similar to: ldap replication failure for Domain and Configuration

Hi Mourik, whenChanged was replicated in my test once I did replicate in both way, so it seems to me it is supposed to be replicated... Then the fact it is not always replicated seems to me an issue. Perhaps a bug report for these two issue (whenChanged not always replicated and ldapcmp hanging once DB is too much filled) would be the right way to proceed... Cheers, mat 2015-09-03 10:42

Thank you Rowland for these info. So no more issue with 4.2.3 and auto-replication : ) Cheers 2015-09-03 11:52 GMT+02:00 Rowland Penny <rowlandpenny241155 at gmail.com>: > On 03/09/15 09:59, mathias dufresne wrote: > >> Hi Mourik, >> >> whenChanged was replicated in my test once I did replicate in both way, so >> it seems to me it is supposed to be

On 23/11/15 15:51, Matthew Delfino wrote: > > On 2015.11.23, at 8:32 AM, Rowland Penny <rowlandpenny241155 at gmail.com > <mailto:rowlandpenny241155 at gmail.com>> wrote: >> OK, try again, but this time, remove the <fSMORoleOwner> from the end >> of the command, this will dump the entire AD object, I am sure you >> will find that there is no

Hi all, I have just updated our dc's from sernet 4.1.11 to sernet 4.1.12. And suddenly since that update, we're getting many ldapcmp failures on the attribute 'whenChanged'. In 4.1.11 life was good, and ldapcmp reported no differences at all. Here is a sample: (dc2 <-> dc3) Comparing: 'CN=podcast,CN=Users,DC=samba,DC=company,DC=com' [ldap://dc2]

On 11/10/2019 14:58, Luca Olivetti via samba wrote: > El 10/10/19 a les 20:23, Luca Olivetti via samba ha escrit: >> Today I noticed something that has been going on for some weeks: >> >> I have 2 dc, (dc1 and dc2) both debian buster with the distro >> provided samba (4.9.5), recently upgraded from stretch. >> >> samba-tool drs showrepl on dc2 says >>

Hi, I have set up a fresh DC from scratch using samba 4.5.1 with Bind9, added another DC, all strictly following the instructions in the samba wiki. Samba was built from the source tarball on debian/raspbian 8u8 (Jessie), Bind9 is 9.9.5-9 coming with the OS. Everything appears to be in a working order: I can join Windows workstations, add Users with RSAT, etc. Only when comparing the

hi list, If a new object was created, samba 4.5.0 on the first DC creates a ldapObject with the attribute name CN in lower case. On the second DC samba via replication creates the object with upper case attribute name. Is this a problem or can i ignore this? root at dc1: # samba-tool ldapcmp --filter=whenChanged ldap://dc1 ldap://DC2 * Comparing [DOMAIN] context... * Objects to be compared:

On 23/11/15 14:15, Matthew Delfino wrote: > > On 2015.11.23, at 3:58 AM, Rowland Penny <rowlandpenny241155 at gmail.com > <mailto:rowlandpenny241155 at gmail.com>> wrote: > >> On 23/11/15 00:09, Matthew Delfino wrote: >>> >>> On 2015.11.22, at 4:43 PM, Matthew Delfino >>> <mdelfino.list.samba at KNOCKinc.com >>>

El 11/10/19 a les 16:59, Luca Olivetti via samba ha escrit: > El 11/10/19 a les 16:12, Rowland penny via samba ha escrit: >> Try running this on a DC: >> >> samba-tool ldapcmp ldap://DC1 ldap://DC2 >> --filter='whenChanged,dc,DC,cn,CN,ou,OU' >> >> Replace 'DC1' and 'DC2' with your actual DC short hostnames >> >> It should

I have installed a secondary DC in my network, following the tutorial: https://wiki.samba.org/index.php/Join_a_domain_as_a_DC#Kerberos I have ran the following command: samba-tool domain join mydomain.com.br DC -Uadministrator --realm = mydomain.com --dns-backend = BIND_INTERNAL It seems that everything is OK. I have ran the following commands in both DC and the result was the same: ldbsearch

