similar to: Question with new Samba 4.3's Improved KCC

Hi Denis, Thanks for your advices. I have in mind about your kerberos problem in a large environment but i was thinking about problem occuring at 20 and more DCC's So last night, i modified all my krb5.conf (DC and file server) as you suggest but problem persist. root at dc111:~# samba-tool domain join pr.educationetformation.fr DC -U administrator --realm=PR.EDUCATIONETFORMATION.FR -W PR

Hello ! I'm trying to add new DC to my existent domain (18 Samba4 DC) but this time, domain join stuck after setting account password. I have tried so many things but at this point, i really don't know what to do. I can see the new dc111 computer object on smb4dc serveur but the object is disable. If someone have an idea... Best regards root at dc111:~# samba-tool domain join

Hi Jordi, > I'm trying to add new DC to my existent domain (18 Samba4 DC) but this time, domain join stuck after setting account password. > I have tried so many things but at this point, i really don't know what to do. > > I can see the new dc111 computer object on smb4dc serveur but the object is disable. > If someone have an idea... Could you try to see if it gets

Hi, Having an test environment here with four sites, sites 2-4 are connected to site 1 via vpn. No vpn tunnels between sites 2-4, so the sites 2-4 can only communicate with site 1. Each site has it's samba4 AD DC server and they are all part of the same domain. Did abit of reading and found that i must use so called SiteLinks to replicate the site objects between sites 2-4 via site 1.

Am 25.11.2017 um 16:55 schrieb Achim Gottinger via samba: > > > Am 25.11.2017 um 04:39 schrieb Andrew Bartlett: >> On Fri, 2017-11-24 at 11:55 +1300, Andrew Bartlett via samba wrote: >>> On Tue, 2017-11-21 at 11:21 +0100, Achim Gottinger via samba wrote: >>>> Hello List, >>>> >>>> In preparation to update my samba ad-dc's running

Hi all, some background : ===== recently I had to cleanup a network of 1 DC on main office and 5 RODC on remote location. On one RODC for some reason there where still ntdsConnection objects with fromServer attribute pointing to servers GUID that do not exists anymore. Those fromServer attribute with spurious guid can be seen with ldbsearch but cannot be seen through ldap connexion, so I

Hello Denis, Same problem here, playing with RODC Where have you found spurious entries ? sam.ldb ? I've tried searching < nTDSConnection > without success Thanks for your help

I've been slowly reviewing our KCC patch series by Douglas and Garming into Samba git master over the past few days, and I expect that to be fully merged shortly. The purpose of this work is to change Samba from full-mesh replication to respecting site boundaries, and so trying to reduce WAN replication traffic. However, I need the help of Samba administrators to ensure this work is ready

Hi, colleges, We have a big environment with windows domains controllers. We know that KCC in samba doesn't work well now. How we can disable KCC in Samba and create site-link manually? Best regards,   DMITRIY LUCHKO

I read about 4.3.0 and we test this version in polygon. In production we have more than 80 sites and about 200 domain controllers. In test environment we have a lot warning KCC (samba 4.3.), and we suggest in production we have the same picture. Will you make change in KCC for nearest Samba release? Best regards, DMITRIY LUCHKO -----Original Message----- From: samba [mailto:samba-bounces

On 23/09/16 00:59, lingpanda101 at gmail.com wrote: > For clarification I'll add a few things. > > I initially deleted all the NTDS site links for each site and allowed > the new KCC to create them. However it did not create them I believe > correctly. By that I mean it defined what appeared to be a bridgehead > server at each site. So I disabled the new KCC >

> > Wasn't aware of this. Thank you for the info. If I was to delete the > incorrect respsFrom/repsTo attributes, wouldn't the KCC just > regenerate them over time once the KCC check and ISTG check kicked in? As long as the topology doesn't change or DCs which are not bridgeheads do not go offline, there should be basically zero additional reps over time. How often they

Hi Christian, Am 10.05.2017 um 06:56 schrieb Christian Naumer via samba: > we have upgraded our 4 DCs from samba 4.4.12 to 4.6.3. > The setup is working fine and no errors were displayed > during the upgrade. After a day I noticed that the DC > dc1) holding the fsmo roles is missing one kcc connection > to dc3) in the output of samba-tool drs showrpl. > Otherwise there

Hi Rowland Thanks for the link https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage It should fix the Firewall authentication problem. I like to find out if I can rename the Domain name of the DC when I move it to the new DC like currently it is IUMNET.EDU.NA <http://iumnet.edu.na/> but my GApps domain name is IUM.EDU.NA <http://ium.edu.na/> and I like to use the same on my new

On Thu, 28 Feb 2019 18:04:50 -0600 (CST) Mike Ray via samba <samba at lists.samba.org> wrote: > Hello all- > > I am trying to upgrade a old domain to a newer version. The old DCs > are a custom compiled version of Samba, so instead of upgrading the > DCs in place, the plan is to upgrade by joining new DCs to the > domain, replicating data and then shutting down the old

----- On Mar 1, 2019, at 9:20 AM, Mike Ray mray at xes-inc.com wrote: > ----- On Mar 1, 2019, at 3:35 AM, samba samba at lists.samba.org wrote: >> >> I wonder if this has anything to do with the 'you cannot upgrade >> directly from 4.7.x to 4.9.x' bug ? > > > I was not aware of this bug. Do you think I should scrap this upgrade and try > again jumping

After force-demoting a DC yesterday, I've had one more issue with 3rd DC in our forest. Before the demotion, there were 3 DCs, say, a0, a1 and b (a* were on site A and b were on site B). I force-demoted a0 from a1. And after that, replication on b weren't working. samba-tool drs showrepl on b did show list of *inbound* connections from a0 (which does not exist anymore), with a lot of

Thanks, Can you post the output of : samba-tool drs showrepl -d0 If needed anonimize or send it direct to me. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian Naumer via samba > Verzonden: woensdag 10 mei 2017 11:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Kcc connection >

Hi LingPanda101, .... > > DC=domain,DC=local > site-c\DUNDC1 via RPC > DSA object GUID: a216e718-488f-4821-8d9c-a399e6789222 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ NTTIME(0) > > DC=ForestDnsZones,DC=domain,DC=local > site-c\DUNDC2 via RPC

On Thu, 14 Mar 2019 16:56:17 -0500 (CDT) Mike Ray <mray at xes-inc.com> wrote: > ----- On Mar 1, 2019, at 9:20 AM, Mike Ray mray at xes-inc.com wrote: > > > ----- On Mar 1, 2019, at 3:35 AM, samba samba at lists.samba.org > > wrote: > >> > >> I wonder if this has anything to do with the 'you cannot upgrade > >> directly from 4.7.x to