similar to: domain RODC fails with default provisioning

Hi, I was hoping I could modify a locally mounted registry hive using regpatch and a .reg file but the -F argument seems to have no function. (Strace shows it ignores it and just operates on /var/lib/samba/private/hklm.ldb) Below is output with debug on. rfm6 at ubuntuSSDx64:cp /mnt/xp/WINDOWS/system32/config/software /tmp/software rfm6 at ubuntuSSDx64:/tmp/config$ sudo regpatch -d=10 -F

Hello, I've seen this upgrade error posted before: https://lists.samba.org/archive/samba/2013-January/171022.html but either there is a different issue or I'm misreading the post. Basically when I run the classicupgrade (samba3 to 4) on a test machine, I get the following (the full debug output will be at the end of my post): ....... key added: key=CurrentVersion,key=Windows

OK, we're getting closer here I think. I repeated with -d 2 without much help. Here is -d 3, which may point us in the right direction. As I suspected, it seems to point to some corruption in the DNS still, perhaps? The key line seems to be here: Missing parent while attempting to apply records: No parent with GUID 60e25dda-6d35-4aab-bfa5-6137cb271e27 found for object remotely known as

Hi I am running the "samba-tool domain classicupgrade", and after solving some problems (thread http://lists.samba.org/archive/samba/2013-January/170777.html), now I am getting this error: # samba-tool domain classicupgrade --dbdir ~/sambav3 --realm XXXXXX.YYYYYY.TEST --use-xattrs=yes ~/sambav3/smb.conf -d9 ... init_sam_from_ldap: Entry found for user: XXXXXX init_sam_from_ldap: Entry

Perhaps I'm rooting around at a lower level than I should be, and somewhat beyond what I can understand, but here is a bit of info I dug up. It might be helpful? The GUID in the first search matches the one referred to in the error message. $ sudo ldbsearch -H /var/lib/samba/private/sam.ldb.d/DC\=DOMAINDNSZONES\,DC\=REDACTED\,DC\=DOMAIN\,DC\=LOCAL.ldb "(DC=DomainDnsZones)" # record

Tested again to join, now clearing both Kerberos, Samba config and Samba private folder. The new log now has some more details (resolve_lmhosts: Attempting lmhosts lookup for name SRVAD-OLD.SAMDOM.LOCAL<0x20>), but I'm still not able to join. Wonder why is it trying to do an lmhosts lookup, 4.6 is not. An identical server (with same hostname and IP) with Samba 4.6 joins without

Yes, I am running 4.7.3 on both servers. One has been upgraded (many times). The new one, obviously, is freshly installed. I am running DNS on the domain controller. In fact, I'm running all the default "server services". As I said, I have had some problems in the past, and for a while the DNS was not working (perhaps due to some database corruption) and I had to switch it off in

Hi there, I am struggling with samba4 and the internal dns and kerberos. It seems that DNS is the problem. When I aske for kerberos dns entrys on my workstation, I get this (11.22.33.202 is the samba4 server): root at lit2:~# dig _kerberos._udp.DOMAIN.LOCAL @11.22.33.202 ; <<>> DiG 9.7.3 <<>> _kerberos._udp.DOMAIN.LOCAL @11.22.33.202 ;; global options: +cmd ;; Got

Hello, I run Samba 3.6.3. on ubuntu server, whre the domain works fine. Hoever when I try to migrate to Samba 4.1 from sernet distribution, I finish with Classicupgrade on the below error. I know it hase to do with bad group mapping, but I am not able to find the mistake. Please help. root at server:/var/lib/samba# samba-tool domain classicupgrade --dbdir=/var/lib/samba.PDC/dbdir/

On 30.08.19 11:01, Andrew Bartlett wrote: > I'm very sorry to advise that this script is not race-free in the > locking done on the AD databases, which is why we have written the > 'samba-tool domain backup offline' tool which holds the correct locks. > > You should only need to back up the domain on one DC as long as you are > confident the DC is correctly

I happily and trustfully use Louis' backup-script from https://github.com/thctlo/samba4 to dump AD content via cronjob. Is it necessary/recommended to do that on *each* samba DC? Is there something server-specific in the dump(s) or is it enough to do that once per domain? thanks ...

Tested again to join, now clearing both Kerberos, Samba config and Samba private folder. The new log now has some more details (resolve_lmhosts: Attempting lmhosts lookup for name SRVAD-OLD.SAMDOM.LOCAL<0x20>), but I'm still not able to join. Wonder why is it trying to do an lmhosts lookup, 4.6 is not. An identical server (with same hostname and IP) with Samba 4.6 joins without

Hi, I have downgraded samba 4.7 (van-belle repository) to 4.5.16 from the Debian 9 repository and was able to put it in the domain. root at samba4-new-dc:/etc/samba# samba -V Version 4.5.16-Debian samba-tool domain join empresa.com.br DC -k yes -d 3 --server= samba4-dc1.empresa.com.br root at samba4-new-dc:/etc/samba# samba-tool domain join empresa.com.br DC -k yes -d 3

Thanks for your help. > On the Windows DC can you check that the A record is actually created? Yes, it is, and it persists after join failure. Another sign of presence of SRVAD-NEW on the old DC is the new computer account, created in "Domain controllers" folder in "Active Directory Users and Computers" at the beginning of join procedure then automatically removed just

It seems I'm talking to myself... anyway another test here: Added the existing DC IP config to /etc/hosts and the join now shows a more explicit LDAP error: --- Wrong username or password: kinit for SRVAD-NEW$@SAMDOM.LOCAL failed (Preauthentication failed) SPNEGO(gssapi_krb5) creating NEG_TOKEN_INIT for ldap/SRVAD-OLD.SAMDOM.LOCAL failed (next[ntlmssp]): NT_STATUS_LOGON_FAILURE Got

Ah, so the error changed.. ? Can you try ? samba-tool domain join empresa.com.br DC -k yes -d 3 --server=samba4-dc01.empresa.com.br? so we try to join through samba4-dc1 and not the windows DC. ? Looking at below again. (objectclass=primaryDomain))' base: 'cn=Primary Domains': No such object: dsdb_search at ../source4/dsdb/common/util.c:4691) and from

Having lots of problems with a restored from backup installation of Samba 4.1.9 on FreeBsd cannot use windows tools to assign permissions to shares, and now when a problem creating a Gpo. with log level 10 this is the output: root at BSD:/home # samba-tool gpo create testgpo INFO: Current debug levels: all: 10 tdb: 10 printdrivers: 10 lanman: 10 smb: 10 rpc_parse: 10 rpc_srv: 10

I?m using SAMBA 3.0.4-6.3E as a PDC. I have Win98, WinNT4 and Win2000 clients successfully joined to the domain. But I can?t get an XP box to join. The XP machine can ?see? shares on the SAMBA PDC but strangely does not show up in network neighbourhood. You can find it if you search for it. The PDC is just using smbpasswd, no LDAP The machine add line in my smb.conf is as follows..... add

Dear all, I recently upgraded to Samba 2.0.3 and read the doc files about NT machines because I cannot connect to the Samba server. In the WinNT.txt file there is the following proposal: [ --- Start of pasted text --- ] The following registry entry change will re-enable clear text password handling: Run regedt32.exe and locate the hive key entry:

Hello! I've got this error dns_tkey_negotiategss: TKEY is unacceptable when running samba_dnsupdate --verbose With this error dynamic entries stopped working as Type A machines that entered in the field or entry to a new DC. Already tried the step described here https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable But when trying to delete the account used the