similar to: issues joining second DC

Guys can you tell me if a samba 4 DC implements any kerberos polices. am wanting to extend our kerberos ticket expiry values to 24hours is this possible ? -- Damien Dye IT Manager *Sondrel Ltd* Sondrel House, Theale Lakes Business Park Moulden Way, Sulhamstead, Berkshire, RG7 4GB, UK Tel: +44(0)118 9838 550 www.sondrel.com [image: Sondrel] <http://www.sondrel.com/> This e-mail and

Guys is it possible on samba 4 to raise the expiry time on tgt tickets to be more than 10 hours ? I have users running scripts that need a longer expiry time on the token on another side note is it the Samba 4 DC that decides the renewal date of the tokens also ? Regards -- Damien Dye IT Manager *Sondrel Ltd* Sondrel House, Theale Lakes Business Park Moulden Way, Sulhamstead, Berkshire,

Guys am having some joining a windows server 2012 r2 to a samba 4.1.6 AD domain the server is failing looking looking for an RPC service that samba doesn't appear to be providing has anybody been able to to join said server to a samba AD instance ? -- Damien Dye IT Manager *Sondrel Ltd* Sondrel House, Theale Lakes Business Park Moulden Way, Sulhamstead, Berkshire, RG7 4GB, UK

Guys the samba 4 LDAP server is there any config options to make it less aggressive at closing sessions am running nslcd and the system LDAP connections with samba are being closed instantly after a request. with the same configuration with windows the connections stays persistent and resolution is much faster. -- Damien Dye IT Manager *Sondrel Ltd* Sondrel House, Theale Lakes Business

Hi guys am looking for some guidance on how I can generate some keytab files from a samba 4 DC I been following a tutorial that states some bits on the windows side such as creating an spn C:\Users\Administrator>setspn -A host/test.sondrel.com at SONDREL.COM Test Registering ServicePrincipalNames for CN=Test,OU=Machines,DC=sondrel,DC=com host/envy.sondrel.com at SONDREL.COM Updated

All got an issue I have a VBS that should join machines to the domain but it's not working get access denied instantly anybody got any working scripts they would like to share with me. btw my script that doesn't work is below ' Join a Computer to a Domain Const JOIN_DOMAIN = 1 Const ACCT_CREATE = 2 Const ACCT_DELETE = 4 Const WIN9X_UPGRADE = 16 Const DOMAIN_JOIN_IF_JOINED =

Dear fellow Samba users am having some issues with GPOs deployed from samba4 am getting this on clients C:\Users\Administrator>gpupdate /force Updating Policy... User Policy update has completed successfully. Computer policy could not be updated successfully. The following errors were encountered: The processing of Group Policy failed. Windows attempted to read the file \\

Guys needing some help with LDAP queries against samba4 this command works against MS AD's LDAP (&(objectCategory=person)(objectClass=user)(mail=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) but with samba4 I get C:\Users\Administrator>dsquery * --filter (&(objectCategory=person)(objectClass=user)(mail=*)(!(userAccountControl:1.2.840.113556.1.4.803:=2))) I get the

Hi guys am needing some help, am using bind to provide the DNS backend for samba using dlz resolution works well however!! my clients are not able to update the registered DNS entries when running samba_dnsupdate against the samba DLZ named server am getting ; Communication with 127.0.0.1#53 failed: timed out could not talk to any default name server Failed nsupdate: 1 Then bind stops

I have set up a samba 4.1.3 server and everything is working as it should be, but checking the dns I have notice that sometimes there are some extrange record that come and go, check this images to see what I am talking about http://imageshack.com/a/img580/4350/si8p.png http://imageshack.com/a/img27/3659/wedn.png http://imageshack.com/a/img577/4876/l0kl.png

