 4:31 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 22/07/2019 09:23, Alfonso Conner wrote: > > Hi Rowland, > > > > In fact currently in my test environment using the same version of OS > > 6.10 and Samba 4.8.5. > > I ran 'netstat -plaunt | egrep

Hi Rowland, Currently using Samba 4.8.5 2 x DCs running on CentOS 6.10 (Final) Configured 1 DC via classic upgrade, and the latter DC join AD forest. Would it be alright if I were to redo the classic upgrade? Hope to hear from you soon. Thanks and Regards On Fri, Jul 19, 2019 at 7:06 PM Rowland penny via samba < samba at lists.samba.org> wrote: > On 19/07/2019 11:13, Alfonso Conner

Hi Rowland, In fact currently in my test environment using the same version of OS 6.10 and Samba 4.8.5. I ran 'netstat -plaunt | egrep "ntp|bind|named|samba|?mbd"', I have :::3268, :::3269, I do not see 0.0.0.0:3268 and 0.0.0.03269. While I use a Windows PC join to my test domain, I have no issues with GC. Not sure how the GC problem can happen but seems to me it looks like a

On Mon, 2016-12-12 at 19:45 +0000, Rowland Penny via samba wrote: > You seem to be missing two FSMO roles: > > > DomainDnsZonesMasterRole > > > ForestDnsZonesMasterRole > > > Just what version of Samba are you using ? > > My Samba 4.5.2 domain also appears to be missing these roles. > > Can I simply seize these roles? > > [root at larkin27 ~]#