similar to: Can't add new DC

Hi Denis, Thanks for your advices. I have in mind about your kerberos problem in a large environment but i was thinking about problem occuring at 20 and more DCC's So last night, i modified all my krb5.conf (DC and file server) as you suggest but problem persist. root at dc111:~# samba-tool domain join pr.educationetformation.fr DC -U administrator --realm=PR.EDUCATIONETFORMATION.FR -W PR

Hi Jordi, > I'm trying to add new DC to my existent domain (18 Samba4 DC) but this time, domain join stuck after setting account password. > I have tried so many things but at this point, i really don't know what to do. > > I can see the new dc111 computer object on smb4dc serveur but the object is disable. > If someone have an idea... Could you try to see if it gets

Hi everybody, I'm playing with the new Improved KCC of samba 4.3.X Here is my network's topology : - DC : smb4dc located on Default-First-site-Name - DC : dc110 located on PetitQuevilly - DC : dc113 located on SaintEtienne - DC : dc120 located on Barentin - Etc.... (total of 15 DC) I want smb4dc acting as a bridge head for all others

Solved ! Thanks for the script. In my case, it was just too late. I have just found a ugly but working solution: From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. No more trouble with drs showrepl :-) -----Message d'origine----- De : samba [mailto:samba-bounces at lists.samba.org] De la part de Stefan Kania

Hi everybody, One of my DC crash this afternoon (dead disk). I can't remove this DC server from windows GUI (computer object from < users and computers >) and NTDS settings from < sites and services > because windows GUI error. So i manually remove this old server : - Clean all DNS stuff (tpc, sites, kerberos, kpasswd, srv entries.....) - With apache directory

Hi Denis, I have seen in an old post that you have tested new KCC from full mesh to bridge head at a french school. Is your "drs showrepl" correct on such DC's ? In my case, a drs showrepl is showing a full mesh on inbound and outbound (not good) but only 1 KCC connection objects (good) Where is a full description of my trouble:

Hi everybody ! I am encountering performance problem on my bridgehead DC. I have 19 DC (Debian Stretch / Samba 4.6.7 from Tranquil.it repo) and they all synchronized on a main bridgehead DC. This performance problem first appears when the bridgehead DC was on Debian Jessie and kernel was updated with meltdown/spectre patch from Debian (3.16.51-3+deb8u1) I added "nopti" option to grub

or add acl_xattr:ignore system acl = yes to your share. more info man smb.conf .. Gr. Louis >-----Oorspronkelijk bericht----- >Van: J.Morillo at educationetformation.fr >[mailto:samba-bounces at lists.samba.org] Namens MORILLO Jordi >Verzonden: vrijdag 5 juni 2015 15:21 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] [Bug or Limitation] Folder sharing

Hi Louis, Move up to 4.7 is planned soon but I'm little scared to update bridgehead if it actually had performance problem. I would like to fix all problem before updating. My smb.conf is really simple: [global] workgroup = PR realm = pr.educationetformation.fr netbios name = DC000 server role = active directory domain controller bind interfaces only

Sorry, I didn't explain my problem well enough... The problem is not that a domain user logs in on one specific computer several times. I tried that. It's not even possible. You only login to the same profile on the same computer again. So this is ok. The problem is that a domain user is logged in on two computers simultaneously. I tried that. That's possible. But I don't want

Hi, Given i have this share : [j.snow] Path = /home/j.snow Share and ntfs permission : j.snow user Now I add another folder share inside the first one : [a.stark] Path = /home/j.snow/a.stark Share and ntfs permission : a.stark user /home/j.snow/a.stark has now parent inherit permission (j.snow) AND a.stark user a.stark can't access to her share ! if I add a.stark NTFS access to [j.snow]

Hi ! Since few months, dreplsrv is eating lots of memory in few days. Within 2 weeks, the process is generaly OOM killed and replication become weired. I need to restart samba-ad-dc. Here is my config : - Samba 4.11.6 / 4 vcpu / 2Go Ram - 10215 objects (ldbs file = 300MB) This memory problem only happen on my headbridge DC (star topolgy with 20 DC) If I add some ram, the

Hi Rowland, One of my DC is offline because Adsl is down and I can't physicaly reboot modem (Covid confinement) :-/ Here is my headbridge DC config: [global] workgroup = PR realm = pr.educationetformation.fr netbios name = DC000 server role = active directory domain controller bind interfaces only = yes interfaces = lo eth0 printcap

Here is some news: The problem concern this 2 parameters: bind interfaces only = yes + interfaces = lo eth0 If I comment this 2 lines, smbd is starting (but not listening on localhost) We have find our problem source with Denis and figure out that package 4.11.6 from samba.tranquil.it may have been bad compiled (chroot problem ?) No problem with 4.11.6 from Louis VanBelle ans no problem with

Hello ! I decided to upgrade my fileservers from stretch/samba 4.9 to buster/samba 4.11 I just realized that smbd is not working anymore :-/ If someone has an idea It would be amazing... as an idiot, I upgraded my 20 servers.... without snapshot.... Thank you so much Here's some logs : root at ef113:~# tail /var/log/samba/log.smbd #1

Hi everyone, I would like to have some input on ressources access from a workstation logged on a RODC server that has to connect on hub site servers. After login in the remote windows workstation, I have LOGONSERVER environment variable set to the local RODC server (workstation and user credentials have been preloaded). Everything works fine on local server. However if I want to connect to

Hi All, I know RHEL has bad press here but I'd like to share a different opinion (works for me) and maybe share some of my settings. BTW, Those views are my own, not those of my employer. I run a small AD at home. The setup is as follows: - two AD DCs (RHEL7.6 KVM virtual machines + Samba 4.8.7 rpms based on SPECs from TranquilIT/Fedora). - several Win10 laptops joined to the domain. -

Hi Garming, > As far I know, all this should work as you would expect. Quite recently, > Andrew Bartlett and I went about testing some of the behaviour of the > KDC and confirming behaviour such as RODC ticket forwarding. thanks for the input. It gives me hope to dig deeper! I have some more time to spend on this issue today, I gonna try some more scenario. > The one thing to check

Hi, did anybody try this already? Seems to be the easiest to set up, esp. when more than two DC's are involved. Bye... Dirk -- Dirk Heinrichs <dirk.heinrichs at altum.de> GPG Public Key: D01B367761B0F7CE6E6D81AAD5A2E54246986015 Sichere Internetkommunikation: http://www.retroshare.org Privacy Handbuch: https://www.privacy-handbuch.de

Op 12-04-2023 om 09:57 schreef Rowland Penny via samba: > > > On 12/04/2023 08:51, Kees van Vloten via samba wrote: >> >> Op 12-04-2023 om 09:47 schreef Arnaud FLORENT via samba: >>> Hello everybody >>> >>> >>> does/will samba AD support t LAPS GPO ? >>> >>>