similar to: Disable KCC in Samba

I read about 4.3.0 and we test this version in polygon. In production we have more than 80 sites and about 200 domain controllers. In test environment we have a lot warning KCC (samba 4.3.), and we suggest in production we have the same picture. Will you make change in KCC for nearest Samba release? Best regards, DMITRIY LUCHKO -----Original Message----- From: samba [mailto:samba-bounces

On Tue, 2015-11-17 at 12:44 +0000, Luchko Dmitriy wrote: > Andrew, thank for answer! > > We understand about limitation subdomains on Samba but we suggested > that is one cause of current problem. We can all agree that this is a current limitation. > May be you know why python process can hung with 100% CPU ? Does > samba have limitation of groups or OU hierarchy? > p.s.

Thanks for the answer! Is that true if we have Subdomains, Samba write to DB information only about join-domain? And what option --domain-critical-only do? I did not see the difference - with or without. -----Original Message----- From: Andrew Bartlett [mailto:abartlet at samba.org] Sent: Saturday, October 31, 2015 12:14 PM To: Luchko Dmitriy <Luchko.D at digdes.com>; samba at

Hi Andrew! I notice, when we have a lot of domain Samba replicate object from all domain - it's too long for us (GC about 16gb). I going to use --domain-critical-only, and after join disable GC on Samba. -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Andrew Bartlett Sent: Friday, October 30, 2015 6:31 AM To: Luchko Dmitriy; samba at

On Tue, 2015-11-17 at 08:27 +0000, Luchko Dmitriy wrote: > I created test environment: 1 root domain, 2 subdomain. I created > about 250000 user accounts in subdomain 2 (sub2.company.com) ntds.dit > 14gb. Joining samba in first subdomain (sub1) was without problem. > But in production environment (with a lot of domains and objects) > python process was hung with 100% CPU (after 6

Stand contains two DC with Windows 2003 Std SP2 En: - root domain company.local - child domain (1) gonzo.company.local -- site 1: Windows 2003 (FSMO) -- site 2: Samba AD DC - child domain (2) depth.company.local I have CentOS 7 and Samba 4.3 in child domain (1) in dedicated active directory site (site 2 ). When I try logon from client (windows 7 workstation) I have error "Insufficient

Hi, When we try replicate domain tree from Win DC to Samba DC we have timeout error: ERROR(<class 'samba.drs_utils.drsException'>): DsReplicaSync failed - drsException: DsReplicaSync failed (-1073741643, '{Device Timeout} The specified I/O operation on %hs was not completed before the time-out period expired.') File

It's strange. We have root domain and a lot subdomain. We try to join Samba to one of subdomain. Active Directory DB (NTDS.dit) without GC = 1.2 Gb, with GC=16 Gb. When we try to join Samba we have samba DB limit 4Gb. We see that samba replicate information about all domains in forest: descriptor_sd_propagation_recursive: DC=DomainDnsZones,DC=domain1,DC=oao,DC=company not found under

Hi, I have nowhere seen information about restrictions of Samba: How many objects Samba can store in sambadb? What maximum size tdb database? How many domain controllers can be in one samba domain? How many sites can be store in one Samba domain? Best regards, DMITRIY LUCHKO

I really forgot about .local but I don't think that the problem is related with this. -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland Penny Sent: Friday, October 02, 2015 3:25 PM To: samba at lists.samba.org Subject: Re: [Samba] Samba 4.3 Logon Error (Insufficient system resources exist to complete the requested service) On 02/10/15

Hi, Can we join Samba without GC role (global catalog) use samba-tool domain join? Best regards, DMITRIY LUCHKO

Andrew, thank for full answer! -----Original Message----- From: Andrew Bartlett [mailto:abartlet at samba.org] Sent: Tuesday, November 17, 2015 9:34 PM To: Luchko Dmitriy <Luchko.D at digdes.com>; samba at lists.samba.org Subject: Samba limitations at scale (was: Re: [Samba] Join Samba without GC role) On Tue, 2015-11-17 at 12:44 +0000, Luchko Dmitriy wrote: > Andrew, thank for answer!

Hi Dmitriy, I can only answer one of your question: tdb size limit is 4GB because there some piece of code about tdb which is still in 32 bits, limiting the file size. Regarding number of objects I push a bit more than 270000 objects in one AD in addition of initial objects. 120000+ users, 150000+ computers, no groups. TDB size was between 3.0GB and 3.5GB. For others questions, I let others

I created test environment: 1 root domain, 2 subdomain. I created about 250000 user accounts in subdomain 2 (sub2.company.com) ntds.dit 14gb. Joining samba in first subdomain (sub1) was without problem. But in production environment (with a lot of domains and objects) python process was hung with 100% CPU (after 6 hour we killed hung process). Why can this happened? This is samba subdomain

Andrew, thank for answer! We understand about limitation subdomains on Samba but we suggested that is one cause of current problem. May be you know why python process can hung with 100% CPU ? Does samba have limitation of groups or OU hierarchy? p.s. May be our questions too strange but we don’t have full documentation, about samba limitations and samba architecture. -----Original

On 9/18/2016 6:23 PM, Garming Sam wrote: > Hi, > > For the unsorted attributeID values errors, can you first try: > > samba-tool dbcheck --cross-ncs --fix --yes 'fix_replmetadata_unsorted_attid' > > There's too much going on, and it does look like it might be bailing > out. Running it with 'fix_replmetadata_unsorted_attid' should fix those > first

Hello, Updated samba from 4.4.5 to 4.5.0. All DC's are Ubuntu 12.04.5 LTS. I install samba from source(./configure,make,make install). Looking at the release notes I see the section on "replPropertyMetaData Chnages". I run 'samba-tool dbcheck --cross-ncs --fix --yes' and see the errors and samba attempts to fix. ERROR: unsorted attributeID values in

On 9/21/2016 11:32 PM, Garming Sam wrote: > I would have assumed that deleting all the NTDS connections for all the > DCs would have remedied this issue. I'll write a patch to try to avoid > this error in any case. > > Ignoring this error and answering your earlier question, it's often hard > to tell if the KCC is doing what is expected or not. To figure that out, >

On 9/24/2016 7:32 AM, Denis Cardon wrote: > > the job of the samba_kcc script is to create the ntdsConnection > objects. Afterward the repsFrom/repsTo attribute are created in > accordance with the ntdsConnection objects (you can force the creation > using samba-tool drs replicate although). You can check that the > process is asynchronous when you join a new DC, the INBOUND

On 02/10/15 13:47, Luchko Dmitriy wrote: > I really forgot about .local but I don't think that the problem is related with this. > > -----Original Message----- > From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of Rowland Penny > Sent: Friday, October 02, 2015 3:25 PM > To: samba at lists.samba.org > Subject: Re: [Samba] Samba 4.3 Logon Error (Insufficient