similar to: RODC DNS oddness

Is this a problem? Does this mean no replication links exist? michael at sles-bree:~> samba-tool drs showrepl -k yes Bree\SLES-BREE DSA Options: 0x00000025 DSA object GUID: 7ea641b0-d418-4c74-a4fa-c15b852467b8 DSA invocationId: 1017ff29-756c-4777-b395-b481f4b5387c ==== INBOUND NEIGHBORS ==== ==== OUTBOUND NEIGHBORS ==== ==== KCC CONNECTION OBJECTS ==== Connection -- Connection name:

We've joined an RODC to the domain (Windows 2008R2 running a W2003 FFL/DFL AD) but are getting these errors on first startup. It was joined with: samba-tool domain join main.adlab.netdirect.ca RODC --realm=main.adlab.netdirect.ca --username=administrator at main.adlab.netdirect.ca --dns-backend=BIND9_DLZ but we get these errors right after startup: Nov 28 12:35:27 sles-bree samba[3939]:

OK! I'm getting farther and farther! :) I've managed to preload user and computer passwords onto a samba RODC: *sles-shire:/var/lib/samba/sysvol # samba-tool rodc preload 'win7-shire$' --server main.adlab.netdirect.ca** *Replicating DN CN=WIN7-SHIRE,CN=Computers,DC=main,DC=adlab,DC=netdirect,DC=ca Exop on[CN=WIN7-SHIRE,CN=Computers,DC=main,DC=adlab,DC=netdirect,DC=ca]

OK, further to my previous message I've configured BIND, but when I try to run samba_dnsupdate I get the following: Nov 18 16:19:23 sles-shire named[6112]: samba b9_putrr: unhandled record type 0 Nov 18 16:19:24 sles-shire named[6112]: samba_dlz: starting transaction on zone _msdcs.main.adlab.netdirect.ca Nov 18 16:19:24 sles-shire named[6112]: samba_dlz: disallowing update of

I would like to get samba4 working with AD and rfc2307 attributes, while allowing the nice remote management available via samba4. Using sernet-samba packages on 4.1.3-7.el6.x86_64 CentOS 6. I have samba4 configured as follows: krb5.conf: [libdefaults] default_realm = MAIN.ADLAB.NETDIRECT.CA dns_lookup_realm = true dns_lookup_kdc = true ticket_lifetime = 24h renew_lifetime = 7d forwardable =

I've set up a lab for testing Samba 4.1 as an RODC emulating a satellite office setup, using the sernet packages on SLES11SP2. ## Problem 1 samba_dnsupdate is failing: ==> /var/log/samba/log.samba <== [2013/11/18 13:22:37.416193, 0] ../lib/util/util_runcmd.c:317(samba_runcmd_io_handler) /usr/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify failure [2013/11/18

I was hoping this would be simpler. I'd like to prepopulate an RODC with all users accounts that are permitted. But I can only pre-populate one at a time: samba-tool rodc preload (<SID>|<DN>|<accountname>) sles-shire:~ # samba-tool group listmembers 'Allowed RODC Password Replication Group - Shire' Allowed RODC Password Replication Group - Global WIN7-SHIRE$ bilbo

This mail message follows from several discussions with Luke Leighton. It's mostly technical in nature but I'm submitting to all mailing lists anyway (Luke's suggestion). We have our Samba server running with the Berkeley AMD automounter (nothing peculiar here). In order for our Samba users to walk the automount tree, we created a program to create symbolic links from the local

Hello, I'm trying to get samba4 up and running as a DC in a lab environment. I have a freshly installed AD environment (W2012R2 servers, W2008R2 functional level) and I'm trying to join samba4 to it as a domain controller. When I try, I get this: # samba-tool domain join ad.netdirect.ca DC -Uadministrator --realm=AD.NETDIRECT.CA -W AD Finding a writeable DC for domain

I've configured a new RHEL DC with sernet samba 4.1.4 and a domain just upgraded from classic with an LDAP backend. I need to configure the DC with user accounts and since: * I can't use winbind on a DC * I can't use SSSD with the sernet packages it looks like the best thing to use is LDAP. I've configured it with: authconfig --enableldap --enableldapauth

On Wed, 7 Jun 2017 10:29:12 -0700 Nowell Morris via samba <samba at lists.samba.org> wrote: > Hello all. > > I am currently working on setting an S4 domain to replace our aging > samba 3 setup. We have found many answers on the net, in various > documentation, but when it comes to setting up beyond one node > documentation becomes a little thinner. Have you by any

Hi I am testing FC5 before upgrading my main server and I am getting errors with dovecot 1.0 beta3 - both the distributed RPM and also the one at ATrpms thunderbird (the distributed version which is thunderbird-1.5-6) I am running both dovecot and thunderbird on the same machine, pointing thunderbird at 127.0.0.1 for its imap server. The symptoms are an inability to access mail -

Hi One Wed I posted the following message and have had no replies. I am reposting as I think this is a Dovecot bug but I am not sure. If anyone can assist on this I'd be most grateful. Tks ----------------------------------------------------- Hi I am testing FC5 before upgrading my main server and I am getting errors with dovecot 1.0 beta3 - both the distributed RPM and also the

Hi guys, I'm about to replace an existing Windows Server 2003 Active Directory domain with Samba4 (package from Debian Wheezy). Joining the Samba4 dc according the Samba Wiki[1] is working great, replication works without errors from both worlds (windows or samba). After transferring the fsmo roles with ntdsutil to the samba4 domain controller (btw: does it matter if ntdsutil or samba-tool

Hi, I think the problem is in Dovecot. I'm using both Evolution and Thunderbird on a Gentoo box. One of my folders keeps locking up and the clients can't retrieve the messages. The situation appears to be triggered by trying to move a message into that folder. Deleting the index files (under /var/log/dovecot/xxx/) solves the problem (temporarily). I get these error messages in the

Rowland, thank you for the reply. I must have misstated. We have successfully setup our first DC. It works great with DHCP and BIND9_DLZ and updates nicely as it is designed to, kerberos and all. The question is about the second server. Perhaps MY understanding of what I have read on the samba wiki, and others, is different than actual reality. http://bit.ly/2r3IOjt ;) Perhaps if I show

Hello all. I am currently working on setting an S4 domain to replace our aging samba 3 setup. We have found many answers on the net, in various documentation, but when it comes to setting up beyond one node documentation becomes a little thinner. We are setting up a Primary DC with AD, using BIND9_DLZ, also serving dhcp from Primary, and we want to setup a Secondary that is both a

I have my own custom schema for email that I have been using for years with courier_imap and exim. I am experimenting with dovecot and trying to set up my conf so that it logs in using the ldap database. In the dovecot-ldap.conf there is a section # Filter for user lookup. Some variables can be used (see # http://wiki.dovecot.org/Variables for full list): # %u - username # %n - user

I'm testing out our samba 4 migration process and when the initial forest/domain was created, it was created without using --use-rfc2307: sudo samba-tool domain provision --domain netdirect --function-level=2008_R2 --realm=ad.netdirect.ca Now that it's in place and we have machines joined, what do I need to do to add the unix attribute and NIS maps to an existing samba4 domain so

OK, I am running (for many years now) an existing courier_imap maildir ++ setup with exim as the MTA. Has been fine. I have my own custom ldap schema for user account definition and authorization. I installed dovecot 1.0 beta 7 as a test and have it listening on a different port. I would like, if possible, to set things up so that a user could use either dovecot or courier. Having to