Displaying 20 results from an estimated 6000 matches similar to: "Sysvol "incorrect parameter" on some new DC's"
2016 Sep 19
2
Upgraded SAMBA4 DC's, now no logon scripts
On Mon, 2016-09-19 at 20:57 +0200, Marc Muehlfeld wrote:
> > Logon scripts assigned to a user do not execute when the user logs
> > on; it did before the upgrade.
> * What kind of upgrade are you talking about?
> NT4 to AD? (migration)
> x.y to 4.2?
AD 4.0.21 -> 4.2.x
This worked prior to the upgrade.
> * Is this an PDC or DC?
They are DCs.
> * Where have you
2016 Sep 19
5
Upgraded SAMBA4 DC's, now no logon scripts
Logon scripts assigned to a user do not execute when the user logs on;
it did before the upgrade.
I can run the script from the command line and it completes OK [like
\\{DOMAIN}\netlogon\logon.bat]. I can also browse to the [netlogon]
share without issue.
Upgrade was from a late 4.0.x to 4.1.x to current 4.2.x. User's can
logon without other issues [apparently].
Platform: CentOS7
2014 Aug 12
2
Four DCs, No Replication
I added three DCs to a single DC Samba4 AD domain.
They initially replicated and came up - but replication does not appear
to be ongoing. A change made to a user via MMC connected to one DC does
not appear on another DC.
It the logs I see bursts of the following message:
[2014/08/12 15:08:08.026270,
0] ../source4/librpc/rpc/dcerpc_util.c:660(dcerpc_pipe_auth_recv)
Failed to bind to uuid
2018 May 15
2
Persisting Routes In A Routing Table Other Than The Default
I need to add persistent routes to a policy routing table. I can add
rules to an IP policy table after installing NetworkManager-config-
routing-rules; but I have not found how to add routes to a table other
than the specific table.
Manually I do a:
ip route add default via 192.168.1.6 dev ens192 table pods
Rules load automatically via the /etc/sysconfig/network-scripts/rules-
{interface}
2016 Sep 19
2
"Unable to fetch value for secret ..., are we an undetected RODC?"
Since upgrading S4 DCs I am see the following message in log.samba -
DsCrackNames: Unsupported operation requested: FFFFFFF8DsCrackNames:
Unsupported operation requested: FFFFFFF8Unable to fetch value for
secret BCKUPKEY_13bb48fc-0844-4736-9972-e26453333856, are we an
undetected RODC?
DsCrackNames: Unsupported operation requested: FFFFFFF8DsCrackNames:
Unsupported operation requested:
2016 Nov 16
4
Schema Change Breaks Replication
I believe a schema change on a Windows DC (2008rc) has broken
replication with our S4 DCs. Anyone have any tips or pointers to
resolve this?
I have three S4 DCs [CentOS6] and one Windows 2008R2 DC. The Windows
2008R2 DC has the schema master FSMO, and I believe the Exchange schema
was added.
I am willing to pay US dollars to get this issue resolved. I need the
replication restored, the
2015 Apr 14
0
wbinfo -u/-g/-n works, but not 'wbinfo -i' or 'id'
On Tue, 2015-04-14 at 15:20 +0100, Rowland Penny wrote:
> On 14/04/15 14:59, Adam Tauno Williams wrote:
> > On Thu, 2014-10-30 at 13:41 -0300, Horacio G. de Oro wrote:
> >> Hi! I'm trying to add a member to be used as fileserver, following the
> >> guides at:
> >> - https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server
> >> -
2016 Dec 13
1
Doubt about Global Catalog on Samba 4
> > Initially, it appears to have worked. ...
> > It shows the same on one of the S4 DCs, but the
> > DomainDnsZonesMasterRole still shows as "no current owner" on the
> > third S4 DC [all Sernet 4.5.2]. Argh.
> You could try checking the database on the third DC, 'samba-tool
> dbcheck --help' for more info.
> You could also try forcing
2018 May 16
1
Persisting Routes In A Routing Table Other Than The Default
On Tue, 2018-05-15 at 13:04 -0500, Chris Adams wrote:
> Once upon a time, Adam Tauno Williams <awilliam at whitemice.org> said:
> > Rules load automatically via the /etc/sysconfig/network-
> > scripts/rules-
> > {interface} files.??Routes added to /etc/sysconfig/network-
> > scripts/routes-{interface} are always added to the default policy.
> What are you
2016 Dec 12
2
Doubt about Global Catalog on Samba 4
> You seem to be missing two FSMO roles:
> DomainDnsZonesMasterRole
> ForestDnsZonesMasterRole
> Just what version of Samba are you using ?
My Samba 4.5.2 domain also appears to be missing these roles.
Can I simply seize these roles?
[root at larkin27 ~]# samba-tool fsmo show
SchemaMasterRole owner: CN=NTDS Settings,CN=TEMP2008R2DC,CN=Servers,..
InfrastructureMasterRole owner:
2015 Apr 12
2
Removed old DC, now replication hopelessly broken [HELP]
I removed a DC using the DC removal tool mentioned in
http://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3
as https://bugzilla.samba.org/show_bug.cgi?id=10734 prevents normal DC
demotion.
