similar to: 4.4.0rc2 demote and --remove-other-dead-server

Hi I have a DC server (named dc-server1) with corrupted database. I transferred all FSMO to dc-server2 and now I'm trying to demote dc-server1 running "samba-tool domain demote --verbose --remove-other-dead-server=dc-server1" on dc-server2, but the following error occurred. The problem continues even after running "samba-tool dbcheck --cross-ncs --fix --yes". Samba

Hi, I'm trying to remove a DC from a site we have shutdown. The demote command is throwing up this message: [root at aragorn ~]# samba-tool domain demote --remove-other-dead-server=pippin Removing nTDSConnection: CN=eca08dbb-1f34-476e-96dd-33ec22b2bc94,CN=NTDS Settings,CN=GANDALF,CN=Servers,CN=SAOPAULO,CN=Sites,CN=Configuration,DC=e-trust,DC=com,DC=br Removing nTDSDSA: CN=NTDS

Hi: I want to test migrating windows dc to samba dc (without considering sysvol replication). I installed brand new 2003R2, 2008R2, 2012R2 (with 2008R2 functional level). I compiled samba 4.7.7, 4.8.1 at centos 7.4. 1. I tried to join samba as DC to windows with command: samba-tool domain join samdom.example.com DC -U"SAMDOM\administrator"

Hi, On 20/06/2018 20:38, Andrew Bartlett wrote: > To be clear, we don't replicate sysvol, you need to work that out > yourself (yes, this sucks). > Right, I'm doing that with Robocopy from the Windows DC initially, then with rsync. >> Is there any further preparation I need to do on the Windows server side >> to make a clean demotion possible? I can force the

Hi Pietro, I noticed this problem removing a Windows DC the other day. I've sent a patch to the samba-technical mailing list that should fix this. https://lists.samba.org/archive/samba-technical/2018-June/128703.html I also raised a bug for it: https://bugzilla.samba.org/show_bug.cgi?id=13484 The patch should hopefully be delivered soon. If you feel comfortable patching the Samba code

I’m having issues removing an old dead DC. I’m using the tool as follows: sudo samba-tool domain demote --remove-other-dead-server=OLD-SERVER-NAME I’m receiving the following error when it comes to deleting the machine: ERROR(ldb): uncaught exception - subtree_delete: Unable to delete a non-leaf node (it has 4 children)! File

Hello, We added a new samba DC with 4.10.11-SerNet-Debian-10.buster? to our existing 5 ones and can?t obtain replication. Comparing configuration with other functioning DCs did not show any relevant difference. The only difference during the configuration procedure was that DNS PTR and A records were added after joining the domain and not before. The sernet-samba-ad service is running but

I have two domain controller servers, with samba in version 4.18 On both DCs both the Sysvol share and the subdirectories (including GPOs) have the same permission: getfacl /usr/local/samba/var/lib/samba/sysvol # file: usr/local/samba/var/lib/samba/sysvol # owner: root # group: 3000000 user::rwx user:root:rwx user:3000000:rwx user:3000001:r-x user:3000002:rwx user:3000003:r-x group::rwx

Hi, I have a samba 4.7.9 DC that I am trying to remove a windows SBS dc from. In doing this I have run across several problems. For whatever reason when I try to dcpromo the windows DC it fails because it says it cannot contact the samba4 DC. I have checked replication as per https://wiki.samba.org/index.php/Verifying_the_Directory_Replication_Statuses All of the tests pass. Since we are going

Hi, I'm preparing to move a small business environment away from Windows-based AD (Windows Server 2012R2, Domain and Forest downgraded to Win2008R2 level) to Samba. So far in my lab environment joining Samba as a DC works, including DNS and Sysvol replication. OS: Debian 9 Samba versions 4.5.12 (Debian repository) and 4.8.2 (latest release compiled from source), same behavior on both

Hello all, Let me first say that this isn't a question about outliers. I am using the outlier function from the outliers package but I am using it only because it is a convenient wrapper to determine values that have the largest difference between itself and the sample mean. Where I am running into problems is that I am several groups where I want to calculate the "outlier" within

On 30/04/16 20:31, Andrew Bartlett wrote: > On Sat, 2016-04-30 at 16:35 +0100, Miguel Medalha wrote: >>> In any case, I found and fixed the issue you hit last week, the >>> patch is at https://bugzilla.samba.org/show_bug.cgi?id=11882 The >>> syntax error should then go away (bug I have a patch for that as >>> well, it is on samba-technical if you are

> In any case, I found and fixed the issue you hit last week, the patch > is at https://bugzilla.samba.org/show_bug.cgi?id=11882 The syntax > error should then go away (bug I have a patch for that as well, it is > on samba-technical if you are curious). I found this on a post by Rowland penny (https://lists.samba.org/archive/samba/2016-March/198662.html): HI, it would seem you

On 30/03/16 23:26, spindles7 wrote: > Hi all, > I am consistently getting the error: > > root at dc2:~# samba-tool domain demote -Uadministrator > Using dc1.microlynx.com as partner server for the demotion > Password for [MICROLYNX\administrator]: > Deactivating inbound replication > Asking partner server dc1.microlynx.com to synchronize from us > Changing userControl

Hi Rowland, Have tried your patch, and now the Demote succeeds: root at dc3:~# samba-tool domain demote -Uadministrator Using dc1.microlynx.com as partner server for the demotion Password for [MICROLYNX\administrator]: Deactivating inbound replication Asking partner server dc1.microlynx.com to synchronize from us Changing userControl and container Removing Sysvol reference:

Thanks Rowland. Have submitted a bug report (No 11818). spindles7 On Thu, 31 Mar 2016 09:38:02 +0100, Rowland penny <rpenny at samba.org> wrote: >On 30/03/16 23:26, spindles7 wrote: >> Hi all, >> I am consistently getting the error: >> >> root at dc2:~# samba-tool domain demote -Uadministrator >> Using dc1.microlynx.com as partner server for the demotion

Hi LingPanda101, .... > > DC=domain,DC=local > site-c\DUNDC1 via RPC > DSA object GUID: a216e718-488f-4821-8d9c-a399e6789222 > Last attempt @ NTTIME(0) was successful > 0 consecutive failure(s). > Last success @ NTTIME(0) > > DC=ForestDnsZones,DC=domain,DC=local > site-c\DUNDC2 via RPC

On 9/24/2016 7:32 AM, Denis Cardon wrote: > > the job of the samba_kcc script is to create the ntdsConnection > objects. Afterward the repsFrom/repsTo attribute are created in > accordance with the ntdsConnection objects (you can force the creation > using samba-tool drs replicate although). You can check that the > process is asynchronous when you join a new DC, the INBOUND

On 2 September 2016 at 14:51, Rowland Penny via samba <samba at lists.samba.org > wrote: > > > As I said, I know very little about freebsd, but you should be aware > that Samba only supports the last three major versions i.e. at the > moment 4.2.X, 4.3.x and 4.4.x > They are supported in three ways, the oldest version (now 4.2.x) only > gets security fixes, the middle

Hi all, some background : ===== recently I had to cleanup a network of 1 DC on main office and 5 RODC on remote location. On one RODC for some reason there where still ntdsConnection objects with fromServer attribute pointing to servers GUID that do not exists anymore. Those fromServer attribute with spurious guid can be seen with ldbsearch but cannot be seen through ldap connexion, so I