similar to: scheduled pings

Hey guys, I had recently setup a new DC (called dc0) (in accordance with the wiki) and now I would like to demote the old DC (called pdc0 :)). I followed the wiki again, but I ran into the following issue. When trying to demote the old DC, I get this error message: pdc0 # samba-tool domain demote ERROR: Current DC is still the owner of 2 role(s), use the role command to transfer roles to another

On 18/10/2019 18:48, John Redmond wrote: > DNS is another area where I have read and experimented a lot.? Result: > confusion.? Again, I'm using fresh installs of Ubuntu 18.04 LTS > "server" for both the AD-DC and the fileserver machines.? Here's what > the various config files on the fileserver look like now.? Test > results are not exactly what they

On Thu, 28 Feb 2019 18:04:50 -0600 (CST) Mike Ray via samba <samba at lists.samba.org> wrote: > Hello all- > > I am trying to upgrade a old domain to a newer version. The old DCs > are a custom compiled version of Samba, so instead of upgrading the > DCs in place, the plan is to upgrade by joining new DCs to the > domain, replicating data and then shutting down the old

On 15/05/2019 21:43, durwin at mgtsciences.com wrote: > > > *named.conf.options* > > > options { > > >         directory "/var/cache/bind"; > > > > > >         // If there is a firewall between you and nameservers you want > > >         // to talk to, you may need to fix the firewall to allow > multiple > > >         //

> > > > > Why are you using the internal dns server on one DC and Bind9 on the > > other ? > > I am very familiar with configuring Named on Fedora. I thought it > > would be > > just as easy on Ubuntu. After discovering the files were in different > > places > > and so many more being 'included', I decided to use internal on the

Hi all, Running Samba 4.0.0apha18 with good results but getting an error when I attempt to replicate the Global Catalog to a Windows 2008 Machine. Samba machine = DC1 Windows 2008 machine = DC0 samba-tool Showrepl result: Default-First-Site-Name\DC1 DSA Options: 0x00000001 DSA object GUID: 05c3c860-0a0d-4672-a39e-a212ccb0ce9c DSA invocationId: abb0cab3-13d3-456c-8a16-e65a4855a2df ==== INBOUND

Hello. We're trying to integrate Samba 4 as a DC in production. We aim to replace our only Windows 2003 Enterprise R2 Russian DC with 2 Samba DCs. However, we've got a replication problem, we aren't shure is it a bug or misconfiguration. Both Windows and Samba DCs are virtual amd64 machines, running under the control of Xen (so, at least the time is the same). Windows VM has GPLPV

Hai, Why would you ever add Domain users to Local Admins? Thas really a very big NO NO, dont do that, really.. Dont.. If you want to be an victum of online crime, that thats the way to allow it to happen. Now your GPO. Its a new setup, correct? If so. Login on the AD and kinit Administrator Run : samba-tool ntacl sysvolreset -k Now, goto the Default Domain policy, is

I looked into Windows EventViewer and I found 'Invalid Credentials'. But I do not know how to deal with it. I have authenticated with Domain Controller, why is it saying 'Invalid Credentials'? - System - Provider [ Name] Microsoft-Windows-GroupPolicy [ Guid] {aea1b4fa-97d1-45f2-a64c-4d69fffd92c9} EventID 1006 Version 0 Level 2 Task 0 Opcode 1

Hey all- Trying to upgrade the domain and running into issues getting my data into the new controller. Current configuration: dc0 - Ubuntu 12.04.2 - Samba: 2:4.0.6-12 dc1 - Ubuntu 12.04.2 - Samba: 2:4.0.6-8 dc2 - Ubuntu 12.04.3 - Samba: 2:4.0.6-8 I'm trying upgrade to Ubuntu 16.04.3, Samba: 2:4.3.11+dfsg-0ubuntu0.16.04.10 The documentation

On Thu, 5 Oct 2017 14:14:56 -0500 (CDT) Mike Ray via samba <samba at lists.samba.org> wrote: > Recently tried transferring roles from Samba 4.3.11 to Samba 4.7.0. > Ultimately, both dcs agreed that the 4.7.0 dc (dc3) had all the roles > and replication and the databases were in good shape. However, during > the process, I got a lot of errors that seemed to magically >

Hello, has anyone tried Samba 4 AD with SmartCard-Authentication and trust of chain certificates. So with root ca and intermediate ca? I followed the HowTo from the Samba Wiki, but there is only explained how you use with only a root ca. Then i tried it myself. I created a intermediate ca and some certs for the dc and user. But, i always ran into: NT_STATUS_PKINIT_FAILURE Yes, i have paid

I only have a tga user. But it says it has multiple entries. ( ERROR: Failed to add members ['tga'] to group "backup" - Found multiple results for "tga": ) root at dc0:~# samba-tool group list |grep backup lpcfg_do_global_parameter: WARNING: The "domain logons" option is deprecated ldb_wrap open of secrets.ldb backup root at dc0:~# samba-tool user

Hello all- I am trying to upgrade a old domain to a newer version. The old DCs are a custom compiled version of Samba, so instead of upgrading the DCs in place, the plan is to upgrade by joining new DCs to the domain, replicating data and then shutting down the old ones after transferring the FSMO roles. I had the new DC (dc3, version 4.9.4-12) replicating to the other DCs (dc0, versions

+1 .. So fix both resolv.conf. Then both smb.conf DC1 : > dns forwarder = 172.23.93.3 DC0 : no forwarder. And reboot DC0. wait 1 min. Reboot DC1. Wait 1 min. And no check it all. Have a nice weekend. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > L.P.H. van Belle via samba > Verzonden:

> Can you run this script on both DC's. > > https://github.com/thctlo/samba4/raw/master/samba-collect-debug-info.sh === BEGIN dc0 === Collected config --- 2020-02-28-08:30 ----------- Hostname: dc0 DNS Domain: msi.mydomain.com FQDN: dc0.msi.mydomain.com ipaddress: 172.23.93.25 ----------- Kerberos SRV _kerberos._tcp.msi.mydomain.com record verified ok, sample output:

Hai,   That -k  should use the kerberos auth. we should think about a bit better description here.   When your root/Administrator then it works ok also. Wel, you found the problem and you where able to fix it, so im happy.   and good to see that you did not have any errors running: samba-tool ntacl sysvolreset   Thanks for the notice back.   Greetz,   Louis       Van: durwin at

Two attachments are not being sent. Pasting contents. DC0 smb.conf # Global parameters [global] netbios name = DC0 realm = MSI.MYDOMAIN.COM server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate workgroup = MSI # This line was added 190710 (DFD)

> > > > *named.conf.options* > > > > options { > > > > directory "/var/cache/bind"; > > > > > > > > // If there is a firewall between you and nameservers you want > > > > // to talk to, you may need to fix the firewall to allow > > multiple > > > > // ports to talk.

Hello, I have setup a Samba 4 ADDC following the tutorial in the wiki. I need it to be a DC and a fileserver. Everything works fine and dandy except that I cannot access the file shares via a DNS alias, instead of the original hostname/DNS name. And I need this for various reasons, enough to halt going live with it if it doesn't work. :-( When accessing via the machine's fqdn