similar to: kcc triggered every 5 minutes?

Hi all, some background : ===== recently I had to cleanup a network of 1 DC on main office and 5 RODC on remote location. On one RODC for some reason there where still ntdsConnection objects with fromServer attribute pointing to servers GUID that do not exists anymore. Those fromServer attribute with spurious guid can be seen with ldbsearch but cannot be seen through ldap connexion, so I

Hi LingPanda101, .... > > DC=domain,DC=local > site-c\DUNDC1 via RPC > DSA object GUID: a216e718-488f-4821-8d9c-a399e6789222 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ NTTIME(0) > > DC=ForestDnsZones,DC=domain,DC=local > site-c\DUNDC2 via RPC

On 9/24/2016 7:32 AM, Denis Cardon wrote: > > the job of the samba_kcc script is to create the ntdsConnection > objects. Afterward the repsFrom/repsTo attribute are created in > accordance with the ntdsConnection objects (you can force the creation > using samba-tool drs replicate although). You can check that the > process is asynchronous when you join a new DC, the INBOUND

Hi Jordi, How is it going up there in Normandie? > I have seen in an old post that you have tested new KCC from full mesh to bridge head at a french school. > Is your "drs showrepl" correct on such DC's ? > > In my case, a drs showrepl is showing a full mesh on inbound and outbound (not good) but only 1 KCC connection objects (good) > Where is a full description of

Hi Denis, I have seen in an old post that you have tested new KCC from full mesh to bridge head at a french school. Is your "drs showrepl" correct on such DC's ? In my case, a drs showrepl is showing a full mesh on inbound and outbound (not good) but only 1 KCC connection objects (good) Where is a full description of my trouble:

Hi Denis, Thanks for your advices. I have in mind about your kerberos problem in a large environment but i was thinking about problem occuring at 20 and more DCC's So last night, i modified all my krb5.conf (DC and file server) as you suggest but problem persist. root at dc111:~# samba-tool domain join pr.educationetformation.fr DC -U administrator --realm=PR.EDUCATIONETFORMATION.FR -W PR

Hello list, I run 2 Samba 4.7.1 RODCs. One in my Default-First-Site-Name and in additional Site where only Samba RODC exists. When I start samba_kcc on first RODC it run’s without errors. If I start samba_kcc on RODC in additional Site it fails with: /usr/local/samba/sbin/samba_kcc: Traceback (most recent call last): /usr/local/samba/sbin/samba_kcc: File

Solved ! Thanks for the script. In my case, it was just too late. I have just found a ugly but working solution: From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. No more trouble with drs showrepl :-) -----Message d'origine----- De : samba [mailto:samba-bounces at lists.samba.org] De la part de Stefan Kania

Hello ! I'm trying to add new DC to my existent domain (18 Samba4 DC) but this time, domain join stuck after setting account password. I have tried so many things but at this point, i really don't know what to do. I can see the new dc111 computer object on smb4dc serveur but the object is disable. If someone have an idea... Best regards root at dc111:~# samba-tool domain join

Hi Jordi, > Solved ! > Thanks for the script. > In my case, it was just too late. > I have just found a ugly but working solution: > From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. > No more trouble with drs showrepl :-) Indeed, samba-tool drs showrepl show in fact the repsfrom/repsto

Here is some news: The problem concern this 2 parameters: bind interfaces only = yes + interfaces = lo eth0 If I comment this 2 lines, smbd is starting (but not listening on localhost) We have find our problem source with Denis and figure out that package 4.11.6 from samba.tranquil.it may have been bad compiled (chroot problem ?) No problem with 4.11.6 from Louis VanBelle ans no problem with

Hi Harsh, > Thanks for the suggestion to trim the smb.conf after which the DC-1 is > connecting to the Windows Server 2008 shared folder smbclient -k > //IUMSVRAPP01/Pastel12 -d 9 > and DC-2 is also connecting after using the DNS name of the Windows server. > > *You'd better switch your DNS to Bind-DLZ. Internal DNS is not that good > for larger site (looking at your DNS

Hi everybody, I'm playing with the new Improved KCC of samba 4.3.X Here is my network's topology : - DC : smb4dc located on Default-First-site-Name - DC : dc110 located on PetitQuevilly - DC : dc113 located on SaintEtienne - DC : dc120 located on Barentin - Etc.... (total of 15 DC) I want smb4dc acting as a bridge head for all others

Hi Denis I have upgraded my samba DC-1 from 4.6.12 to 4.7.4 which has solved the replication issues between DC-1 and DC-2. Now both the DC's are running on 4.7.4. Like Rowland said previously, you should remove all RODC that have been installed prior to Samba 4.7. There are many fixes that have been added since 4.6. Before I remove my RODC's I like to clear out few doubts: 1. Instead of

or add acl_xattr:ignore system acl = yes to your share. more info man smb.conf .. Gr. Louis >-----Oorspronkelijk bericht----- >Van: J.Morillo at educationetformation.fr >[mailto:samba-bounces at lists.samba.org] Namens MORILLO Jordi >Verzonden: vrijdag 5 juni 2015 15:21 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] [Bug or Limitation] Folder sharing

Hi, Given i have this share : [j.snow] Path = /home/j.snow Share and ntfs permission : j.snow user Now I add another folder share inside the first one : [a.stark] Path = /home/j.snow/a.stark Share and ntfs permission : a.stark user /home/j.snow/a.stark has now parent inherit permission (j.snow) AND a.stark user a.stark can't access to her share ! if I add a.stark NTFS access to [j.snow]

Hi Jordi, > I'm trying to add new DC to my existent domain (18 Samba4 DC) but this time, domain join stuck after setting account password. > I have tried so many things but at this point, i really don't know what to do. > > I can see the new dc111 computer object on smb4dc serveur but the object is disable. > If someone have an idea... Could you try to see if it gets

Hi Louis, Move up to 4.7 is planned soon but I'm little scared to update bridgehead if it actually had performance problem. I would like to fix all problem before updating. My smb.conf is really simple: [global] workgroup = PR realm = pr.educationetformation.fr netbios name = DC000 server role = active directory domain controller bind interfaces only

Hi Rowland, One of my DC is offline because Adsl is down and I can't physicaly reboot modem (Covid confinement) :-/ Here is my headbridge DC config: [global] workgroup = PR realm = pr.educationetformation.fr netbios name = DC000 server role = active directory domain controller bind interfaces only = yes interfaces = lo eth0 printcap

Sorry, I didn't explain my problem well enough... The problem is not that a domain user logs in on one specific computer several times. I tried that. It's not even possible. You only login to the same profile on the same computer again. So this is ok. The problem is that a domain user is logged in on two computers simultaneously. I tried that. That's possible. But I don't want