similar to: dc stops working

I'm having some weird issues trying to add a 3rd DC to my domain. All machines are on CentOS 6.5 running Samba 4.1.11 from sernet. No problems with my existing two DCs (as far as I know). However, I tried to add a 3rd DC, and in samba-tool drs showrepl I see errors like this on my existing DCs: Last attempt @ Fri Sep 26 17:48:14 2014 CDT failed, result 8 (WERR_NOMEM) on the new

Hi all, Sernet Samba 4.2.2 as Active Directory on Debian 7.8. No other DC. I can't log in with on Windows systems (Windows 7) when samAccountName are longer than 20 characters. This seems to be a LAN MAN or NT4 limitation which should not happen on AD domain. Any idea what could leads my to that limitation? I can log in using administrator account or any other having a short (enough)

The server expects TLS but you didnt set tls. Read : https://www.samba.org/samba/history/samba-4.2.10.html basicly its now : Default: ldap server require strong auth = yes You can try to add: ldap server require strong auth = no But i do advice to setup the TLS parameters and make everything more secure. Please read these links, MS change some things in GPO also. MS16-072: Security

We have setup Samba 4.1 as a PDC. We have successfully connected several Windows 2008 Servers to the domain and created various users/groups. During an application installation on the Windows server, it runs the command in SQL server: master..xp_logininfo 'MYDOMAIN\useraccount' SQLserver is running as a service user created on the domain (here called MYDOMAIN) This returns: Msg

Hi, I try to use nslcd with samba 4 for get suers and group for AD. if I do a ldapsearch, I have a message : Server not in kerberos database if I do a getent passwd, nslcd display same error message. log of samba4: [2013/08/28 10:15:47, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: TGS-REQ Administrator at CORMANDOM.INT-CORMAN.BE from

After a user changes their password (CTRL-ALT-DEL) in our Samba 4 domain (4.1.12) they lose access to any stored passwords on their Windows PC. I've set the log level in smb.conf to 4 and enabled the GPO to record DPAPI log entries in Windows to get the below log data. My reading of the two is that the Windows PC believes it is failing to reset the access to its DPAPI store (where the saved

Hi, My problem relates to SAMBA 4.0.5, especially with acl / ntacl problem. Explanation: I'm currently trying to install a TEST System with a Samba4 ADDC system, using Ubuntu server 12.04. I've successfully completed the install and followed mostly the howto's on samba.org for SAMBA4. I'm currently struggling with changing ACL on the Samba 4 Share itself, and

Hi all. I'm experiencing a little problem when I rename an already joined windows machine. The rename operation is done in the traditional way "Computer properties> advanced settings> Computer name> change" in a windows 7 Machine. The rename itself finishes successful, but when I check the computer name in the ADUC, the old name is still displayed. Checking the object

Hi There, We are getting INTERNAL ERROR: Signal 11 in pid on multiple different servers (Debian Wheezy, using Samba 4.0.13 and 4.1.3, using kernel 3.2.0-4 and 3.11.6-2), the outcome is always the same. The group policies can no longer be applied to the clients until a Samba4 restart. The locations with these issues do have in common that they have multiple Samba4 DC's although i am not

We are using samba 4.1.9 complied from source. We have been running as an AD DC for 5 months. Lately, we have noticed that samba processor seem to consume the entire system, using all cpu cycles. This happens within about 30 minutes of starting or restating the samba daemons. When Samba slows down, the first issue that comes up is that dns name resolutions time out for any client asking for

Hi, i need help with strange problem. I installed Fedora 28 to test Samba 4 AD DC with MIT Kerberos with Windows 10 and Windows 7 clients and i can't run GPOs for machines. GPOs for users works. On Fedora 27 is the same problem. After couple of hours changing settings I make a new installation of Debian 9.4 and everything works "out of the box". I set all like here:

Dear All, Need some help as I was trying to follow the guide below. https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC Until the steps of ldbsearch -H /usr/local/samba/private/sam.ldb '(invocationid=*)' --cross-ncs objectguid and my ldbsearch reply with such a result. ldb: unable to dlopen /usr/lib64/samba/ldb/acl.so : /usr/lib64/ldb/libreplace.so: version

samba-4.7.5 debian 9.3 installed as join dc in existing domain on samba 4.1 everiting look like working but some windows member stop to have access to shares on dc by ip connect by \\full_domain_name work there some log in samba dc [2018/02/20 15:15:00.652467, 4] ../auth/auth_log.c:860(log_successful_authz_event_human_readable) Successful AuthZ: [DCE/RPC,ncacn_np] user [NT

Hai MJ, ( gelukkig nieuwjaar he .. ;-) ) First, why sernet 4.2.5 current is 4.2.7 Upgrade to 4.2.7 first i suggest. And : Last attempt @ Wed Nov 11 <= 11 Nov ? latest really? The "misbehaving server" check the time first. Try to run : knit Administrator samba-tool drs replicate <destinationDC> <sourceDC> --full-sync -k reboot your server, check time, check

Not sure about the high CPU load, but you have the [netlogon] share twice in your smb.conf. Your first matches mine, have you added the second yourself? The second one looks weird with 2 path definitions. Cj Tibbetts schreef op do 18-12-2014 om 08:59 [-0700]: > New to linux and new to Samba so any direction in troubleshooting would be > helpful. Here is what I have so far. > > Within

Sorry, I missed some relevant part of the logs after the suggested changes: Kerberos: AS-REQ user2 at MYDOMAIN from ipv4:192.168.44.56:2080 for krbtgt/MYDOMAIN at MYDOMAIN [2017/04/21 12:47:37.526742, 3] ../source4/auth/kerberos/krb5_init_context.c:80(smb_krb5_debug_wrapper) Kerberos: Client sent patypes: encrypted-timestamp, 128 [2017/04/21 12:47:37.526772, 3]

>>> I am running samba 4.1.9 compiled with internal dns. Please upgrade first to the latest samba version before be can investigate whats going on. The lastest is 4.1.14 now and lots have happend in betweeen. Greetz, Louis >-----Oorspronkelijk bericht----- >Van: ricky.nance at gmail.com >[mailto:samba-bounces at lists.samba.org] Namens Ricky Nance >Verzonden:

Hi, We have three DC's, and one of them has been misbehaving a few times lately, stopping to replicate, showing the following error in samba-tool drs showrepl, for all DC partitions: > DC=DomainDnsZones,DC=samba,DC=company,DC=com > Default-First-Site-Name\DC2 via RPC > DSA object GUID: 5e93a102-2963-496a-af16-0c51eebb2e31 > Last attempt @ Wed Nov 11 06:41:21 2015 CET

Hello, I think I really need some help on this. Since Samba 4.2.11 upgrade my Windows 10 clients are unable to synchronize group policies. I have asked about this already here <https://lists.samba.org/archive/samba/2016-April/199226.html>. Now I re-investigate the issue with Windows 10 1607 update and still face the same issue which prevents me from rolling out this configuration in

Here is the information requested it took 3 days before results came samba-tool dbcheck finished with this error root at ham1:/usr/local/samba/bin# time ./samba-tool dbcheck --cross-ncs Checking 212687 objects ERROR(<type 'exceptions.MemoryError'>): uncaught exception - File "/usr/local/samba/lib/python2.7/site-packages/samba/netcmd/__init__.py", line 175, in _run