similar to: Rejoin BDC to domain?

Hello Lads, Problem could be smbldap-tools, im using 0.97. I have manually set the sid on the bdc which seems to work. I am confused because I thought net rpc getsid stored the sid from the pdc on the bdc in secrets. I wasn't aware that net getlocalsid should return identical results on both pdc & bdc. Please explain this - why isnt the BDC obtaining the sid automatic as it should

Hi there, I have a Samba PDC and BDC migrated from NT4 using ldapsam with an interdomain trust to a 2k3 domain. The trust is established both ways and was made from the pdc. Using samba 3.0.14a-sernet on Suse 9.1 The trust is working. I can pull users from the trusted domain and apply them to acls on my samba DMS. Winbind adds the idmap entry correctly. What is not working, is authentication from

hi list&john, i read in the documention about BDCs: The domain SID has to be the same on the PDC and the BDC. In Samba versions pre-2.2.5, the domain SID was stored in the file |private/MACHINE.SID|. For all versions of Samba released since 2.2.5 the domain SID is stored in the file |private/secrets.tdb|. This file is unique to each server and cannot be copied from a PDC to a BDC; the BDC

Hi Praveen, > We're trying to add a BDC in Samb4 classic domain setup. The Samba > 3 How -To and Samb3 by Example covers this but uses the old > slapd.conf option, we are using the slapd.d config. I couldn't find > a similar document for Samba4 > > Can you please advise that the following steps will work? LDAP in > the existing PDC is working using the smbldap

I've been reading the SAMBA documentation at: http://us3.samba.org/samba/docs/man/Samba-Guide/upgrades.html#id2600749 But I just need some confirmation since this is our primary server, and I'm not fully confident about what I read. SITUATION: We currently have a Samba server running as our Primary Domain Controller which is authenticating against a local LDAP database. The

I would like to know how to achieve a "hot-failover" setup between a Samba 3.x.x primary domain controller and backup domain controller with a LDAP backend. I was under the impression that all I need to specify is something like the following in my smb.conf: passdb backend = ldapsam:"ldap://pdc-srv.domain.org ldap://bdc-srv.domain.org" I have set this passdb backend

It's me again, with the solution to my problems. To get a working BDC, you have to kill samba, delete your secrets.tdb, create a MACHINE.SID and then restart samba. You will have to do this on the PDC and the BDC to have the same SID the the secrets.tdb file. Then machine account are valid even if you move your PDC, or you add a 2nd BDC, as long as you create the MACHINE.SID file before the

Hi Guys, We're trying to add a BDC in Samb4 classic domain setup. The Samba 3 How -To and Samb3 by Example covers this but uses the old slapd.conf option, we are using the slapd.d config. I couldn't find a similar document for Samba4 Can you please advise that the following steps will work? LDAP in the existing PDC is working using the smbldap tools - Setup the LDAP in BDC

Greetings, I have a Suse 9.3 server running 3.0.9 as a PDC, using OpenLDAP as the passdb and idmap backend. I also have a 3.0.9 server set up as an OpenLDAP slave, but it only serves files. I decided that I'd like to set this other server up to service logins as well. When I add the "domain logons = yes" in this server's smb.conf file, I get some rather strange behavior.

Hello Lads, I have a PDC & BDC / Master & Slave; I regularly make backups of the LDAP database: Slapcat ¡Vv ¡Vl backupallusers.txt. Both my PDC & BDC have been rebuilt from scratch, I slapadd ¡Vv ¡Vl backupallusers.txt and I net set localsid domainsidhere for the PDC << I get that from the backupallusers.txt. Smbpasswd ¡Vw secret < on both PDC & BDC Net rpc getsid

I've got two sites that I am planning a Samba3/LDAP implementation on, each will have its own local server. The problem is that I want to implement in my local office first, which is not the site that eventually will be the 'master' site. Sometime later when the proper master site comes online, I'd like to demote for lack of a better term, my local machine to a BDC and then

Have you set in the slapd.conf on the slaves something like updateref ldap://master.ldap The slave / consumers need to redirect the request to the master ldap database. It may also be a good idea to have samba use fail over for the ldap backend. You would need to set this in your ldap.conf as too. for pdc / ldap master passdb backend =ldapsam:"ldap://master.ldap ldap://slave.ldap"

I'm trying to decommission our PDC which is running on some older hardware and migrate it's functionality to one of our two currently operating BDCs for the domain. The three servers have nearly identical configurations with only differences in file and printer shares and a couple attributes like "wins support" and "domain master". They all have identical netlogon

Dear Help, Here is my situation: We have offices located in several areas around the country, all of which can communicate with each other through VPNs we have established. I have set up a Samba domain in which the PDC is located here in our home office, and there are BDCs for the same domain in each of the remote offices. I have been able to successfully join machines here in our home office

Hi Everybody, Here in my company we have migrated from nt4 to Debian Sarge with Samba 3.0.14a + OpenLdap 2.2.23 + db4. Well, it's working fine except for one problem. When I have to get back to a backup copy on my ldap slaves on my BDCs some, or sometimes all, Windows XP machines need to be rejoined to the domain. I manage a workaround stopping Samba every time I need to reset the ldap

We have an urgent problem that we've been spending hours on to no avail. We have a RHEL 5.2 server that is running Samba 3.2.8 and was set up for domain authentication against our PDC. It was running fine until I decided to try and change it to "ads" authentication. I then realized that we needed to keep it on "domain" because of the version of Clearcase we have on the

I am not sure if this first post made it to the list, but I wanted to post the resolution, which was very simple and something I had documented but buried and I had forgotten about it. All these problems went away when I joined the domain using Samba's version of "net", not Redhat's. If you use Redhat's version, it looks like it joins the domain but it really doesn't

I've been following the forums on this subject. I am still having problems implimenting this at my site. I am trying to replace a Novell 5 file server doing single server signon(workstation manager) with a linux/samba server and a W2K ADS server. I tried this with slackware 10.0, samba 3.0.10, MIT krb5 v 3.1 5, openldap-2.1.22 and got it pretty close (could login wihtout password) but had

If I configure a samba PDC and then a samba BDC, do I need a machine trust account for the BDC? That is, do I have to run "net rpc join" on the BDC? Or manually create the account for the BDC in LDAP? -- Mariano Absatz - "El Baby" el.baby at gmail.com www.clueless.com.ar

I had a working "Samba-2.2.7a-SuSE" domain (with roaming profiles,etc.) but this server crashed. So I copied the samba directory with the config files (including secrets.tdb, passwd, ...) from my backup to the second server and started nmb and smb, but the Clients could'nt log onto the domain. The error was something like: "You couldn't log on. Please check username and