similar to: FSMO commands not working on 4.3.1

I have the Active Directory domain with Windows 2008 R2 domain controller and Samba domain controller on CentOS 7. Samba is 4.3.5 (self-compiled). Forest and domain levels are Windows 2008 R2. After joining Samba to the domain as the domain controller there were no DC=ForestDnsZones and DC=DomainDnsZones records on "OUTBOUND NEIGHBORS". I fixed it with ntdsutil, as it's written here

On Sun, Dec 13, 2015 at 6:08 AM, Rowland penny <rpenny at samba.org> wrote: > On 13/12/15 05:31, George wrote: > >> Hi guys! >> I am currently running 4.3.1 on Debian Jessie (compiled from the >> experimental repo). >> >> Pretty much everything seems to be working fine, but the FSMO functions: >> >> --------- >> root at dc2:~# samba-tool

Fail! :-( root at gteste2:~# samba-tool fsmo transfer --role=all -UAdministrador FSMO transfer of 'rid' role successful FSMO transfer of 'pdc' role successful FSMO transfer of 'naming' role successful FSMO transfer of 'infrastructure' role successful FSMO transfer of 'schema' role successful ERROR(<type 'exceptions.UnboundLocalError'>):

> On 21/12/15 17:53, George wrote: > > On Mon, Dec 14, 2015 at 5:58 PM, Rowland penny <rpenny at samba.org> wrote: > > > >> Try this: > >> > >> ldbsearch --cross-ncs -H /var/lib/samba/private/sam.ldb > >> '(fsmoroleowner=*)' | grep 'dn:' | sed 's|dn: ||' > >> > >> It should return something like

Hi for All! I am using a Windows Server 2008R2 as primary DC and a Ubuntu Server 16.04 as secundary DC with Samba 4.3.9 (from repository/apt-get). During a migration test of FSMO roles I received an error from Samba: root at gteste2:~# samba-tool fsmo transfer --role=all ERROR: Failed to delete role 'domaindns': LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <00002098: SecErr:

On 2015.11.22, at 2:27 PM, Rowland Penny <rowlandpenny241155 at gmail.com> wrote: > On 22/11/15 19:49, Matthew Delfino wrote: >> On 2015.11.19, at 9:59 AM, Matthew Delfino <mdelfino.list.samba at KNOCKinc.com> wrote: >> >>> On 2015.11.19, at 4:26 AM, mathias dufresne <infractory at gmail.com> wrote: >>> >>>> If you plan to keep

Hi. root at gteste2:~# root at gteste2:~# samba-tool fsmo transfer --role=all -UAdministrador --password=####### This DC already has the 'rid' FSMO role This DC already has the 'pdc' FSMO role This DC already has the 'naming' FSMO role This DC already has the 'infrastructure' FSMO role This DC already has the 'schema' FSMO role ERROR(<type

On 23/11/15 00:09, Matthew Delfino wrote: > > On 2015.11.22, at 4:43 PM, Matthew Delfino > <mdelfino.list.samba at KNOCKinc.com > <mailto:mdelfino.list.samba at KNOCKinc.com>> wrote: > >> >> On 2015.11.22, at 2:27 PM, Rowland Penny >> <rowlandpenny241155 at gmail.com <mailto:rowlandpenny241155 at gmail.com>> >> wrote: >>

On 2015.11.19, at 9:59 AM, Matthew Delfino <mdelfino.list.samba at KNOCKinc.com> wrote: > On 2015.11.19, at 4:26 AM, mathias dufresne <infractory at gmail.com> wrote: > >> If you plan to keep 4.3.x you can use --enable-fhs from configure script's options (and the two others proposed by configure --help associated to --enable-fhs). Doing that you should have most of

Alright... appreciate the info. Gave it a shot. Domain is still up but shares are down because they were hosted on FILER which has now been demoted and is no longer running any samba services. What I did while following the wiki "Transfer/Seize FSMO Roles": 1) logged on to FILER, ran samba-tool fsmo show, verified all 7 roles were owned by FILER. 2) logged on to CBADC01, executed

