similar to: AD + Bind DLZ + Site

2016-02-10 14:37 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 10/02/16 11:12, mathias dufresne wrote: > >> Hi all, >> >> Using 4.3.4 + Bind DLZ @ Centos 7. >> >> Regarding AD sites, I have several questions: >> >> 1° Is it possible with Samba4 to rename Default-First-Site-Name? >> > > Depends on what you mean, if you mean

On 10/02/16 11:20, mathias dufresne wrote: > Another question: > 6° In DNS zone _msdcs, at root, there is one DNS record per DC. These > records are those which have to create manually and are rlated to > objectGuid as explained there: > https://wiki.samba.org/index.php/Check_and_fix_DNS_entries_on_DC_joins#Resolve_the_objectGUID_CNAME_record_of_the_new_joined_Domain_Controller >

My answer below. 2016-02-10 15:38 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 10/02/16 14:07, mathias dufresne wrote: > >> >> >> 2016-02-10 14:37 GMT+01:00 Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>>: >> >> >> On 10/02/16 11:12, mathias dufresne wrote: >> >> Hi all, >>

2016-02-10 16:54 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 10/02/16 15:36, mathias dufresne wrote: > >> My answer below. >> >> 2016-02-10 15:38 GMT+01:00 Rowland penny <rpenny at samba.org <mailto: >> rpenny at samba.org>>: >> >> On 10/02/16 14:07, mathias dufresne wrote: >> >> >> >>

Another question: 6° In DNS zone _msdcs, at root, there is one DNS record per DC. These records are those which have to create manually and are rlated to objectGuid as explained there: https://wiki.samba.org/index.php/Check_and_fix_DNS_entries_on_DC_joins#Resolve_the_objectGUID_CNAME_record_of_the_new_joined_Domain_Controller I have for now 4 DC in my second site, two of them have 2 records when

No replication this morning but FSMO was rebooted yesterday. Only joined DC were rebooted. After verifying all A records related to new DC were created, I forced creation of replication related DNS entries as described there : https://wiki.samba.org/index.php/Check_and_fix_DNS_entries_on_DC_joins#Resolve_the_objectGUID_CNAME_record_of_the_new_joined_Domain_Controller I forced replication (drs

On 16/11/15 14:33, mathias dufresne wrote: > Another error coming often: > [2015/11/16 15:11:07.592598, 0] > ../source4/librpc/rpc/dcerpc_util.c:745(dcerpc_pipe_auth_recv) > Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for >

On 10/02/16 11:12, mathias dufresne wrote: > Hi all, > > Using 4.3.4 + Bind DLZ @ Centos 7. > > Regarding AD sites, I have several questions: > > 1° Is it possible with Samba4 to rename Default-First-Site-Name? Depends on what you mean, if you mean can it be changed, then the answer is yes. If you mean can it be changed with samba-tool, then no. > > 2° samba-tool

On 10/02/16 14:07, mathias dufresne wrote: > > > 2016-02-10 14:37 GMT+01:00 Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>>: > > On 10/02/16 11:12, mathias dufresne wrote: > > Hi all, > > Using 4.3.4 + Bind DLZ @ Centos 7. > > Regarding AD sites, I have several questions: > > 1° Is it

On 10/02/16 15:36, mathias dufresne wrote: > My answer below. > > 2016-02-10 15:38 GMT+01:00 Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>>: > > On 10/02/16 14:07, mathias dufresne wrote: > > > > 2016-02-10 14:37 GMT+01:00 Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>

On 16/11/15 15:09, mathias dufresne wrote: > That did not work. I've added DNS entries mentioned in that wiki page. I > also forced creation of all entries mentioned by samba_dnsupdate > --all-names --verbose. > So I expect all needed DNS entries are present. If some are still missing > they are not mentioned by samba_dnsupdate. And as samba_dnsupdate job is to > create

On 10/02/16 16:27, mathias dufresne wrote: > > > 2016-02-10 16:54 GMT+01:00 Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>>: > > On 10/02/16 15:36, mathias dufresne wrote: > > My answer below. > > 2016-02-10 15:38 GMT+01:00 Rowland penny <rpenny at samba.org > <mailto:rpenny at samba.org>

Hi all, Thank you Mark for these precisions. I did switch a DC to --dns-backend=NONE using samba-tool domain join. This removed dns-<DCname> user for this DC and associated keytab. We changed /etc/resolv.conf to use another DC - one with Bind running - as nameserver. Stopping there, running samba_dnsupdate gave error "NOTAUTH". As we want our DC being able to push into DNS

Thank you for hint to this VBS script. In fact I alraedy saw it but I'm not too confident in my VB knowledge, so I didn't use that script, prefering rely on Samba command and shell scripts to work around issues. You spoke about SOA record which wasn't changed, same here. There is another DNS record I had to change: _ldap._tcp.pdc._msdcs.samba.domain.tld. I spoke about removing

Hai mathias, You welkom, always happy to help out and nice too hear you got it working. I must ask.. Did you reboot the servers after you added the second server to the DNS? And especialy in order, DC_with_FSMO, wait until its up again, then DC2. This often fixes the repliction problem and as far as i know, this only happend just after the install of a extra DC. Greetz, Louis

I do : ) 2016-03-03 10:52 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 03/03/16 09:31, mathias dufresne wrote: > >> Hi all, >> >> Thank you Mark for these precisions. >> >> I did switch a DC to --dns-backend=NONE using samba-tool domain join. This >> removed dns-<DCname> user for this DC and associated keytab. >> >> We

On Mon, 2015-11-16 at 16:50 +0100, mathias dufresne wrote: > transaction: operations error at > ../source4/dsdb/samdb/ldb_modules/descriptor.c:1147 Looking at that line in your version of Samba may give you some idea why it failed. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer,

Hi, I played with demote recently on a test AD domain composed with Samba version 4.3.0 and 4.3.1. I demoted all version 4.3.0. I was facing same issue as you. I written long mails here to explain how I managed that. My DNS looks clear now. Today I played with AD sites and I found in default sites all demoted DC. They weren't removed from DNS DB nor here. For now I have no idea how to get

On 10/29/2015 9:15 AM, Ole Traupe wrote: > > > Am 29.10.2015 um 13:54 schrieb mathias dufresne: >> Thank you for hint to this VBS script. In fact I alraedy saw it but >> I'm not >> too confident in my VB knowledge, so I didn't use that script, prefering >> rely on Samba command and shell scripts to work around issues. >> >> You spoke about SOA

Hi all, How to configure Samba to remove DNS service from DC? I thought there was an option for samba_dnsupgrade command to tell "remove all DNS service from current DC" but I don't find it anymore. This question is because we are about to deploy an AD with 20 or more DC and there is no need they are all DNS servers. In fact having them all DNS servers make design more complex and