The DC was still all over in DNS, so I had to pick it out.
Now replication between the remaining three DCs is broken
[root at larkin26 ~]# samba-tool drs showrepl
2016 Dec 13
2
Doubt about Global Catalog on Samba 4
On Mon, 2016-12-12 at 19:45 +0000, Rowland Penny via samba wrote:
> You seem to be missing two FSMO roles:
> > > DomainDnsZonesMasterRole
> > > ForestDnsZonesMasterRole
> > > Just what version of Samba are you using ?
> > My Samba 4.5.2 domain also appears to be missing these roles.
> > Can I simply seize these roles?
> > [root at larkin27 ~]#
2016 Mar 10
2
Failed to modify SPNs on error in module acl: Constraint violation during LDB_MODIFY (19)
Hi all,
SPN = servicePrincipalName
A simple search returning all servicePrincipalName declared in your AD:
ldbsearch -H $sam serviceprincipalname=* serviceprincipalname
An extract from result concerning a lambda client:
# record 41
dn: CN=win-client345,OU=Machines,DC=ad,DC=domain,DC=tld
servicePrincipalName: HOST/MB38W746-0009
servicePrincipalName: HOST/MB38W746-0009.ad.domain.tld
2016 Oct 20
2
Correcting "incorrect userParameters value on object...." ???
sernet-samba-4.2.14-23.el6.x86_64
Errors [on all DCs] related to incorrect userParameters values - on
user's that are working. How does one go about rebuilding/correcting
this value?
[root at larkin28 ~]# samba-tool dbcheck --reset-well-known-acls --fix -
-yes
Checking 1743 objects
ERROR: incorrect userParameters value on object
CN=darrell,OU=Industries Users,DC=example,DC=com. If you have
2015 Apr 14
2
wbinfo -u/-g/-n works, but not 'wbinfo -i' or 'id'
On 14/04/15 14:59, Adam Tauno Williams wrote:
> On Thu, 2014-10-30 at 13:41 -0300, Horacio G. de Oro wrote:
>> Hi! I'm trying to add a member to be used as fileserver, following the
>> guides at:
>> - https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server
>> - https://wiki.samba.org/index.php/Using_RFC2307_on_a_Samba_DC
>> The AD server has been in use
2016 Sep 19
1
Getting rIDNextRID errors after upgrading two samba ADs to 4.2
On Fri, 2016-04-08 at 15:20 +0200, Johannes Amorosa | Celluloid VFX
wrote:
> On 04/08/2016 08:36 AM, Johannes Amorosa | Celluloid VFX wrote:
> > We finally managed to upgrade from samba 4.1 to 4.2.9 (sernet
> > packages). We have two replicated samba ADs. After the upgrade
> > everything seems to work as expected, but I'm constantly getting
> > this error message
2016 Nov 20
0
4.5.1 Upgrade Breaks Samba [Was: Schema Change Breaks Replication]
On Sat, 2016-11-19 at 09:57 +1300, Andrew Bartlett wrote:
> On Fri, 2016-11-18 at 09:41 -0500, Adam Tauno Williams wrote:
> > On Fri, 2016-11-18 at 21:32 +1300, Andrew Bartlett wrote:
> > > I believe a schema change on a Windows DC (2008rc) has
> > > > > > broken
> > > > sernet-samba-4.2.14-23.el6.x86_64 - the same package on all
> > > >
2015 Jun 25
1
LVM hatred, was Re: /boot on a separate partition?
On Thu, 2015-06-25 at 11:50 -0400, Robert Heller wrote:
> At Thu, 25 Jun 2015 11:03:18 -0400 CentOS mailing list <
> centos at centos.org> wrote:HA! You only really need to learn *one*
> command: the man command.
> The man
> provides 'enlightenment' for all other commands:
> man vgdisplay
> man lvdisplay
> man lvcreate
> man lvextend
> man lvresize
2016 Sep 20
0
Upgraded SAMBA4 DC's, now no logon scripts
On Tue, 2016-09-20 at 09:24 +1200, Clint Dilks wrote:
> > (1) why would this happen at logon when I can run the script after
> > login without pertmission issues?
> In relation to this I am just wondering if you have SELinux enabled?
> If so you may want to set it to permissive and see if the issue
> disappears.
SELINUX is disabled.
Frustrating... i can't even find
2016 Sep 19
4
Error "Failed extended allocation RID pool operation..."
Package: sernet-samba-4.2.14-23.el6.x86_64
These DCs were very recently upgraded from a prior version.
[2016/09/19 09:32:55.168161, 0]
../source4/libcli/smb2/signing.c:116(smb2_check_signature)
Bad SMB2 signature for message of size 202
[2016/09/19 09:32:55.168511, 0] ../lib/util/util.c:559(dump_data)
[0000] 77 B3 94 9B 70 78 8B 21 1E 56 D0 78 E1 80 BB 5C w...px.!
.V.x...\
[2016/09/19