On Fri, 2018-07-06 at 15:50 +0800, Ryan via samba wrote: > Hello, > > I was trying to join a samba DC to an existing AD. But it failed when I used the command ‘samba-tool domain join euler.huawei.com DC ‘ to join it to the domain. Here’s the log: > > > euler-2:/usr/custom # samba-tool domain join euler.huawei.com DC --option='idmap_ldb:use rfc2307 = yes' -U vdsadmin

Hello everyone, I’ve met a strange problem with 4.8.3. I firstly built a DC using samba 4.8.3 in one linux, and I can create a domain ‘euler.huawei.com’ successfully. Then I try to install samba 4.8.3 in another linux mechine, and add it to the existed domain. It failed when I used the command ‘samba-tool domain join euler.huawei.com DC ‘ to join it to the domain. Here’s the log:

On Fri, 6 Jul 2018 15:50:08 +0800 (CST) Ryan via samba <samba at lists.samba.org> wrote: > Hello, > > I was trying to join a samba DC to an existing AD. But it failed when > I used the command ‘samba-tool domain join euler.huawei.com DC ‘ to > join it to the domain. Here’s the log: > > > euler-2:/usr/custom # samba-tool domain join euler.huawei.com DC >

and you have added the following to the /etc/hosts 172.16.99.3 pdc.domain.co.id pdc and you did setup your krb5.conf in that way you point directly to the correct hosts without the use of a search like: [logging] default = FILE:/var/log/krb5libs.log kdc = FILE:/var/log/krb5kdc.log admin_server = FILE:/var/log/kadmind.log [libdefaults] default_realm = SMBDOM.EXAMPLE.COM dns_lookup_realm =

Hello, I'm trying to get samba4 up and running as a DC in a lab environment. I have a freshly installed AD environment (W2012R2 servers, W2008R2 functional level) and I'm trying to join samba4 to it as a domain controller. When I try, I get this: # samba-tool domain join ad.netdirect.ca DC -Uadministrator --realm=AD.NETDIRECT.CA -W AD Finding a writeable DC for domain

On 21/07/19 2:59 AM, Ren? Schmidt via samba wrote: > Adding CN = SAD, CN = Servers, CN = Default First Site Name, CN = Sites, CN = Configuration, DC = mydom, DC = local > Adding CN = NTDS Settings, CN = SAD, CN = Servers, CN = Default First Site Name, CN = Sites, CN = Configuration, DC = mydom, DC = local > DsAddEntry failed with status WERR_ACCESS_DENIED info (8363,

Somebody knows if Samba 4.1 supports to join Windows 2012 server as a secondary DC?? Because after compiling samba 4.1 in an ubuntu server i try to join to a Windows 2012 server and get this error: root at samba41:~/compilar/samba-4.1.0# /root/compilar/samba-4.1.0/bin/samba-tool domain join zentyal.it.com DC -Uadministrator --realm=zentyal.it.com Finding a writeable DC for domain

Hello, I was trying to join a samba DC to an existing AD. But it failed when I used the command ‘samba-tool domain join euler.huawei.com DC ‘ to join it to the domain. Here’s the log: euler-2:/usr/custom # samba-tool domain join euler.huawei.com DC --option='idmap_ldb:use rfc2307 = yes' -U vdsadmin at euler.huawei.com Finding a writeable DC for domain 'euler.huawei.com'

I have a Win2k3 server and am trying to manage a Samba4 box (name:UBUNTUSERVER, running Ubuntu 12.04.3 + Samba 4.0.10) as a backup. All seemed well, but after a problem with replication (result 1306 WERR_REVISION_MISMATCH), I couldn't even demote the samba4 DC. So I deleted from SERVERW2K3, deleted /usr/local/samba and re-compiled everything. Also ran make quicktest, all seems OK. Now, this

Dear Andrew, I know you may not have time for this, but I found a list message from you in August ([cifs-protocol] Errors when doing a DsAddEntry ) where you show quite the same error I get when I try to join Samba 4a17 to a W2003 domain. I get to add partialy the server to the domain, but fails with "WERR_ACCESS_DENIED" at some point. I've searchead the web without finding a