similar to: bug 11573

Rowland, I think you have confused my email with a different thread. Uhm . . what? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-01-29 07:30, Rowland Penny wrote: > On 29/01/15 12:54, Bob of Donelson Trophy wrote: > Rowland, I have tried your various alteration

At one point, I thought the same. Tried a "sleep 5" and still got some failures. (That was before I started counting the fails.) This is a P4 3.2Ghz with 1Gb RAM. Could it be that sluggish (at that moment) and need a "sleep 10" or "sleep 15" or more? It worked on my VM (of course it is running on a multi-core Xeon processor so maybe a sleep?) I'm going to try

Thank you, Rowland. Copied your simpler ntp.conf file into my member server. Made the appropriate changes. Restarted all the ntp service on all machines (just in case.) Ran 'ntpq -p' (on member server) and got the correct answer. Proper connection to DC's. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone

I have a fresh Debian based Samba server and Member server setup. I have configured profiles and they appear to be saving properly to the member server. When I attempt to adjust file permissions (as instructed by the Sambawiki page "Samba & Windows Profiles") I am getting "Access Denied" complaints. These I believe (I could be wrong) relate to the file permissions

Louis, I ran your "1-setup-sernet-samba4-ADDC-wheezy.sh" script and noticed this (during install:) ==========SE Privileges =============================== Enter administrator's password: Could not connect to server 127.0.0.1 Connection failed: NT_STATUS_CONNECTION_REFUSED This is my /etc/resolv.conf: root at dc01:~# cat /etc/resolv.conf search dts***m.dt nameserver

Rowland, I have tried your various alteration suggestions and it is a "negative" result. Here is the output from wbinfo -u & wbinfo -g root at dtmbr01:~# wbinfo -u administrator dns-dtdc02 dns-dtdc01 krbtgt guest root at dtmbr01:~# wbinfo -g allowed rodc password replication group enterprise read-only domain controllers denied rodc password replication group read-only domain

On 08/01/15 18:37, Bob of Donelson Trophy wrote: > > > First, I keep forgetting that I need to change the email address to > reply to the mailing list. Sorry about that, everyone. (Hard to follow a > thread that is fragmented like this one now is.) I am focusing to > intently on my problem. > > Rowland, changed to 0755 for the three directories you suggested and >

Thank you. This helps get me closer. One machine shows rsync 3.0.9 and the other shows rsync 3.1.0. Running "rsync --version" both show "ACL, xattr" are supported. Two questions, would the two different version cause it to fail? Second, does the order rsync "receives" the switches matter. Does "-A" and "-X" need to be near the beginning of

Yes, it did install a bunch of packages from the sernet site. So far all the tests are failing. Seems that Sernet put samba under slightly different directories so I am struggling with testing. I was hoping there was some documentation on sernet site that I was having trouble finding, obviously not. Give me some time. It is just different again (from CentOS howto I had used in the past.) I

Once again, Bob is in 'the land of unknown bind knowledge.' What type of data am I adding? Shouldn't dns_update be run when adding the member server? Is this a "simple-bind-dn"? hum-m-m-m! --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On 2015-02-08 02:56,

No. What I did was change the first few to see what happens. And still the first 13 (this time, last time 17) failed. I am baffled why the first 11 to 17 fail (randomly) and the remainder receive "Successfully granted rights." --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an award!!" On

I will add here that my server provisioned yesterday afternoon. However, I did not have time to do any testing. So, this morning testing and the first thing I discovered was "sernet-samba-ad" service was NOT running. I found a Debian Wheezy sernet samba posting (via Google) and within it read that users need to edit "/etc/default/sernet-samba" as follows: # ---- SETUP

Thanks Rowland but that idea did not work. I will simply grant access to those that failed manually. (Really wish I had kept the VM that the scripthad worked on so I could go back and see what happened but, too late, I have already deleted to save precious hard drive space.) If I have any issues, I'll be back. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846

On my member server (Debian 7.8.0/Sernet Samba 4.2.2) when I run "apt-get update" I am receiving the following: Reading package lists... Done W: Duplicate sources.list entry https://download.sernet.de/packages/samba/4.2/debian/ wheezy/main amd64 Packages (/var/lib/apt/lists/download.sernet.de_packages_samba_4.2_debian_dists_wheezy_main_binary-amd64_Packages) W: You may want to run

I went and got the newest (upped recently) script. No love. I removed the email address line to get more command line output. root at dc01:~# ./samba-check-db-repl.sh Running with with console output Running : /usr/bin/samba-tool ldapcmp --filter='whenChanged' ldap://dc01 ldap://dc02.dtsh***m.dt. Please wait.. this can take a while.. Failed to bind - LDAP error 49

I expected to re-provision the domain. (That is easy, now.) Okay, so now the question becomes after the re-provision of the domain on the DC what needs to be changed on the MEMBER server. Obviously, the hostname needs to be corrected and check any needed changes within the smb.conf file. Thoughts? --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main)

Did, as su "apt-get install sernet-samba-ad" (after adding source to repositories.) (Have a test setup on CentOS 6.6 running but it is Samba 4.3.0 ** from git. Would prefer Samba version not so new as 4.3.0 so, want to change to Ubuntu.) --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [1] "Everyone deserves an

W7 client domain member? yes. Logged in as domainAdministrator? yes. "SeDiskOperatorPrivilege" set? yes Read "/Setup_and_configure_file_shares_with_Windows_ACLs"? yes. --- ------------------------- Bob Wooden of Donelson Trophy 615.885.2846 (main) www.donelsontrophy.com [2] "Everyone deserves an award!!" On 2015-01-28 10:40, Marcel de Reuver wrote: >

I upped 1.0.4 of the script.. I added checks if no DC's are found, error message and exits script, so no python errors anymore, if i did it right. ;-) on both DC's do the following. and whats the output of : cat /etc/hosts cat /etc/resolv.conf and kinit Administrator SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SERVER_IP_ADRESS=`hostname -i` echo "Test domainname:

I have created a DC01 & DC02 with Louis's (generation one) scripts. I have noticed, during some testing that 'pam-auth-update' shows PAM profiles Kerberos, Unix & Winbind listed on DC01. The DC02 only lists Kerberos & Unix and Winbind is missing. I thought that the two DC's were suppose to be identical? If DC01 goes "down" DC02 cannot carry a winbind