El 11/10/19 a les 17:29, Rowland penny via samba ha escrit: > On 11/10/2019 16:02, Luca Olivetti via samba wrote: >> El 11/10/19 a les 16:59, Luca Olivetti via samba ha escrit: >>> El 11/10/19 a les 16:12, Rowland penny via samba ha escrit: >>>> Try running this on a DC: >>>> >>>> samba-tool ldapcmp ldap://DC1 ldap://DC2 >>>>

Hai, ? I've just upgrade samba on my DC's from 4.10.10 to 4.11.2. Which went fine offcourse ;-) but when i checking my replications i noticed the following. ? If people have problems upgrading, the steps to take are : ( Debian buster, samba upgrade 4.10=> 4.11 van-belle repo. ) # update 4.10 to 4.11 sed 's/410/411/g'? /etc/apt/sources.list.d/van-belle.list apt update apt

Problems with Secondary DC My scenario: DC1 = = SRV14=primary DC + DHCP Bind9 DC2 = SRV15=secondary DC + Bind9 Both running Samba 4.4.5. Through the Group Policy Management, when switching DC, when I try to connect to DC2, I get error message: "There was an error processing to collect data using this base domain controller. Change the base domain controller and try again." When

Running "samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator" on our production system results in mismatches for items in the domain section: * Comparing [DOMAIN] context... * Objects to be compared: 625 Comparing: 'CN=AdminRole,OU=Group,OU=Postgres,DC=ourdomain' [ldap://DC1] 'CN=AdminRole,OU=Group,OU=Postgres,DC=ourdomain' [ldap://DC2] Difference in

Hai Mason,   I had a look at the debug output.   on 1) why around 15-16 second, that i really dont know. im trying to figure that out. on 2) if DNS is inconsistance, that everything is unrelayable. This is really the first the that needs fixing. then we look again at the replication.   The debug output still shows several messages about zones in flat files. I still do believe also that this

Hello Folks, I'm a Brazilian student. I'm doing some labs about SAMBA4 AD DC with 4 domain controllers (03 Linux Debian 8 x64 with SAMBA 4.3.1 installed by souce packeage and 01 Windows Server 2008 R2 Standard x64 to study for LPIC3 certification exam.) About the "samba-tool ldapcmp" (https://wiki.samba.org/index.php/Samba-tool_ldapcmp), in my lab, even applying the indicated

hi, there are just 2 bug-rports: https://bugzilla.samba.org/show_bug.cgi?id=12399 https://bugzilla.samba.org/show_bug.cgi?id=12302 Regards, Heinz Am Donnerstag, 17. November 2016 00:00 CET, Norbert Hanke via samba <samba at lists.samba.org> schrieb: > Hi, > > I have set up a fresh DC from scratch using samba 4.5.1 with Bind9, > added another DC, all strictly following

On 18/07/19 11:42, Rowland penny via samba wrote: > Well, 'dns-dc2' is the user for Bind9 on dc2, so you shouldn't try to > create it yourself. > > Easiest way will be to remove all mention of the dead DC, then use > 'samba_upgradedns' to upgrade to the internal dns server, then run it > again to upgrade to Bind9 again, this will create the required user

On Sun, 10 May 2015, Rowland Penny wrote: > Have you really got 19 reverse zones for your samba 4 active directory ? Yep :-) > Can you try running 'samba-tool ldapcmp ldap://<YOUR_FIRST_DC> ldap://<YOUR_SECOND_DC> Interesting. DC1 and DC2 have many differences; DC1 and DC3 are the same. Maybe I will demote DC2 and join it again. > Check if you actually have dns

I have a domain with multiple Samba DC, and one MS Server 2008 R2 DC. The Samba servers came first and then I added the MS DC. I am having problems replicating, it gives me a schema mismatch error. If I run ldapcmp ./samba-tool ldapcmp ldap://DC1 ldap://DC2 -Uadministrator schema --filter=whenChanged Password for [MYDOMAIN\administrator]: * Comparing [SCHEMA] context... * Objects to be