similar to: Excessive allocations from RID master

On Thu, 2018-09-27 at 09:04 +0100, Rowland Penny via samba wrote: > On Thu, 27 Sep 2018 07:46:40 +0200 > Daniel Jordan <d.jordan at gfd.de> wrote: > > > > > > Hello  Andrew and Rowland, > > > > here's the ldbsearch output from both domain controllers: > > > > > > dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb  > >

Am 27.09.18 um 10:04 schrieb Rowland Penny via samba: > On Thu, 27 Sep 2018 07:46:40 +0200 > Daniel Jordan <d.jordan at gfd.de> wrote: > > >> Hello  Andrew and Rowland, >> >> here's the ldbsearch output from both domain controllers: >> >> >> dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb >> '(&(objectClass=rIDSet)(cn=RID

On 28/06/16 12:05, Zhuchenko Valery wrote: > I'm understand, why I get error about unique index violation on objectSid: > > samba-tool fsmo show > RidAllocationMasterRole owner: CN=NTDS > Settings,CN=PDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ad,... > > Last created object have objectSid > S-1-5-21-763247336-2482037999-3416227170-2001 (it is

On 17/05/16 12:11, ash-samba at comtek.co.uk wrote: > >> G'Day, >> >> This is a serious situation. What it means is that the nextRid value >> for that DC points at a user account that already exists, so when we >> go to create it, the create fails. > I've just looked at the LDAP output, and nextRid is 1000 for both dn: >

Am 26.09.18 um 20:42 schrieb Rowland Penny via samba: > On Thu, 27 Sep 2018 06:29:26 +1200 > Andrew Bartlett <abartlet at samba.org> wrote: > >> On Wed, 2018-09-26 at 14:47 +0100, Rowland Penny via samba wrote: >>> On Wed, 26 Sep 2018 15:28:42 +0200 >>> Daniel Jordan <d.jordan at gfd.de> wrote: >>> >>>> >>>> dc01:~#

27.06.2016 18:45, mathias dufresne: > Perhaps you don't have yet duplicate objectSid as that's not supposed to be > possible. > Rather than scripting something to look for objectSid used twice I would > start with dbcheck and other tools to verify that your database is > consistent and identical on all servers. [root at pdc ~]# samba-tool dbcheck Checking 3346 objects

Hi Valery, First thank you for this detailed information about your searches. I find them very interesting. Here I'm thinking of two workarounds. The first one would be to list deleted objects RIDs, to verify RID=2002 is really the last one used, being sure there is no deleted object with RID=2003 and so on. Then once you get the last RID used, you could change RidNextRid to match this

I love diving : ) 2016-06-28 16:44 GMT+02:00 mathias dufresne <infractory at gmail.com>: > > > 2016-06-28 14:22 GMT+02:00 valera <valera at zvn.p98.belkam.com>: > >> 28.06.2016 15:50, mathias dufresne: >> > Here I'm thinking of two workarounds. The first one would be to list >> > deleted objects RIDs, to verify RID=2002 is really the last one

>> We can successfully "/usr/bin/samba-tool user add" with alaska (a >> machine located on another continent, with a quite unreliable link!), >> and that gives us an account with >> S-1-5-21-2702589905-558746101-3641499263-7125 on -both- alaska and >> empire, so there is clearly some amount of working replication. >> Confusingly, after doing this

I had a small peak at your patch. This also applies to samba 4.8.5? Now, basicly, i dont know anythis what that patch is doing, im not a coder, i can read it a bit. But if did read it correct, its about rID pool alloctions where rID = 0 ? Like this: (dn: CN=RID Set,CN=DC2,OU=Domain Controllers,) rIDAllocationPool: 2100-2599 rIDPreviousAllocationPool: 0-0 rIDUsedPool: 0 rIDNextRID: 0 And on

