similar to: Change hostname of the main domain controller of the Active Directory

On 12 April 2016 at 07:31, Rowland penny <rpenny at samba.org> wrote: > > The schema is in another NC, so use the 'cross-ncs' switch to see the > schema. Thanks Rowland - adding --cross-ncs worked and I can now see the schema extensions using ldbedit. I can confirm that my schema extensions are definitely present, including as mentioned in the record below, which I

On 10/17/2017 11:22 AM, Andrew Bartlett wrote: > > Can you please be less vague on what the link is exactly? A suggestion > around the office from Garming was that we should: Oh sure! I posted that info already, I think, but this is the error: > ERROR: no target object found for GUID component for msDS-NC-Replica-Locations in object

On 10/16/2017 08:56 PM, Andrew Bartlett wrote: > Are they breaking anything? Not sure. But in another thread I reported some issues on replication, highwatermark notifications, high COU load, etc. My idea was do try several things to fix this. SO I created a virtualised isolated environment, in which I can try out all kinds of things: - upgrading the DCs to 4.7 (as suggested by you) or -

Thanks Rowland. In here, I can see the objects I have created using my schema extensions, but I cannot see the schema classes or attributes themselves; I don't know if that is the problem. I'm not sure if by running ldbedit on sam.ldb, this does not include the contents of CN=Schema,CN=Configuration,DC=mydomain,DC=... or if it does include this part of the AD tree and these items are

Checking the databases against each other throws up pages and pages of errors. The two are completely out of sync now. What I have seen is that for no apparent reason, one of the servers suddenly decided it would sync with the Windows server, which appears to have updated the schema. Yesterday when I compared the databases on the two linux servers they only had a couple of errors, today, many

On 12/04/16 22:21, Jonathan Hunter wrote: > > > On 12 April 2016 at 07:31, Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>> wrote: > > The schema is in another NC, so use the 'cross-ncs' switch to see > the schema. > > > Thanks Rowland - adding --cross-ncs worked and I can now see the > schema extensions using

Hi, I'm looking at migration from Samba3 (NT domain) to a Samba4 in 4.1.6 on ubuntu 14.04 in active directory domain controller mode. I was doing some stuff when subscribing machines to the domain through a script called by smbd, as described with 'add machine script' parameter in smb.conf. It seems that this behavior isn't supported in Active Directory mode in my version :

Hi, Samba4 (4.1.9) on Ubuntu 12.04 here (seen same behavior on 4.1.6 on Ubuntu 14.04). I've encountered an annoying bug with samba-tool, some exceptions aren't caught causing the tool to crash if it finds something it doesn't like in the smb.conf. I have a specific line in my conf : "include = /etc/samba/%U.smb.conf ", it's useful for applying specific samba

Hi, I'm trying to access to the internal's ldap of samba4 (running as AD-DC) with a simpleSecurityObject entry. It seems that the authentication process searches only 'user' objects (objectclass=user) in the ldb. Is that possible to configure the auth behavior ? I'd like to use simpleSecurityObject (that aren't 'user') to manage entries from cron, cgi and so

On Tue, 2017-10-17 at 11:04 +0200, mj via samba wrote: > > On 10/16/2017 08:56 PM, Andrew Bartlett wrote: > > Are they breaking anything? > > Not sure. But in another thread I reported some issues on replication, > highwatermark notifications, high COU load, etc. > > My idea was do try several things to fix this. SO I created a > virtualised isolated environment,

On Tue, 2017-10-17 at 11:42 +0200, mj wrote: > > On 10/17/2017 11:22 AM, Andrew Bartlett wrote: > > > > Can you please be less vague on what the link is exactly? A suggestion > > around the office from Garming was that we should: > > Oh sure! I posted that info already, I think, but this is the error: > > > ERROR: no target object found for GUID

Are use using zarafaAccount=1 withing the search filters? I use this things like this : (&(objectClass=person)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) Or for groups. (&(objectclass=group)(zarafaAccount=1)(|(mail=%s)(otherMailbox=%s))) That helps a lot. ! If you switch to kopano beware to change the SCHEMA and filters zarafaAccount changed to kopanoAccount Greetz. Louis

Hi, Our DC1 had to be taken offline due to corruption. Roles were seized, and I managed to get rid of the directory metadata by using this script from microsoft: http://gallery.technet.microsoft.com/scriptcenter/d31f091f-2642-4ede-9f97-0e1cc4d577f3 After that I had to remove the remaining DNS stuff, and now everything seems to be in perfect shape, with dc2/dc3/dc4, replicating perfectly, no

This is what it returned. root at DC01:/mnt# ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb -b "CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local" -s base fsmoroleowner # record 1 dn: CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local fSMORoleOwner: CN=NTDS Settings,CN=PDC,CN=Servers,CN=Default-First-Site-Name,C

Can you tell more about your setup? Is zarafa and samba on the same server for example. Which MTA are you using postfix/exim?   My top was about 150 users, and all my printers are connected also so about 200 devices do ldap searches. but my setup is split over 10+ servers ( 2 are AD DC )   So best is to tell what you can about your setup, anonimize if needed.   Greetz,   Louis  

I did not get SUCCESS! root at DC01:/mnt# samba-tool ldapcmp ldap://dc01 ldap://pdc dnsdomain * Comparing [DNSDOMAIN] context... * Objects to be compared: 188 Comparing: 'CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local' [ldap://dc01] 'CN=Infrastructure,DC=DomainDnsZones,DC=fisherthompson,DC=local' [ldap://pdc] Attributes found only in ldap://dc01:

On 14/07/2020 19:07, Peter Pollock wrote: > Checking the databases against each other throws up pages and pages of > errors. The two are completely out of sync now. > > What I have seen is that for no apparent reason, one of the servers > suddenly decided it would sync with the Windows server, which appears > to have updated the schema. Yesterday when I compared the databases

On Mon, 2017-03-27 at 10:43 +0200, Gaetan SLONGO via samba wrote: > Zarafa is not on the same server as Samba  > > We only have 2 AD/DC Samba 4.5 (CentOS 7) and we put required indexes > on LDAP .  > > Arround 1000 mailboxes but not all are simultaneously in use (approx > 1/3 in use).  > MTA is postfix (and is still connected to Samba AD, this one is not > causing the

I'm working my way off of our Windows 2003 R2 Domain Server. That machine is called PDC, sorry really bad planning so many years ago! So my end goal is to have two samba4 domain controllers. They are setup and joined as DC's, dc01 and dc02. I have most of my files off of PDC but would like to keep it up for a little longer to make sure I have everything off of there. So I tried

OK, tried that. Kicked myself for not trying earlier... but it didn't work. In fact, the error has got worse. Now when I try to go from Genesis to Luke I get: sudo samba-tool drs replicate luke genesis DC=kcs,DC=local -Udomainadmin . . ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (1359, 'WERR_INTERNAL_ERROR')