similar to: Fwd: Re: Invalid data for index DN=@INDEX:OBJECTCLASS:DNSNODE

> This certainly sounds stressful. Yes! > Another way to (on a backup, particularly given your history above) remove the index is with samba-tool dbcheck --reindex. Re-indexing... completed re-index OK 0 root at empire:~[0] samba-tool dns add empire chester-dc.example.com p-cats A 10.4.4.142 -U ash Password for [CHESTER-DC\ash]: Record added successfully Thanks! > The missing

On 13/05/16 18:42, ash-samba at comtek.co.uk wrote: >> OK, could this just be a permissions problem i.e. user 'ash' doesn't >> have the required rights to add a dns record, try again, but this >> time use the 'Administrator' user. > I've repeated the "samba-tool dns add", and the "samba-tool domain > join" commands with

>> Andrew Bartlett > I haven't actually got ldbdump on the machine, and I can't see it in > the Debian packages. That said, I do appear to be able to add DNS > records now, so I'm assuming it was the index. If you particularly > want me to find out then I'll try to get a dump, but as long as its > working I'm happy to leave it be! > > Ash Well, I

We have a Samba primary domain controller "empire", which seems to have DNS update issues. We can seem to query all records on empire just fine, and we can modify IPs for existing records, but it will not delete or add new records. Attempting to delete via the AD tools shows "Local security authority database contains an internal inconsistency". Adding a record on the command

> First things first, is there anyway you can update Samba ? > The 4.1.X series is now EOL and wasn't patched for badlock, depending > on what version of debian you are running, you should be able to > upgrade easily. 0 root at empire:/etc/apt[0] samba-tool -V 4.2.10-Debian 0 root at empire:/etc/apt[0] dpkg -s samba |grep ^Ver Version: 2:4.2.10+dfsg-0+deb8u2 0 root at

On Fri, 2016-05-13 at 14:49 +0100, ash-samba at comtek.co.uk wrote: > We have a Samba primary domain controller "empire", which seems to > have > DNS update issues. We can seem to query all records on empire just > fine, > and we can modify IPs for existing records, but it will not delete or > add new records. Attempting to delete via the AD tools shows "Local >

On Mon, 2016-05-16 at 16:41 +0100, ash-samba at comtek.co.uk wrote: > > > Andrew Bartlett > > I haven't actually got ldbdump on the machine, and I can't see it > > in > > the Debian packages. That said, I do appear to be able to add DNS > > records now, so I'm assuming it was the index. If you particularly > > want me to find out then I'll

The system described by https://lists.samba.org/archive/samba/2016-May/199829.html (Invalid data for index DN=@INDEX:OBJECTCLASS:DNSNODE) now appears to perform DNS updates correctly, all systems are 4.2.10-Debian, and we've been able to add a user and a new DC. (Thanks for the help!) Synchronisation between v-ward (the new local DC), and empire isn't entirely working, though. >

Hi All, Hopefully someone can help here. I'm being asked for user name and password when I try to connect directly to the share from computers that are not on the managed domain. My config (the relevant parts) - > [global] > server role = active directory domain controller > map to guest = Bad User > map untrusted to domain = yes > security =

On 17/05/16 12:11, ash-samba at comtek.co.uk wrote: > >> G'Day, >> >> This is a serious situation. What it means is that the nextRid value >> for that DC points at a user account that already exists, so when we >> go to create it, the create fails. > I've just looked at the LDAP output, and nextRid is 1000 for both dn: >

An awful response: change tombstoneLifetime : ) When deleting objects they go to recycle bin then to deleted objects then are deleted. This if you have some recycle bin working which is not the case by default I reckon. tombstoneLifetime is the number of days AD has to keep deleted objects before the real deletion. If you use the recycle bin this very same tombstoneLifetime is also used to

On 01/07/15 13:36, John Cobley wrote: > Ok, I've worked out the caching was due to setting up administratively > assigned offline folders. > > However I think I was getting a little mixed up with my servers. The > error log was from a server that still had the share enabled. I've now > removed the share from the config and restarted the Samba server. > Despite

I cannot join two new VMs to my domain, I receive the following error on both machines: twerks at cbadc03:~$ kinit Administrator Password for Administrator at CB.CLIFFBELLS.COM: itwerks at cbadc03:~$ klist -e Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: Administrator at CB.CLIFFBELLS.COM Valid starting Expires Service principal 03/21/2016 00:19:56 03/21/2016

Hi all! Today, after two years of production, I get this error: samba-tool user create test20160627 testpassword ERROR(ldb): Failed to add user 'test20160627': - ../lib/ldb/ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=test20160627,CN=Users,DC=ad... - ../lib/ldb/ldb_tdb/ldb_index.c:1148: unique index violation on objectSid in CN=test20160627,CN=Users,DC=ad... Help me

Hi there, I have Samba 4.1.13 AD DC compiled on CentOS 6.2 (32bit). Everything is working fine. Issue: ldbadd cannot re-add a deleted user account. What I did: 1. save user account # ./bin/ldbsearch -H /usr/local/samba/private/sam.ldb sAMAccountName=krtu > ./user-add.ldif 2. delete the user account # ./bin/ldbdel -H /usr/local/samba/private/sam.ldb

On 01/07/2015 14:59, Rowland Penny wrote: > On 01/07/15 13:36, John Cobley wrote: >> Ok, I've worked out the caching was due to setting up >> administratively assigned offline folders. >> >> However I think I was getting a little mixed up with my servers. The >> error log was from a server that still had the share enabled. I've >> now removed the

No dice. Logged in to a workstation with RSAT installed. Added computer to OU Domain Controllers, closed ADUC, attempted join again. itwerks at cbadc03:~$ kinit Administrator Password for Administrator at CB.CLIFFBELLS.COM: itwerks at cbadc03:~$ klist -e Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: Administrator at CB.CLIFFBELLS.COM Valid starting Expires Service

On Tue, 13 Sep 2016 15:20:29 +0100 ash-samba--- via samba <samba at lists.samba.org> wrote: > > And to get it editable: > > > > ldbedit -e nano -H /usr/local/samba/private/sam.ldb --cross-ncs > > --show-binary -b > > 'DC=_ldap._tcp.pdc,DC=_msdcs.samdom.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=samdom,DC=example,DC=com' > > -s base > >

OK, Thanks for all. Regards; On 23/07/2019 12:06, Rowland penny via samba wrote: > On 23/07/2019 16:02, Carlos via samba wrote: >> I haven't more output log, because i need join in dc in last week, >> and i "resolved"(workaround) in used samba 4.6.X -> after -> 4.8.3. >> Sorry..... > > OK, it would have been nice to have the output, this is

Hi, I am trying to make Samba 4 as additional DC to a Domain Hosted in Windows Server 2003 R2. Is it possible? Or do we have to first migrate to Windows Server 2008 R2 and then to Samba? samba-toll domain join command comes upto Domain Provision and it reports OK. However when the replication starts it fails. Error thrown is: "Failed to bind to uuid