similar to: Add DC to a site using command line

Yes, that should be. I haven't tested that yet but I'm pretty confident it works. Cheers, m. 2015-10-06 10:19 GMT+02:00 Rowland Penny <rowlandpenny241155 at gmail.com>: > On 06/10/15 09:07, mathias dufresne wrote: > >> Hi all, >> >> Is there a command line to add DC to some site? >> >> The idea is to have a domain with several sites. If the

Hi all, Thank you Mark for these precisions. I did switch a DC to --dns-backend=NONE using samba-tool domain join. This removed dns-<DCname> user for this DC and associated keytab. We changed /etc/resolv.conf to use another DC - one with Bind running - as nameserver. Stopping there, running samba_dnsupdate gave error "NOTAUTH". As we want our DC being able to push into DNS

Hi all, How to configure Samba to remove DNS service from DC? I thought there was an option for samba_dnsupgrade command to tell "remove all DNS service from current DC" but I don't find it anymore. This question is because we are about to deploy an AD with 20 or more DC and there is no need they are all DNS servers. In fact having them all DNS servers make design more complex and

2016-02-10 16:54 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 10/02/16 15:36, mathias dufresne wrote: > >> My answer below. >> >> 2016-02-10 15:38 GMT+01:00 Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>>: >> >> On 10/02/16 14:07, mathias dufresne wrote: >> >> >> >>

On 16/11/15 14:33, mathias dufresne wrote: > Another error coming often: > [2015/11/16 15:11:07.592598, 0] > ../source4/librpc/rpc/dcerpc_util.c:745(dcerpc_pipe_auth_recv) > Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for >

My answer below. 2016-02-10 15:38 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 10/02/16 14:07, mathias dufresne wrote: > >> >> >> 2016-02-10 14:37 GMT+01:00 Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>>: >> >> >> On 10/02/16 11:12, mathias dufresne wrote: >> >> Hi all, >>

On 16/11/15 15:09, mathias dufresne wrote: > That did not work. I've added DNS entries mentioned in that wiki page. I > also forced creation of all entries mentioned by samba_dnsupdate > --all-names --verbose. > So I expect all needed DNS entries are present. If some are still missing > they are not mentioned by samba_dnsupdate. And as samba_dnsupdate job is to > create

Hi all, I have 3 DCs running Samba 4.3.1 in the same domain. They seem to work quiet well with coherent databases on each of them. After rebuilding my RPM to include systemd units, I've joined a Samba 4.3.1 today, using --domain-critical-only. The join was successful, the replication was not. This DC has only 146 objects in the DB when it should have a bit less than 50000 objects. As I was

2016-02-10 14:37 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 10/02/16 11:12, mathias dufresne wrote: > >> Hi all, >> >> Using 4.3.4 + Bind DLZ @ Centos 7. >> >> Regarding AD sites, I have several questions: >> >> 1° Is it possible with Samba4 to rename Default-First-Site-Name? >> > > Depends on what you mean, if you mean

Hi Mathias, lingpanda101, thank you for the quick reply! Comments inline. On 22.04.2016 15:14, mathias dufresne wrote: > Hi Ole, > > A - If I read correctly you have only one DC and you want to move from > one network to another. > > To achieve that change you will have to change all A/AAAA records in > your both AD zones (root zone and _msdcs zone). > Once that is done

James, it took me a while, but now I am doing this. I created the new site with RSAT (want to move over my 1st DC), but this new site isn't showing in the DNS console. Do I have to create the new site there, as well? Ole On 25.04.2016 14:27, lingpanda101 at gmail.com wrote: > On 4/22/2016 3:43 PM, Ole Traupe wrote: >> Hi Mathias, lingpanda101, thank you for the quick reply!

Thanks again for your help, James! I did test-wise and I didn't see any changes in DNS. But I hadn't changed the IP, yet. So I suppose I move the DC over, change the IP, and then restart Samba and it will update the DNS itself? Ole ________________________________________ Von: samba <samba-bounces at lists.samba.org> im Auftrag von lingpanda101 at gmail.com <lingpanda101 at

Hi all, When provisionning a Samba 4 AD domain with --use-rfc2307 the option "idmap_ldb:use rfc2307 = yes" is added to our first DC's smb.conf. When joining a Samba4 to a domain to make it a DC we can't use --use-rfc2307 and "idmap_ldb:use rfc2307 = yes" is not automatically added to newly joined DC's smb.conf. Question 1: is this option useless on non-FSMO DC?

On Mon, 2015-11-16 at 16:50 +0100, mathias dufresne wrote: > transaction: operations error at > ../source4/dsdb/samdb/ldb_modules/descriptor.c:1147 Looking at that line in your version of Samba may give you some idea why it failed. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer,

On 25.04.2016 14:27, lingpanda101 at gmail.com wrote: > On 4/22/2016 3:43 PM, Ole Traupe wrote: >> Hi Mathias, lingpanda101, thank you for the quick reply! Comments >> inline. >> >> >> On 22.04.2016 15:14, mathias dufresne wrote: >>> Hi Ole, >>> >>> A - If I read correctly you have only one DC and you want to move >>> from one

I do : ) 2016-03-03 10:52 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 03/03/16 09:31, mathias dufresne wrote: > >> Hi all, >> >> Thank you Mark for these precisions. >> >> I did switch a DC to --dns-backend=NONE using samba-tool domain join. This >> removed dns-<DCname> user for this DC and associated keytab. >> >> We

Hey, Thank you Louis for this script, I didn't yet took time to dig in but I'll do. I didn't took time neither to perform another test. That should be done today. Anyway I waited for DC synchronisation before posting. I joined my DC and removed the old ones almost at same time then I gave more than 12 hours to my DC to synchronize. Then I tried to understand what happened, I wrote

No replication this morning but FSMO was rebooted yesterday. Only joined DC were rebooted. After verifying all A records related to new DC were created, I forced creation of replication related DNS entries as described there : https://wiki.samba.org/index.php/Check_and_fix_DNS_entries_on_DC_joins#Resolve_the_objectGUID_CNAME_record_of_the_new_joined_Domain_Controller I forced replication (drs

Hi all, thanks for all your replies! It finally went down very smoothly (once I discovered that a pre-installed fiber optics cable wasn't crossed properly, preventing some new switches in different rooms of our new lab building to stack - like after 5 hours, you know ;). I followed James' advice and the two links he provided (at the bottom of this message). And mind that I am using

Hi List, I'll probably have to move my FSMO role owner to another site. Like at the end of next week (depends on tight transportation schedules). So there is no actual time for testing anything, I am afraid. We are in the process of moving our lab, with our offices staying in the old building for now (different class C subnets). The physical machine is basically a file server (hosting