similar to: Domain demote fails

When I DCPROMO a Win2003 server into an existing Samba4.1RC1 domain with two Samba DCs, all appears to be working correctly from the Samba side but the WinDC never starts sharing SysVol as it should. "Sites and Services" shows all DCs as expected and forcing repl with the Samba PDC works correctly while doing that with the second Samba DC shows the following: "The following

When does File Replication using NTFRS or DFS-R will be availabe? Does anybody already work on this item? Here would be some first documentation for this team in case it hasn't started yet: - NTFRS: http://technet.microsoft.com/en-us/library/cc759297(v=ws.10).aspx - SYSVOL replication: http://technet.microsoft.com/de-de/library/dd640019(v=ws.10).aspx - NTFRS migration to DFS-R:

Hello together, > * Report your success/failure! > * Samba4 as a replicating domain controller is still developing rapidly, and we > like to hear from users about their successes and failures. While Samba4 is > still in rc state we would encourage you to report both your successes and > failures to the samba-technical mailing list on

Hello, I have win2k3 single root domain with one winDC and one centos 6.4 samba 4.0.7 with internal DNS successfuly (asI thought) joined in. When both Dcs online everything works fine, but I'm confused with DNS zone replication. both dcs have record DC=mydomain.local,CN=MicrosoftDNS,dc=DomainDnsZones,dc=mydomain,dc=local with identical GUID an identical SOA record pointing to winDC as

Hi. I'm trying to estabilish a trust between Win2k configured in mixed mode with SAMBA 3 server. I followed instructions from SAMBA HOWTO, however the trust is not working - I don't have any clue why is it not working - I didn't find any usefull message in SAMBA logs - I will continue debugging today evening. I want to achive that users from SMBDC domain can login into computers

Hello Marc, samba is 4.1.22. I let the dcpromote choose the DC. DNS is internal Yes the windows DC has also global catalog Regards Olivier On Fri, Jan 8, 2016 at 4:38 PM, Marc Muehlfeld <mmuehlfeld at samba.org> wrote: > Hello Olivier, > > Am 08.01.2016 um 12:02 schrieb Olivier Weinstoerffer: > > I have a domain composed by 3 linux samba 4 AD servers. > > - Which

Hi, I have a domain composed by 3 linux samba 4 AD servers. I wanted to add a windows based domain controller on it and followed the documentation on the samba wiki. Everything works fine except the DNS: - when I try do add a dns record on the windows 2008r2 server, I got an error popup with "Refused" - in the DNS service logs at startup I got an error 4014: "The DNS server was

Problems with Secondary DC My scenario: DC1 = = SRV14=primary DC + DHCP Bind9 DC2 = SRV15=secondary DC + Bind9 Both running Samba 4.4.5. Through the Group Policy Management, when switching DC, when I try to connect to DC2, I get error message: "There was an error processing to collect data using this base domain controller. Change the base domain controller and try again." When

Dear Rowland, I appreciate the initial contact and the hint that you sent. I followed the tips presented in the wiki Samba and implemented the script on Centos 7. Apparently it's working. I'll wait for the next hours work, to make sure it worked. I have doubts: - It is possible to manually perform the update script DNS? I tried to manually run but could not. - Dhcpd that will

Hi, I have set up two AD DCs (both running Samba 4.1). This is my setup: dc1.mydomain.lan: The first DC (used for domain provision) dc2.mydomain.lan: Promoted to AD DC after domain setup I promoted dc2 using this command: samba-tool domain join mydomain.lan DC -Uadministrator --realm=mydomain.lan While the promotion worked without any issues I now want to demote dc2 again. This is what I did:

I added three DCs to a single DC Samba4 AD domain. They initially replicated and came up - but replication does not appear to be ongoing. A change made to a user via MMC connected to one DC does not appear on another DC. It the logs I see bursts of the following message: [2014/08/12 15:08:08.026270, 0] ../source4/librpc/rpc/dcerpc_util.c:660(dcerpc_pipe_auth_recv) Failed to bind to uuid

I have a server that is not replicating correctly, but passes all the tests listed here: https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC In particular running # host -t CNAME 976c9c86-288d-483e-baec-7043a9c4a6cd._msdcs.ncs.k12.de.us 976c9c86-288d-483e-baec-7043a9c4a6cd._msdcs.ncs.k12.de.us is an alias for ncssamba2.ncs.k12.de.us. returns correct information on all DCs.

I started with one dc, 'dc1', running samba v4.0.21, in subnet1. I successfully added two more dc's, 'dc2' and 'dc3', both running samba v4.0.24, both in subnet2. There are several firewalls between subnets 1 & 2. I continued to make firewall holes on behalf of msad after I added dc's 2 & 3. I.e. when they were added, there were patterns of communication

Dear, I'm having trouble Samba recognizes the permissions assigned to groups and users created in AD. Scenario: DC1 = Primary DC DC2 = secondary DC + file server Both running the 4.4.5 version of Samba (Centos 7). When I add permissions to a folder using a Windows desktop, I get to set permission for AD users and groups. What do I need to set up the groups and AD users are recognized on the

Do you tnink I can simply apt-get install from that repo to upgrade the current samba? Going down the demote/re-join route, I'm encountering problems demoting the DC: Deactivating inbound replication Asking partner server DC1.mydomain.local to synchronize from us Error while demoting, re-enabling inbound replication ERROR(<class 'samba.drs_utils.drsException'>): Error while

as u have said in a reply mail below could you please send me the sample config files.. please as i was trying to do LDAP for BDC/PDC for quite sometime and un-successfull also. Your below gives me very good thought trying it agian. I also hope ur sample config files might come great help Thanks in advance with best Regards Yeri samba-request@lists.samba.org wrote: >Send samba mailing

I'm trying to remove a DC from a Samba4 based AD network, but run into an error that I can't fathom. Can anyone point me in the right direction? # samba-tool domain demote -Uadministrator GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC

Dear, I have 2 DC's Samba4.4.5. I realize that there is a difference in mapping groups gid mappings. The /etc/nsswitch.conf are equal in DC's. I found difference in the smb.conf of DC's. The DC2 shows the name of winbind groups. The DC1 shows only the uid of the group / user. Could someone give me a hint? Smb.conf file DC1 [global] interfaces = lo eth0 netbios name = SRV14

On Fri, 21 Oct 2016 16:59:07 +0000 (UTC) Ricardo Pardim Claus via samba <samba at lists.samba.org> wrote: > Dear, > I have 2 DC's Samba4.4.5. > I realize that there is a difference in mapping groups gid mappings. > The /etc/nsswitch.conf are equal in DC's. > I found difference in the smb.conf of DC's. > The DC2 shows the name of winbind groups. The DC1

We're using the Debian 8 repository version, which is 4.2.14 Tom Op ma 2 jan. 2017 om 13:15 schreef Rowland Penny via samba < samba at lists.samba.org>: > On Mon, 02 Jan 2017 11:30:44 +0000 > Tom Cannaerts - INTRACTO via samba <samba at lists.samba.org> wrote: > > > We are trying to migrate away from out Windows 2008 R2 server to a > > Samba based DC. At