I'm understand, why I get error about unique index violation on objectSid: samba-tool fsmo show RidAllocationMasterRole owner: CN=NTDS Settings,CN=PDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ad,... Last created object have objectSid S-1-5-21-763247336-2482037999-3416227170-2001 (it is record for computer) Last symbols is 2001, and last assigned RID is 2001: [root

On Wed, 2018-09-26 at 14:47 +0100, Rowland Penny via samba wrote: > On Wed, 26 Sep 2018 15:28:42 +0200 > Daniel Jordan <d.jordan at gfd.de> wrote: > > > > > > > dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb  > > '(objectClass=domain)' objectSid > > # record 1 > > dn: DC=xx,DC=xx,DC=xx > > objectSid:

On 9/19/2016 1:37 PM, Rowland Penny via samba wrote: > On Mon, 19 Sep 2016 19:19:08 +0200 > Achim Gottinger via samba <samba at lists.samba.org> wrote: > >> >> Am 19.09.2016 um 19:08 schrieb Achim Gottinger via samba: >>> >>> Am 19.09.2016 um 18:21 schrieb Rowland Penny via samba: >>>> On Mon, 19 Sep 2016 11:57:38 -0400 >>>> Adam

dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb '(objectClass=domain)' objectSid # record 1 dn: DC=xx,DC=xx,DC=xx objectSid: S-1-5-21-3258148492-1502286889-3538134041 dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb '(&(objectClass=rIDSet)(cn=RID Set))' rIDAllocationPool # record 1 dn: CN=RID Set,CN=DC01,OU=Domain Controllers,DC=xx,DC=xx,DC=xx rIDAllocationPool:

> To see rid pool info run the following from a Windows command prompt. > dcdiag /s:DCNAME /test:ridmanager /v > Replace DCNAME with the dns name of your Domain Controller. I wonder > if OP has exhausted his RID pool. Unlikely but possible. I also see a > similar post on this same issue. > https://lists.samba.org/archive/samba/2016-April/198879.html #### LARKIN26

2016-06-28 14:22 GMT+02:00 valera <valera at zvn.p98.belkam.com>: > 28.06.2016 15:50, mathias dufresne: > > Here I'm thinking of two workarounds. The first one would be to list > > deleted objects RIDs, to verify RID=2002 is really the last one used, > > being sure there is no deleted object with RID=2003 and so on. Then once > > you get the last RID used, you

On 15/09/2019 16:44, Bart?omiej Solarz-Nies?uchowski wrote: > >> Done with some problems: > > 1. bugs reported here: > > https://bugzilla.altlinux.org/show_bug.cgi?id=36496 > > and here > > https://bugzilla.samba.org/show_bug.cgi?id=13060 > > involved me - but and make workarounds and migration was done. > > > Basically AD samba works. > > >

On Mon, 2016-09-19 at 23:46 -0500, Andrew Bartlett via samba wrote: > On Mon, 2016-09-19 at 09:31 -0400, Adam Tauno Williams via samba > wrote: > > > > Package: sernet-samba-4.2.14-23.el6.x86_64 > > > > These DCs were very recently upgraded from a prior version. > > > > [2016/09/19 09:32:55.168161,  0] > >

On 15/09/2019 19:08, Bart?omiej Solarz-Nies?uchowski wrote: > W dniu 2019-09-15 o?18:32, Rowland penny via samba pisze: >> On 15/09/2019 16:44, Bart?omiej Solarz-Nies?uchowski wrote: >>> I have some questions: >>> >>> I not currently understood - bind9 connected to AD server must be >>> used by the LAN workstations - or only via AD server? >>>

On Thu, 27 Sep 2018 06:29:26 +1200 Andrew Bartlett <abartlet at samba.org> wrote: > On Wed, 2018-09-26 at 14:47 +0100, Rowland Penny via samba wrote: > > On Wed, 26 Sep 2018 15:28:42 +0200 > > Daniel Jordan <d.jordan at gfd.de> wrote: > > > > > > > > > > > dc01:~# ldbsearch -H /var/lib/samba/private/sam.ldb  > > >