similar to: Problem joining Samba 4 to an older Samba 4 alpha 17

Hi there, I currently have 6 Samba4 (4.1.5) DC's spread over a global network. This is working ok but they were created before any Sites were made and as the ability to move DC's to new Sites is not working, I am attempting to create new DC's in each location and then demote the old ones. The problem I am facing is the domain join process keeps timing out for any new DC. I think this

Hi all, Am having problems adding a new DC to a Site that doesn't already have a DC in the same subnet. Whenever I try and do a domain join specifying a nearby DC in a different subnet I get this: ERROR(runtime): uncaught exception - (-1073741643, 'NT_STATUS_IO_TIMEOUT') File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run

Hey, Im trying to join a second domain controller to domain. I'm using the following command o join: *samba-tool domain join example.com DC -UAdministrator --password=xxxxxx --realm=example.com --server=dc1.example.com --site=NEWSITE --dns-backend=BIND9_DLZ --debuglevel=5* Iptables and SELinux are turned off in both machines. This is the debug I get... (...) Replicated 18 objects (0

Thanks Rowloand for the hint! I installed sernet-samba 4.7 and give it a try. Now I get: [root at dc-12 1]# samba-tool domain join obel.lan DC --realm=obel.lan -Uadministrator Finding a writeable DC for domain 'obel.lan' Found DC dc-11.obel.lan Password for [OBEL\administrator]: workgroup is OBEL realm is obel.lan Adding CN=DC-12,OU=Domain Controllers,DC=obel,DC=lan Adding

may I extend the issue with some strange behaviour? Look here: installing the sernet 4.7 as mentioned above I can´t join the domain in a regular way. ONLY it works when I asked BOTH of the working DCs with 4.9.3 before I try without explicit naming of a server... ^^ Follow me here: [root at dc-02 etc]# samba-tool domain join obel.lan DC -U"OBEL\administrator" --realm=obel.lan

On 25/03/15 16:50, VIKAS wrote: > Hi Team, > > Samba Version = 4.2 > > Bind = 9.10 with dlz > > > Not able to to view replication.(samba-tool drs showrepl) > > > [root at dc2]# samba-tool drs showrepl (want to highlight the name which is > using to connect) > > ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to >

On Mon, 25 Mar 2019 15:12:16 +0100 franta via samba <samba at lists.samba.org> wrote: > Hi team, > I have Samba (4.9.5) AD DC, and when trying to add second DC, join > fail: > > # samba-tool domain join zamecek.home DC > -U"SSUPS-ZAMECEK\administrator" --option='idmap_ldb:use rfc2307 = > yes' --dns-backend=BIND9_DLZ Finding a writeable DC for domain

Afaik one is not supposed to ever restore a DC in case you are running multiple. Thus I am wondering why you want to do (online or not) backups at all. Or did that rule change? Regards, Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Ivan Juri?ic via samba Gesendet: Wednesday, 17 July 2019 13:39 An: samba at lists.samba.org Betreff:

Thanks Rowland for your answer. these are sernet-packages from their subscription. There are 4 DCs (all with last sernet-rpms) 2 are demoted with probs (dc-01 and dc-02 both centos6) and 2 are running (dc-10 and dc-11 on centos 7) dc-11 has all fsmo. joining with the old dc-01 and dc-02 doesn´t even work. dc-01 joins but gives me this: Deleted

hi again, now the join finished but ... i have a high CPU load caused by a samba-process. Samba is consuming 100% of one CPU and the replication fails. Is my AD to large???? root at dc2:# samba-tool drs showrepl Default-First-Site-Name\DC2 DSA Options: 0x00000001 DSA object GUID: e9d31c7e-acb3-4473-823a-39b06ab9fa95 DSA invocationId: 49a80da8-975f-49ef-834b-224b2bbf0805 ==== INBOUND

Hi, That failure is a little odd. It's replicated all the DB objects, but is failing trying to commit the transaction. It looks like the error is happening trying to get the objectClass for the Administrator user. The weird thing is it should have already successfully passed this check once when it first received the object. You could try the following: 1. If you run 'samba-tool

Hi Denis, yes, the problem initiated after changing the primary group of all my 11034 users. I changed the primary group to different groups. This caused that now every user is member of the LDAP object "Domain users" ldapsearch -LLL -x -h dc1 -x -b "cn=domain users,cn=users,dc=example,dc=net" member | grep ^member: | wc -l 11034 After this action the replication

On 11/10/2019 21:56, Igor Sousa via samba wrote: > Hi, > > I've tried to update my samba AD/DC environment. Then, I've removed a > existing offline DC with "samba-tool domain demote > --remove-other-dead-server=genos". I've re-created "genos" (yes, I try to > keep the same name and IP address) and install a 4.10.2 samba version (I > know the new

On 18. 07. 2019. 04:49, Tim Beale wrote: > Hi, > > Just to reiterate an important point, the 'domain backup' command is > there to backup your domain information, not your DC. Any good suggestion for make full domain backup in online? (without stop service)? > > If you still have a working domain, then you can recover any DC by > simply rejoining it to the domain. Do

Hi Team, Samba Version = 4.2 Bind = 9.10 with dlz Not able to to view replication.(samba-tool drs showrepl) [root at dc2]# samba-tool drs showrepl (want to highlight the name which is using to connect) ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to *dc2.ik.lan.mum* failed - drsException: DRS connection to dc2.ik.lan.mum failed: (-1073741772, 'The

Hi, the only thing i did, was to assign every user to a ohter group. After this i changed the primary group to this new groups and the samba-server itself assigned the users to the group "domain users"automatically (attribute: member). Now i try to revert this and to rechange the primary group to 513. So i can have again a Domain users object with small number of members. Thanx

Hello, after successfully demoted a samba4 dc node (redhat linux 6.4 with samba v4.1, hostname:samba4dc3) i tried to join another dc to domain (redhat linux 6.4 with samba v4.1, hostname:samba4dc4) and this is what i get: root at samba4dc4 /root #samba-tool domain join samdom.example.com DC -Uadministrator --realm=samdom.example.com --dns-backend=NONE Finding a writeable DC for domain

On Thu, 21 Dec 2017 13:16:05 -0500 (EST) Daniel McFeeters <danielj.mcfeeters at lcdhd.org> wrote: > I thought I had posted already, but my first message may have been > confusing. Here is the output of the domain join: > > $ sudo samba-tool domain join redacted.domain.local DC > -U"REDACTED\my.domain.admin" --dns-backend=SAMBA_INTERNAL Finding a > writeable DC

Am 22.01.2018 um 21:39 schrieb Andrew Bartlett: > On Mon, 2018-01-22 at 21:30 +0100, Johannes Engel via samba wrote: >> [2018/01/22 21:15:50.022197, 2] >> ../source4/auth/ntlm/auth.c:475(auth_check_password_recv) >> auth_check_password_recv: sam_failtrusts authentication for user >> [MYDOMAIN\ldap] FAILED with error NT_STATUS_NO_TRUST_LSA_SECRET, >>

Hello List, now i try to use the backup command for the first time and it fails: It claims sam.ldb.d is not empty but there should be all domain db's right? Samba Version: root at dc01:/var/lib/samba/private/sam.ldb.d# <mailto:root at dc01:/var/lib/samba/private/sam.ldb.d#> samba -V Version 4.11.8-Debian root at dc01:/backup/linux/samba-dom# samba-tool domain backup