similar to: Samba4 AD with bind DNS / TKEY is unacceptable

Hello list, I have a problem with a samba 4.1.2 (Sernet Package) on SLES 11 SP3. Every few days samba (which works as a single ad controller) says "NT_STATUS_TOO_MANY_OPENED_FILES" and stopps working. To fix this Problem our customer reboots the machine. The logfile says: "Apr 15 02:48:37 s4ad samba[3058]: [2014/04/15 02:48:37.495691, 0]

Hello List, in the following environment SUSE Linux Enterprise 11SP3 with bind 9.9.4P2 and the Sernet samba packages in version 4.1.7. samba works as AD PDC. Every few days our bind dns server denies updates. It looks like a problem with kerberos and the bind_dlz driver: Jul 2 08:04:21 s4ad named[22579]: samba_dlz: starting transaction on zone baettenhausen.local Jul 2 08:04:21 s4ad

Hi, I have problem with GPO and dns/kerberos resolution I do a samba -i -d3 to a log file and started on client: gpupdate /force: lpcfg_load: refreshing parameters from /srv/samba/etc/smb.conf params.c:pm_process() - Processing configuration file "/srv/samba/etc/smb.conf" samba version 4.1.0rc2 started. Copyright Andrew Tridgell and the Samba Team 1992-2013 ... ldb_wrap open of

12.08.2015 15:22, Rowland Penny пишет: > On 12/08/15 12:17, Dmitry MiksIr wrote: > > Hi, I think your kerberos ticket is expiring, but don't really know why. > > As Louis as said, you don't need these lines in krb5.conf: > > ticket_lifetime = 24h > renew_lifetime = 7d > Ok, i will try to remove. Lets see. > You also don't need these lines in smb.conf:

On 18/12/14 16:19, Germ van Eck wrote: > Not sure about the high CPU load, but you have the [netlogon] share > twice in your smb.conf. Your first matches mine, have you added the > second yourself? > The second one looks weird with 2 path definitions. > Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]: >> New to linux and new to Samba so any direction in troubleshooting

New to linux and new to Samba so any direction in troubleshooting would be helpful. Here is what I have so far. Within a half an hour of a reboot of the server my cpu reaches high numbers and becomes slow to respond on all actions. With my limited understanding I have used vmstat to observe the system. I noticed is that the numbers of forks grows from 1-2k to 43k within 30 minutes after reboot. I

Hi, We have an issue where an existing Win 10 client is already part of the domain, however it's DNS entry isn't updated, Is this bug related? https://bugzilla.samba.org/show_bug.cgi?id=11520 please see details below Ubuntu: 16.04.01 LTS Samba: Version 4.3.9-Ubuntu Samba Internal DNS 'allow dns updates = nonsecure' is not specified >ipconfig /registerdns Samba-Log: sudo

Hi I got some strange issues on my samba4.0.1 install yesterday. It happened a while after updating my xubuntu server 13.04 not 13.10. Everything seems to be working fine except shares. Kerberos authentication seem to function properly, also DNS works fine but shares seem semi-broken. I can't mount any shares on my Windows box, including netlogon, profiles. I have one share that is

Hi, We have three DC's, and one of them has been misbehaving a few times lately, stopping to replicate, showing the following error in samba-tool drs showrepl, for all DC partitions: > DC=DomainDnsZones,DC=samba,DC=company,DC=com > Default-First-Site-Name\DC2 via RPC > DSA object GUID: 5e93a102-2963-496a-af16-0c51eebb2e31 > Last attempt @ Wed Nov 11 06:41:21 2015 CET

Hi! I'm using Samba in an AD setup, (version 4.2.0) and I'm looking for a way to change the password of a user from the command line, as a non-root user. I know I can use 'smbpasswd', 'samba-tool user setpassword', or 'samba-tool user password', but these all seem to require root privileges. When I run them as root, they work, but when I run them as non-root

Hello, one of my S4 ADs shows a strange behavior. The Server is a stand-alone ad controller with bind (bind_dlz) as dns-server. The Samba Version is 4.1.2 running on SLES11 SP3. If i add a new A-record with the DNS-Tool from the Microsoft remote-server-tools an check the box "verkn?pften PTR-Eintrag erstellen", it creates the A-Record, but not the pointer-record. If i join the

Oh, that doesn't sound good... Arch Linux. I did a regular system upgrade using pacman -Syu which automatically upgrades all packages to their latest version. I have another, practically identical system and I didn't have this issue there. Though I might have had a smaller jump between versions. On Sat, 22 Dec 2018 at 22:21, Rowland Penny via samba <samba at lists.samba.org>

We have 3 ADCs based on Samba-4.7.4 (compiled from source,internal DNS)/ CentOS7: dcdo1,dcnh1 and dcge1. dcge1 holds all FSMO roles. The 3 ADCs are on different locations connected via IPSec based VPN. No traffic is filtered out. All 3 ADCs replicate fine except dcdo1 -->dcnh1. Symptom: [root at dcdo1 ~]# samba-tool drs replicate dcnh1.ad.kdu.com dcdo1.ad.kdu.com dc=ad,dc=kdu,dc=com

Then I don't know what caused it. I had no problems prior to the upgrade, and the upgrade was done without errors.. Unfortunately, no, I don't have backups. 'sam.ldb' is still there, though, and so are the databases unter 'sam.ldb.d'. Yes, I tried restarting Samba, even rebooted the server but to no avail. Here are the results from running samba in the shell: lpcfg_load:

On Wed, 27 Dec 2017 13:00:05 +0100 "Dr. Johannes-Ulrich Menzebach via samba" <samba at lists.samba.org> wrote: > There is additional info in the logs of the source DC (dcdo1, log > level 2, manually triggered another replication): > ==================== > [2017/12/27 12:31:29.695121,  2] >

Thank you Rowland!! Sorry about my ignorance. I guess I tried many different things and polluted the smb.conf file. I've removed every single line you mentioned off my smb.conf. Still the problem persists: MYDOMAIN\Administrator (S-1-5-21-1965676298-842383976-2353361141-500) is changing password of user2 at MYDOMAIN.org.ar [2017/04/21 12:05:42.233899, 3]

Hi, there is no firewall, all DCs are in the same subnet. here ist the output of a test, you can see, the CNAME guid entries in the _msdcs can be resolved on any DC: (DC1 and DC2 are the first and second DCs, SAMBA3 was added at last. ldbsearch -H /srv/samba/private/sam.ldb '(invocationId=*)' --cross-ncs objectguid # record 1 dn: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-

Hi, i have the same problem on samba 4.7.3 and 4.7.4. I start with 2 DCs and the sync works fine. After the join of a third DC mostly i get the WERR_DS_DRA_ACCESS_DENIED. I tested it for 10 times. in my case i have: DC1 (with any FSMO Roles) DC2 new join as DC: DC3 After the join, the sync from DC2 to DC3 fails. samba-tool drs replicate dc2 dc1 dc=gvcc,dc=net : OK samba-tool drs replicate

Dear All, Need some help as I was trying to follow the guide below. https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC Until the steps of ldbsearch -H /usr/local/samba/private/sam.ldb '(invocationid=*)' --cross-ncs objectguid and my ldbsearch reply with such a result. ldb: unable to dlopen /usr/lib64/samba/ldb/acl.so : /usr/lib64/ldb/libreplace.so: version

Hello, I've followed two or three articles on how to configure samba 4 as a member server. One of these articles is from the samba wiki: https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server The server joins, but it cannot authenticate users. I don't care about nss, winbind, etc. unless it is REALLY necessary. All I want is to use this server as a file server for workstations