Hi there, I have a multi DC global setup. 9 x Ubuntu 14.04.3 DC's in multiple Sites. This has been working nicely for some time however recently the FSMO holder has been refusing LDAP requests on occasions and showing constant very high CPU usage: top - 08:59:12 up 8:51, 1 user, load average: 1.03, 1.00, 1.03 Tasks: 186 total, 4 running, 182 sleeping, 0 stopped, 0 zombie %Cpu0 :

Greetings - On our samba 4 (4.3.3) AD controller I just noticed something odd. When I run 'samba-tool fsmo show' I get an error: # samba-tool fsmo show ERROR(ldb): uncaught exception - No such Base DN: CN=Infrastructure,DC=DomainDnsZones,DC=biostat,DC=washington,DC=edu File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run

On 14/12/15 20:31, George wrote: > On Sun, Dec 13, 2015 at 6:08 AM, Rowland penny <rpenny at samba.org> wrote: > >> On 13/12/15 05:31, George wrote: >> >>> Hi guys! >>> I am currently running 4.3.1 on Debian Jessie (compiled from the >>> experimental repo). >>> >>> Pretty much everything seems to be working fine, but the FSMO

If you plan to keep 4.3.x you can use --enable-fhs from configure script's options (and the two others proposed by configure --help associated to --enable-fhs). Doing that you should have most of your directories reused (/etc/samba, /var/lib/samba...) That worked for me as I don't care polluting /usr and others (I use VMs and destroy them without a tear) on Centos 7 when I switched from

Sorry, I meant to include the command you sent in my last message, I had executed it while troubleshooting... :~$ sudo /usr/local/samba/bin/ldbsearch --cross-ncs -H /usr/local/samba/private/sam.ldb '(fsmoroleowner=*)' | grep 'dn:' | sed 's|dn: ||' CN=Schema,CN=Configuration,DC=cb,DC=cliffbells,DC=com CN=Partitions,CN=Configuration,DC=cb,DC=cliffbells,DC=com

On 23/11/15 14:15, Matthew Delfino wrote: > > On 2015.11.23, at 3:58 AM, Rowland Penny <rowlandpenny241155 at gmail.com > <mailto:rowlandpenny241155 at gmail.com>> wrote: > >> On 23/11/15 00:09, Matthew Delfino wrote: >>> >>> On 2015.11.22, at 4:43 PM, Matthew Delfino >>> <mdelfino.list.samba at KNOCKinc.com >>>

On 21/03/16 15:44, Landau Daniil wrote: > I have the Active Directory domain with Windows 2008 R2 domain controller and Samba domain controller on CentOS 7. Samba is 4.3.5 (self-compiled). Forest and domain levels are Windows 2008 R2. > After joining Samba to the domain as the domain controller there were no DC=ForestDnsZones and DC=DomainDnsZones records on "OUTBOUND NEIGHBORS". I

I ran ldbsearch on my sam.ldb I searched for CBADC02, CBADC03, and TESTES (all VMs that fail to join domain), results are below: CBADC02 shows up a few times: # record 1906 dn: CN=CBADC02\0ADEL:de85228c-f92b-4d5d-9d6a-01c3f915dec9,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configu$ objectClass: top objectClass: server instanceType: 4 whenCreated: 20160310044543.0Z uSNCreated: 4215

Hi for all! Great news! The procedure worked properly and fix the problem. Thank you so much 'Jason Waters' and 'Rowland Penny' for Support :-) root at gteste2:/anderson# *root at gteste2:/anderson# ldbmodify -H /var/lib/samba/private/sam.ldb --cross-ncs ./fsmofixdomaindns.ldif* Modified 1 records successfully *root at gteste2:/anderson# ldbmodify -H /var/lib/samba/private/sam.ldb

Rowland penny wrote on 3/18/16 11:48 AM: > On 18/03/16 18:19, Robert Moulton wrote: >> Greetings - On our samba 4 (4.3.3) AD controller I just noticed >> something odd. When I run 'samba-tool fsmo show' I get an error: >> >> # samba-tool fsmo show >> ERROR(ldb): uncaught exception - No such Base DN: >>