similar to: New/changed Wiki documentation

I see the instructions about setting up a secondary domain controller at https://wiki.samba.org/index.php/Join_a_domain_as_a_DC but I am unclear on several points. I'm familiar with Kerberos/LDAP/DNS but not Windows administration. (1) This document talks about adding Samba as a slave to "an existing Active Directory domain" (presumably running Windows). Is it the same to

Hello, I wrote a major extension of the FSMO documentation: https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles We often had questions on the list about the FSMO roles and the consequences, when DCs owning roles are offline. I hope this will be a good reference. Regards, Marc

https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#Transfering_a_FSMO_role I ran into that while trying to rebuild my LXC's as Debian 8. The proposed work arrounds assume you have access to a Windows Domain controller in your domain, and I don't. Is there anything else I can do to get all 7 Roles moved to my other domain controller so I can rebuild it?

Hello Klaus, Am 12.10.2015 um 23:34 schrieb Klaus Hartnegg: > Different domains have advantages if the network connection is bad, and > if local admins want to create new ad objects themselves, e.g. new > users. This is also possible with AD sites. Even if the network connection is temporary offline. Each DC has a RID pool (default 500 RIDs). Until it's empty, you can create new

On 05/26/2015 07:34 AM, Rowland Penny wrote: > On 26/05/15 03:05, John Lewis wrote: >> https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#Transfering_a_FSMO_role >> >> >> I ran into that while trying to rebuild my LXC's as Debian 8. The >> proposed work arrounds assume you have access to a Windows Domain >> controller in

Hello, I've set up 2 DCs. The first as been set up using the command: samba-tool domain provision ? The second, using the command: samba-tool domain join <realm> DC? As far as command return status say the commands went well. Using only the first DC, I can add windows client to the domain, I can manage users, everything seems to be ok. When adding the second DC, users database is

Le 06/02/2015 17:49, Marc Muehlfeld a ?crit : > Hello Jean-Fran?ois, > > Am 04.02.2015 um 17:51 schrieb Jean-Fran?ois Morcillo: >> Troubles come into the place when I try to create a user on the 2nd DC, >> I get the following error message: >> samba-tool user create usr1 usr1 >> ERROR(ldb): Failed to add user 'usr1': - >>

Hello, I've finished a new HowTo this week (please proofread): https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC Regards, Marc

On 05/28/2015 04:18 AM, Rowland Penny wrote: > On 28/05/15 01:33, John Lewis wrote: >> On 05/26/2015 07:34 AM, Rowland Penny wrote: >>> On 26/05/15 03:05, John Lewis wrote: >>>> https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_%28FSMO%29_roles#Transfering_a_FSMO_role >>>> >>>> >>>> >>>> I ran into that

Le 02/03/2015 12:58, Rowland Penny a ?crit : > On 02/03/15 11:02, Jean-Fran?ois Morcillo wrote: >> Le 06/02/2015 17:49, Marc Muehlfeld a ?crit : >>> Hello Jean-Fran?ois, >>> >>> Am 04.02.2015 um 17:51 schrieb Jean-Fran?ois Morcillo: >>>> Troubles come into the place when I try to create a user on the 2nd >>>> DC, >>>> I get

On 06/11/2015 04:33 AM, Rowland Penny wrote: > On 11/06/15 00:20, John Lewis wrote: >> On 05/28/2015 04:18 AM, Rowland Penny wrote: >>> On 28/05/15 01:33, John Lewis wrote: >>>> On 05/26/2015 07:34 AM, Rowland Penny wrote: >>>>> On 26/05/15 03:05, John Lewis wrote: >>>>>>

Dear All, I've read https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_(FSMO)_roles Under section https://wiki.samba.org/index.php/Flexible_Single-Master_Operations_(FSMO)_roles#How_to_handle_situations_where_a_DC_with_FSMO_roles_is_offline Let assume that DC1 is take all the roles... It tell that we should put the fail DC1 back online and do the role transfer... But below

Hello guys, i use Samba 4 AD (4.2.1) for a small company. I use a domain which is a subdomain of our internal DNS domain ( directory.mydomain.io) Now my company will open several sites in different countries. I was wondering what is the actual limitations of Samba4 concerning the multi domain (i'm not a Windows guy and have very limited knowledge about AD). I read about trust relationship

On Sun, 10 May 2015, Rowland Penny wrote: > It might not be as bad as what you think, do you have the two DNs ? > > ldbedit -e nano -H /var/lib/samba/private/sam.ldb -b > "CN=Infrastructure,DC=DomainDnsZones,DC=europa,DC=icse,DC=cornell,DC=edu" Yes, I have both of the dn's. However, neither of them have an fSMORoleOwner attribute. That I will fix and report back.

Hello I have primary and secondary Samba 4 DCs running very nicely with replication. I have DC1 using the official Backup scripts. We are moving these to virtual machines. We are changing the Linux OS on DC1 from Gentoo to Ubuntu. REAL DC1 = FSMO Role REAL DC1 = Gentoo REAL DC2 = Ubuntu VIRTUAL DC1 = Ubuntu What is the correct way to change DC1 to a virtual machine? Do I just restore from

It finally happened, a DC is down and I am trying to figure out what to do now. The LSI RAID card is dead (it actually caught fire briefly) and I obviously cannot boot the system until the replacement arrives. I do have a second Samba DC on the domain, but what I am seeing is that it runs like Server 2000 for some reason. It is acting like a backup DC, not a normal DC like 2008 and 2003. I

Hello, I have a problem with my samba4 domain cluster: there are 2 machines, - primary and secondary server. Everything was working fine, but i had a hard drive failure on primary PDC, so i reinstalled and restored a backup to it. Aftrwards i saw the warning about never restoring database from backups. Now I have the following problems: users can login and all group policies are provided, but

Le 02/03/2015 19:44, Rowland Penny a ?crit : > On 02/03/15 18:12, Jean-Fran?ois Morcillo wrote: >> Le 02/03/2015 12:58, Rowland Penny a ?crit : >>> On 02/03/15 11:02, Jean-Fran?ois Morcillo wrote: >>>> Le 06/02/2015 17:49, Marc Muehlfeld a ?crit : >>>>> Hello Jean-Fran?ois, >>>>> >>>>> Am 04.02.2015 um 17:51 schrieb

Guys, I have a up and running Samba4 as an AD DC, along side with 3 Domain Controllers, like like: 1- Master - ubuntu-ad-1.sambadom.company.com - Ubuntu Trusty + Samba 4.1.11 + Bind9 2- Slave - ubuntu-ad-2.sambadom.company.com - Ubuntu Trusty + Samba 4.1.11 + Bind9 3- Slave - ubuntu-ad-3.sambadom.company.com - Ubuntu Trusty + Samba 4.1.11 + Bind9 4- Slave - pdwad-1.sambadom.company.com -

I just transferred all the FSMO roles from DC-MIGRATE to DC1: [root at dc1 ~]# samba-tool fsmo transfer --role=all FSMO transfer of 'rid' role successful FSMO transfer of 'pdc' role successful FSMO transfer of 'naming' role successful FSMO transfer of 'infrastructure' role successful FSMO transfer of 'schema' role successful I then double checked as