similar to: migrate from win2012srv to samba 4.1.17-Sernet-Debian-9.wheezy

I just go down in the script and found an acl called "thisserverip" with value SETIPPDC1. And this variable is used for this line : listen-on port 53 {"thisserverip", 127.0.0.1; ]; Is it not strange that the pdc1 windows server Ip is coming here? Thanks. Sam Le 17/03/2015 15:14, Rowland Penny a ?crit : > On 17/03/15 14:00, Sam wrote: >> Hello, >> >>

On 17/03/15 14:00, Sam wrote: > Hello, > > I'm trying to join a debian/samba4 to a win 2012 srv with this scripts > : https://secure.bazuin.nl/scripts/this_is_the_old_set_of_scripts/ > ( the join method is available only on "this_is_the_old_set_of_scripts") > I'm facing different problems with the dns (bind9) > > My question is : > in

Am 17.03.2015 um 15:59 schrieb Sam: > I have read about it but I try to do that : > https://lists.samba.org/archive/samba/2013-May/173079.html > unfortunately there is not a lot of details on how to do > accurately...:-\ > The actual forest and domain level on the 2012 is still on 2008R2... Can you check, what schema version you're having:

Hello, objectVersion : 69 thanks Le 17/03/2015 19:18, Marc Muehlfeld a ?crit : > Am 17.03.2015 um 15:59 schrieb Sam: >> I have read about it but I try to do that : >> https://lists.samba.org/archive/samba/2013-May/173079.html >> unfortunately there is not a lot of details on how to do >> accurately...:-\ >> The actual forest and domain level on the 2012 is

Hai, ? After some testing i can confirm there is a bug in the debian?backports samba. ( 4.1.11 the latest in backports ) ? The first server setups up ok without any problem. When you want to join the second server, it says its al succesfull but dont be fooled... its not! ? non of the needed dns entries are created.? ( samba-tool drs showrepl ) gives WERR_BADFILE No hostname, aka : ?no alias

On 2015-01-12 03:13, Rowland Penny wrote: > On 12/01/15 00:23, Bob of Donelson Trophy wrote: > > On 2015-01-11 09:09, Rowland Penny wrote: > > On 11/01/15 14:09, Bob of Donelson Trophy wrote: > Rowland, The script (setup-samb4-MEMBER-wheezy.sh.tar.gz) to install worked properly on my non-GUI member server. I decided to try it on my Debian 7.7.0 GUI client station (my Debian

On 03/06/15 23:54, ivenhov wrote: > I've made all changes to 3 files you mentioned, also removed everything > except localhost in hosts file. > SO I have minimal smb.conf and minimal krb5 file > > Unfortunately error is still the same. > > If I try to join with full OU path I get kerberos_kinit_password > testuser at MYNAT.MYCO.BCU failed: Cannot contact any KDC for

On 25/02/15 21:38, Bob of Donelson Trophy wrote: > > > I had to go do something else and have returned. I discovered that I > hadn't gone back far enough. This complaint first appears here: > > ==========Enable bind gssapi and bind9_DLZ > =============================== > [....] Stopping domain name service...: bind9rndc: connect failed: > 127.0.0.1#953:

Hi! ivenhov skrev den 2015-06-04 10:10: > I'm trying > > sudo net ads join -S dc1001.mynat.myco.bcu -U testuser -d10 > > and also > > sudo net ads join createcomputer="My/Ou/For/Servers" -S > dc1001.mynat.myco.bcu -U testuser -d10 > > > It works for me every time in lab on real hw (same spec) and on virtualbox. > It's just this particular site

Hai, After reading all below i can only conclude this must be firewalling, as Rowland is saying also. check if all of these ports are acceccable for the server your trying to join. tcp 0 0 192.168.X.1:1024 0.0.0.0:* LISTEN 2146/samba tcp 0 0 192.168.X.1:135 0.0.0.0:* LISTEN 2146/samba tcp 0 0 192.168.X.1:139

I upped 1.0.4 of the script.. I added checks if no DC's are found, error message and exits script, so no python errors anymore, if i did it right. ;-) on both DC's do the following. and whats the output of : cat /etc/hosts cat /etc/resolv.conf and kinit Administrator SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SERVER_IP_ADRESS=`hostname -i` echo "Test domainname:

Hi Rowland, I have similar problem with sernet 4.2.4 package: no dns entry created and logs are showing NOTAUTH for dnsupdate Here is my work around: New DC joins domain with: --dns-backend=BIND9_DLZ and --server=partnerDC.contoso.com Don't start samba or bind yet !! After that I've to correct some permissions rights on these folders/files (bind can read): - private - dns - dns/* -

Here yau go: root at dc01:~# cat /etc/bind/named.conf.options // Defined ACL Begin acl thisserverip { 192.168.16.54; }; acl all-networks { 192.168.16.0/24; }; // Defined ACL End options { directory "/var/cache/bind"; version "0.0.7"; // If there is a firewall between you and nameservers you want // to talk to, you may need to fix the firewall to allow multiple //

Are you sure you have the "correct" administrator password .. ? this should work ,? echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' that does not involve kerberos yet.. ? Please run: ? SETHOSTNAME=`hostname -s` SETDNSDOMAIN=`hostname -d` SETFQDN=`hostname -f` host -t SRV _ldap._tcp.${SETDNSDOMAIN}. host -t SRV

So if this is done, is edns configure also ? ? in resolv.conf add: options edns0 ? and, name.conf test these. ? ??????? //?The forwarded zone to the AD-DC DNS use these also. ????????//dnssec-must-be-secure?internal.domain.tld no; ????????//dnssec-must-be-secure 168.192.in-addr.arpa no; ????????// listen-on-v6 { ::1; };? // test what works best, if not all?ipv6 is disabled also?enable this

I'm having trouble changing the machine name programmatically on Samba 4 (running under systemd). There's no "netbios name" option in smb.conf, so I'm relying on it using the hostname. Here's what I'm doing: 1) Call sethostname() with the new name. 2) Write the same name into /etc/hostname, to make it nonvolatile. 3) Read a decimal number from /var/run/smbd.pid.

Hi guys, thanks again for the quick answers. First, the smb.conf on the linux fileserver. It is quite long, as I took the old file (working version from samba3 configuration) and only made adjustments, like adding the realm. /etc/samba/smb.conf: [global] ### Browsing/Identification ### workgroup = MAYWEG.NET realm = INTRANET.MAYWEG.NET netbios name = server13 smb ports = 139, 445

I went and got the newest (upped recently) script. No love. I removed the email address line to get more command line output. root at dc01:~# ./samba-check-db-repl.sh Running with with console output Running : /usr/bin/samba-tool ldapcmp --filter='whenChanged' ldap://dc01 ldap://dc02.dtsh***m.dt. Please wait.. this can take a while.. Failed to bind - LDAP error 49

Thank you Louis for that answer! Actually I did get kinit and samba_dnsupdate working, though I am unsure how. I tried some changes to krb5.conf in the [realms] and [domain_realm] sections, als well as setting dns_lookup_realm = false to true, but reverted it all back to the initial file: [libdefaults] default_realm = INTRANET.MAYWEG.NET dns_lookup_realm = false dns_lookup_kdc = true After a

Set auth-nxdomain yes; And stop/start bind9 Other source : https://blogs.technet.microsoft.com/teamdhcp/2015/09/10/a-description-of-the-dns-dynamic-update-message-format/ /snap The DNS Client and Server services support the use of dynamic updates, as described in Request for Comments (RFC) 2136, "Dynamic Updates in the Domain Name System." The DNS Server service allows dynamic