similar to: Replication error after trying to sync sysvol

2015-03-27 14:00 GMT-04:00 <samba-request at lists.samba.org>: > Send samba mailing list submissions to > samba at lists.samba.org > > To subscribe or unsubscribe via the World Wide Web, visit > https://lists.samba.org/mailman/listinfo/samba > or, via email, send a message with subject or body 'help' to > samba-request at lists.samba.org

Found the problem. There is a DNS Problem on one machine. This happend because I was testing some samba AD settings in a virtual machine, without knowing that NAT isn't shielding this properly - this vm propagated the "new" IP to one of the dcs. DC04> ping DC03 gives wrong IP! This should be fixable with the samba-tool dns update? On 03/27/2015 01:14 PM, Johannes Amorosa |

---------- Forwarded message ---------- From: Dania Ramirez Moya <dania181087 at gmail.com> Date: 2015-03-27 15:32 GMT-04:00 Subject: Re:samba_dnsupdate failed with RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any KDC for requested realm) To: samba <samba at lists.samba.org> 2015-03-27 14:00 GMT-04:00 <samba-request at lists.samba.org>: > Send

Hello, I'm running Samba 4.5.0 and bind-9.8.2-0.47.rc1.el6_8.1. One DC of four, the PDC, is magnitudes slower running /usr/local/samba/sbin/samba_dnsupdate --verbose --all-names. When that is running on that DC it seems to block any queries. The load average is usually under 0.5. The DC was unsafely halted, which could have corrupted something. I ran a dbcheck with samba-tool and it

We are using Samba-4.1.11. I can run gpupdate /force without error on my machine. H:\>type \\dc01.mediture.dom\SysVol\mediture.dom\Policies\{77F82F0F-AE2B-42F3-B173-D42F4BEEC0BA}\gpt.ini [General] Version=65551 displayName=New Group Policy Object H:\>type \\dc02.mediture.dom\SysVol\mediture.dom\Policies\{77F82F0F-AE2B-42F3-B173-D42F4BEEC0BA}\gpt.ini [General] Version=65551 displayName=New

I bumped the logging up. samba-tool domain level raise --domain-level=2008_R2 schema_fsmo_init: we are master[yes] updates allowed[no] schema_fsmo_init: we are master[yes] updates allowed[no] The updates_allowed[no] concerns me? On Fri, Jul 8, 2016 at 9:45 AM, Jason Waters <jason at geeknocity.com> wrote: > I'm pretty sure the domain level raise is failing on this system.

On 07/07/16 21:39, Jason Waters wrote: > I did that, it fixed 6 errors, ran it again, 0 errors. Still not able > to join. > > On Thu, Jul 7, 2016 at 4:38 PM, Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>> wrote: > > On 07/07/16 21:13, Jason Waters wrote: > > So I joined with samba's internal DNS, then converted to BIND,

On Tue, 6 Sep 2016 13:59:43 +0000 Julian Zielke via samba <samba at lists.samba.org> wrote: > BTW, this is our smb.conf: > > # Global parameters > [global] > workgroup = mydomain > realm = mydomain.local > netbios name = myhostname > server string = Samba AD Client Version %v > security = ads > password server = dc03, dc04, dc01, dc02, * You should let Samba

On 26/05/2019 19:24, Epsilon Minus via samba wrote: > i don't know if the problem with the command samba-tool gpo aclcheck > is connect with the original problem, but is necesary resolv all > warinings. > > I put de log level = 5 to check the report. > > this is the output: > > > root at DC04:~# samba-tool gpo aclcheck Try it like this: samba-tool gpo aclcheck

I see the Samba guide suggests using rsync to keep sysvols in sync, but this poses a problem with ID's and it is only one-way. I have been hesitant to suggest anything because of the flak I have been getting, but I do believe I have a much better solution that transfers files via SSH, is bi-directional (no more only editing group policy on one server), and does NOT set UID/GID

On 26/05/2019 20:18, Epsilon Minus wrote: > The output is different: > root at DC04:~# samba-tool gpo aclcheck -Uadministrator > GENSEC backend 'gssapi_spnego' registered > GENSEC backend 'gssapi_krb5' registered > GENSEC backend 'gssapi_krb5_sasl' registered > GENSEC backend 'spnego' registered > GENSEC backend 'schannel' registered

Yes, the change is reflected into groups. The user's DN has all the new information we entered. The group has a memberOf string with the same correct information. A net cache flush on our DCs didn't help either. Since on another server using the same DCs and authentication mechanisms has no problems with the new name it's seems to be a server-related issue and not a DC one. - Julian

Hi, yesterday we experienced a heavy request flooding from multiple servers being a domain member against our Samba Sernet DCs. All those servers are domain members and allow login using PAM (Samba+Winbind). Running TCPDump we had like 400 Requests per 5 seconds like this: tcpdump -i eth0 dst port 389 tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth0,

Hi, I performed the procedures below on Samba4-DC1 (Master) and apparently everything went fine. /etc/init.d/samba-ad-dc stop sed -i -e 's/${DOMAINDN}/DC=empresa,DC=com,DC=br/g' \ -e 's/${NETBIOSNAME}/SAMBA4-DC1/g' \ -e 's/${NISDOMAIN}/empresa/g' \ /tmp/ypServ30.ldif root at samba4-dc1:/tmp# ldbmodify -H /var/lib/samba/private/sam.ldb

Dear all, I'm trying to make winbindd working without much success. I would like to set my linux box as a samba PDC and as winbindd host with some win2k workstations. I'm using mdk 8.1 and have installed the corresponding rpms (samba-2.2.2-6 by cooker). I followed howto and samba doc to set the pdc and it works. Following winbindd doc I have to used "smbpasswd -L -j IUTINFO -U

Hi team, I use Samba 4.3.12 as a printserver with ~900 printers, and it takes about 20 seconds for rpcclient enumprinters command to finish. However, sometimes it gets stuck and returns WERR_SEM_TIMEOUT for no apparent reason, and this timeout always takes exactly 12 seconds. I was thinking maybe there is a hardcoded timeout somewhere that is shorter than expected 20 sec time for returning my

2 debian-DCs ... I get Last attempt @ Wed Mar 13 10:57:11 2019 CET failed, result 121 (WERR_SEM_TIMEOUT) How to proceed here (yes, I google ...), please ...

Fran and/or Matthias, Could you publish your doveconf -n? I can't get dovecot to authenticate with my AD. Maybe you have a solution I could try. What mail client(s) are you using? I assume by "AD 2003/8" You mean SBS2003/8 and are therefore using Outlook? --Mark -----Original Message----- > Date: Wed, 9 Sep 2015 17:22:34 +0200 > From: Matthias Lay <matthias.lay at

Hello. I have a problem with GPO manage. Sorry for my english is not the best. On the windows, GPO manage, the system send me this error: "The permissions for this GPO in the SYSVOL folder are inconsistent with those in Active Directory. It is recommended that these permissions be consistent. To change the SYSVOL permissions to those in Active Directory, click OK. For more

Good Morning Rowland, oh well, the bad side of the Internet... well the samba stuff was implemented by a former co-worker so I've to get into everything he did. Here’s the information you’ve requested, additionally with my config files I know changed based on the samba wiki: smb.conf: cat /etc/samba/smb.conf [global] workgroup = MYDOMAIN realm = MYDOMAIN.local netbios name =