similar to: Intermittent access to Sysvol/Netlogon shares

My reverse zones have PTR records. Though I don't have NS records for all of my DC's. I guess that needs to be manually created. Also, you don't have any CNAMES or domain overrides pointing to a single DC? Perhaps Bind is pointing to another internal DNS server, and then to a public DNS? ---- Here's a way to test failover from a Windows client: You can switch logon servers

I had a working domain and then I realized I was spelling it wrong all this time. So I created a VM and installed samba with ad support on it I used the instructions from https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller all the tests for the DNS entries checked out kinit checked out klist shows my key On other computers even When I went to join my window 10

> > ntlm auth = mschapv2-and-ntlmv2-only > > Why do you need the line above ? This is part of security hardening, to prevent the use of NTLMv1 authentication protocol (except for MSCHAPv2 authentication scheme) > > restrict anonymous = 2 > > disable netbios = yes > > I am not sure that is the correct way to do it on a DC, I do know that > the 'nbt' server

Is the primary DNS on the windows machine set to the AD domain controller? On Jul 30, 2016 4:42 PM, "Jeff Sadowski" <jeff.sadowski at gmail.com> wrote: > following here > https://www.samba.org/samba/docs/using_samba/ch12.html > I decided to use explorer to test getting to it and I notice I can connect > to the server using the Administrator user and password and see

Hi it looks that latest windows 11 24H2 breaks Samba NT4 domain join even with registry changed as described in https://wiki.samba.org/index.php/Required_Settings_for_Samba_NT4_Domains windows does not resolve domain name and nltest /dsgetdc also fails with Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN already joined computers can still open domain session after update to 24h2 -- Arnaud

I tried using samba's internal dns server just to see if this made a difference, but it did not. On Sat, Jul 30, 2016 at 9:06 PM, Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > It is. I am using bind and include the .../samba/private/named.conf in my > primary bind file and changed the group of .../samba/private to named so > named could read the files. > > On Sat,

2015-06-23 20:47 GMT+02:00 Daniel Carrasco Mar?n <danielmadrid19 at gmail.com>: > > El 23/6/2015 8:33 p. m., "Sketch" <smblist at rednsx.org> escribi?: > > > > On Tue, 23 Jun 2015, Rowland Penny wrote: > > > >> On 23/06/15 18:58, Daniel Carrasco Mar?n wrote: > >>> > >>> Hi, > >>> > >>>

Hello, we are testing a dc/rodc configuration with Samba AD, but we are stuck with a problem that occurs when one of the writable DCs (the one that was used as a partner during rodc join) is shutdown: Test configuration: - writeable dc and read only dc Samba 4.21 installed on Debian 12, with two sites configured - 2 writetable dc named dc-1 and dc-2 on central site -

Hi all, I'm looking for the same setup: two samba ad servers to back up each other on failover. Have you managed to find a viable solution? Thanks in advance! 2015-06-24 19:41 GMT+03:00 Daniel Carrasco Marín <danielmadrid19 at gmail.com>: > 2015-06-24 11:12 GMT+02:00 Daniel Carrasco Marín <danielmadrid19 at gmail.com > >: > > > > > > > 2015-06-23

Hello Kris, On 13/02/2020 19:28, Kris Lou via samba wrote: > My reverse zones have PTR records. Though I don't have NS records for all > of my DC's. I guess that needs to be manually created. I have NS records for all 2 of my DC's and I just followed the Installation page on the Wiki. > Also, you don't have any CNAMES or domain overrides pointing to a single >

On 13/02/2020 16:28, Paul Littlefield wrote: > On 13/02/2020 15:17, Rowland penny via samba wrote: >> The various ways have already been mentioned, but are all your DCs >> listed as nameservers (NS) in the SOA's for the forward and reverse >> zones ? > > > I think so... > > > root at dc3.mydomain.com ~ $ (screen) samba-tool dns query dc3 >

Hello Kris, On 03/02/2020 07:15, Kris Lou via samba wrote: > Unless it's_not_ a global catalog. Check your SRV records again, there > should be corresponding "_gc" records (similar to "_ldap") for each DC. Checked and both DCs pass all tests:- host -t SRV _ldap._tcp.mydomain.com. host -t SRV _gc._tcp.mydomain.com. host -t SRV _kerberos._udp.mydomain.com. host -t

On 03/02/2020 18:49, Kris Lou via samba wrote: > > From windows: > echo %logonserver% \\DC3 > nltest /dsgetdc:<domain> DC:\\DC3 Address: \\192.168.0.218 Dom Guid: bla bla bla ... The command completed successfully. > From a *nix domain member (i.e. client, not DC): > wbinfo --getdcname=<domain> > winbind --ping-dc wbinfo --getdcname=MYDOMAIN DC3 wbinfo

On Tue, 24 Dec 2024 11:38:17 +0000 Manzini Enrico via samba <samba at lists.samba.org> wrote: > Hello, > we are testing a dc/rodc configuration with Samba AD, but we are > stuck with a problem that occurs when one of the writable DCs (the > one that was used as a partner during rodc join) is shutdown: Test > configuration: > - writeable dc and read only dc Samba

On Thu, 2 Jan 2025 08:25:56 +0000 Manzini Enrico <emanzini at zensistemi.com> wrote: > Hi Rowland > > I try some several test and: > - tried fsmo transfer from the rwdc used as replication partner to > the secondary dc, no luck, problem persist > - tried join with no replication partner specification, no luck, > problem persist Also during the join procedure the rodc

On Wed, 21 Aug 2024 14:11:52 +0200 L?o <dlopoel at gmail.com> wrote: > Hello Rowland, > > Here it is: > > smb.conf: > --- > [global] > dns forwarder = 9.9.9.9 > netbios name = DC1 > realm = AD.EXAMPLE.COM > server role = active directory domain controller > workgroup = AD > idmap_ldb:use rfc2307 = yes > > min protocol = SMB2 The above line

On Wed, Aug 3, 2016 at 1:43 AM, Rowland Penny <rpenny at samba.org> wrote: > > See inline comments > And Please keep replies to the list > > On Tue, 2 Aug 2016 15:08:26 -0600 > Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > > > Samba's wiki didn't have a walk through working example from A to Z. > > It is great don't get me wrong but I

I have a samba classic domain, with a Samba 3.5.10 domain controller. I am trying to join a Windows Server 2012 R2 client. I have updated the registry. HKLM\SYSTEM\CCS\Services\LanmanWorkstation\Parameters DWORD DomainCompatibilityMode 1 DWORD DNSNameResolutionRequired 0 These changes allow Windows 7 Pro desktops to join the domain. I have not tried with Windows 8 or

Hello, I have PDC sernet samba 4.1.6 (DOM4) and BDC w2k8 (domain & forest level 2008R2) I'd like use web services from w2k8, but if I run from windows nltest /dsgetdc:DOMAIN /ws samba return: Getting dc name failed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN If nltest direct query to samba server i get this error, but if is query directed to w2k8 all works fine. But I dont know how

Hello Rowland, >> 3. I see the errors in the System log on the former DC (vm-dc1), like: >> The dynamic registration of the DNS record '_ldap._tcp.DomainDnsZones.domain.com. 600 IN SRV 0 100 389 vm-dc1.domain.com.' failed on the following DNS server: >> >> DNS server IP address: 172.26.1.83 >> Returned Response Code (RCODE): 0 >> Returned Status Code: