similar to: Intermittent access to Sysvol/Netlogon shares

My reverse zones have PTR records. Though I don't have NS records for all of my DC's. I guess that needs to be manually created. Also, you don't have any CNAMES or domain overrides pointing to a single DC? Perhaps Bind is pointing to another internal DNS server, and then to a public DNS? ---- Here's a way to test failover from a Windows client: You can switch logon servers

I had a working domain and then I realized I was spelling it wrong all this time. So I created a VM and installed samba with ad support on it I used the instructions from https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller all the tests for the DNS entries checked out kinit checked out klist shows my key On other computers even When I went to join my window 10

> > ntlm auth = mschapv2-and-ntlmv2-only > > Why do you need the line above ? This is part of security hardening, to prevent the use of NTLMv1 authentication protocol (except for MSCHAPv2 authentication scheme) > > restrict anonymous = 2 > > disable netbios = yes > > I am not sure that is the correct way to do it on a DC, I do know that > the 'nbt' server

Is the primary DNS on the windows machine set to the AD domain controller? On Jul 30, 2016 4:42 PM, "Jeff Sadowski" <jeff.sadowski at gmail.com> wrote: > following here > https://www.samba.org/samba/docs/using_samba/ch12.html > I decided to use explorer to test getting to it and I notice I can connect > to the server using the Administrator user and password and see

Hi it looks that latest windows 11 24H2 breaks Samba NT4 domain join even with registry changed as described in https://wiki.samba.org/index.php/Required_Settings_for_Samba_NT4_Domains windows does not resolve domain name and nltest /dsgetdc also fails with Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN already joined computers can still open domain session after update to 24h2 -- Arnaud

I tried using samba's internal dns server just to see if this made a difference, but it did not. On Sat, Jul 30, 2016 at 9:06 PM, Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > It is. I am using bind and include the .../samba/private/named.conf in my > primary bind file and changed the group of .../samba/private to named so > named could read the files. > > On Sat,

2015-06-23 20:47 GMT+02:00 Daniel Carrasco Mar?n <danielmadrid19 at gmail.com>: > > El 23/6/2015 8:33 p. m., "Sketch" <smblist at rednsx.org> escribi?: > > > > On Tue, 23 Jun 2015, Rowland Penny wrote: > > > >> On 23/06/15 18:58, Daniel Carrasco Mar?n wrote: > >>> > >>> Hi, > >>> > >>>

Hi all, I'm looking for the same setup: two samba ad servers to back up each other on failover. Have you managed to find a viable solution? Thanks in advance! 2015-06-24 19:41 GMT+03:00 Daniel Carrasco Marín <danielmadrid19 at gmail.com>: > 2015-06-24 11:12 GMT+02:00 Daniel Carrasco Marín <danielmadrid19 at gmail.com > >: > > > > > > > 2015-06-23

Hello Kris, On 13/02/2020 19:28, Kris Lou via samba wrote: > My reverse zones have PTR records. Though I don't have NS records for all > of my DC's. I guess that needs to be manually created. I have NS records for all 2 of my DC's and I just followed the Installation page on the Wiki. > Also, you don't have any CNAMES or domain overrides pointing to a single >

On 13/02/2020 16:28, Paul Littlefield wrote: > On 13/02/2020 15:17, Rowland penny via samba wrote: >> The various ways have already been mentioned, but are all your DCs >> listed as nameservers (NS) in the SOA's for the forward and reverse >> zones ? > > > I think so... > > > root at dc3.mydomain.com ~ $ (screen) samba-tool dns query dc3 >

Hello Kris, On 03/02/2020 07:15, Kris Lou via samba wrote: > Unless it's_not_ a global catalog. Check your SRV records again, there > should be corresponding "_gc" records (similar to "_ldap") for each DC. Checked and both DCs pass all tests:- host -t SRV _ldap._tcp.mydomain.com. host -t SRV _gc._tcp.mydomain.com. host -t SRV _kerberos._udp.mydomain.com. host -t

On 03/02/2020 18:49, Kris Lou via samba wrote: > > From windows: > echo %logonserver% \\DC3 > nltest /dsgetdc:<domain> DC:\\DC3 Address: \\192.168.0.218 Dom Guid: bla bla bla ... The command completed successfully. > From a *nix domain member (i.e. client, not DC): > wbinfo --getdcname=<domain> > winbind --ping-dc wbinfo --getdcname=MYDOMAIN DC3 wbinfo

On Wed, 21 Aug 2024 14:11:52 +0200 L?o <dlopoel at gmail.com> wrote: > Hello Rowland, > > Here it is: > > smb.conf: > --- > [global] > dns forwarder = 9.9.9.9 > netbios name = DC1 > realm = AD.EXAMPLE.COM > server role = active directory domain controller > workgroup = AD > idmap_ldb:use rfc2307 = yes > > min protocol = SMB2 The above line

On Wed, Aug 3, 2016 at 1:43 AM, Rowland Penny <rpenny at samba.org> wrote: > > See inline comments > And Please keep replies to the list > > On Tue, 2 Aug 2016 15:08:26 -0600 > Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > > > Samba's wiki didn't have a walk through working example from A to Z. > > It is great don't get me wrong but I

I have a samba classic domain, with a Samba 3.5.10 domain controller. I am trying to join a Windows Server 2012 R2 client. I have updated the registry. HKLM\SYSTEM\CCS\Services\LanmanWorkstation\Parameters DWORD DomainCompatibilityMode 1 DWORD DNSNameResolutionRequired 0 These changes allow Windows 7 Pro desktops to join the domain. I have not tried with Windows 8 or

Hello, I have PDC sernet samba 4.1.6 (DOM4) and BDC w2k8 (domain & forest level 2008R2) I'd like use web services from w2k8, but if I run from windows nltest /dsgetdc:DOMAIN /ws samba return: Getting dc name failed: Status = 1355 0x54b ERROR_NO_SUCH_DOMAIN If nltest direct query to samba server i get this error, but if is query directed to w2k8 all works fine. But I dont know how

Hello Rowland, >> 3. I see the errors in the System log on the former DC (vm-dc1), like: >> The dynamic registration of the DNS record '_ldap._tcp.DomainDnsZones.domain.com. 600 IN SRV 0 100 389 vm-dc1.domain.com.' failed on the following DNS server: >> >> DNS server IP address: 172.26.1.83 >> Returned Response Code (RCODE): 0 >> Returned Status Code:

following here https://www.samba.org/samba/docs/using_samba/ch12.html I decided to use explorer to test getting to it and I notice I can connect to the server using the Administrator user and password and see the netlogon and sysvol shares but can not go into either. On Sat, Jul 30, 2016 at 11:33 AM, Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > I had a working domain and then I

It is. I am using bind and include the .../samba/private/named.conf in my primary bind file and changed the group of .../samba/private to named so named could read the files. On Sat, Jul 30, 2016 at 3:06 PM, Jason Waters <jason at geeknocity.com> wrote: > Is the primary DNS on the windows machine set to the AD domain controller? > > On Jul 30, 2016 4:42 PM, "Jeff

I just installed ubuntu-16.04 and followed the instructions I found for it. problems I ran into that way I removed apparmer and I had to use bindflatfile as dlz was not working for me I got my machine connected. I'll figure out fedora later. On Sat, Jul 30, 2016 at 9:24 PM, Jeff Sadowski <jeff.sadowski at gmail.com> wrote: > I tried using samba's internal dns server just to see