similar to: Failure demote Samba4

On Fri, 2016-04-29 at 20:50 +0100, Miguel Medalha wrote: > Demotion of a AD DC fails with the following errors: > > If I explicitly select a partner server with the "--server=" option > the > error is: > > Deactivating inbound replication > Asking partner server [selectedDC] to synchronize from us > Error while demoting, re-enabling inbound replication >

Demotion of a AD DC fails with the following errors: If I explicitly select a partner server with the "--server=" option the error is: Deactivating inbound replication Asking partner server [selectedDC] to synchronize from us Error while demoting, re-enabling inbound replication ERROR(<type 'exceptions.UnboundLocalError'>): uncaught exception - local variable

On 14/08/16 19:37, Rowland Penny via samba wrote: > On Sun, 14 Aug 2016 19:18:41 +0100 > Alex Crow via samba <samba at lists.samba.org> wrote: > >>> Ok, lets just run through this: >>> You have an NT4-style PDC >> Correct. >>> You classicupgrade this to a DC >> Yes, with BIND9_DLZ DNS backend. >> >>> You join another computer as

On Sun, 14 Aug 2016 20:48:04 +0100 Alex Crow via samba <samba at lists.samba.org> wrote: > > > On 14/08/16 19:37, Rowland Penny via samba wrote: > > On Sun, 14 Aug 2016 19:18:41 +0100 > > Alex Crow via samba <samba at lists.samba.org> wrote: > > > >>> Ok, lets just run through this: > >>> You have an NT4-style PDC > >>

I’m getting errors with replication Samba 4.9.3 on Ubuntu 16.04 6 Samba DC’s at 3 sites I recently joined a Win2k8 R2 server to the domain and promoted it to domain controller. The replication was working before that, and not working after. I didn’t realize the problems and tried to join a Win2012 R2 server and promote to DC as well. That also failed with an error about replication failures.

Hi, during a demote of an online and working DC I receive this error dsreplicasync failed (8440 'werr_ds_dra_bad_nc') Any suggestion where could be the issue, server is not really demoted Server is samba 4.4.5 and other server that has fsmo roles is 4.10.7 Thanks

Thanks Rowland for your answer. these are sernet-packages from their subscription. There are 4 DCs (all with last sernet-rpms) 2 are demoted with probs (dc-01 and dc-02 both centos6) and 2 are running (dc-10 and dc-11 on centos 7) dc-11 has all fsmo. joining with the old dc-01 and dc-02 doesn´t even work. dc-01 joins but gives me this: Deleted

On Sun, 14 Aug 2016 19:18:41 +0100 Alex Crow via samba <samba at lists.samba.org> wrote: > > > > > Ok, lets just run through this: > > You have an NT4-style PDC > Correct. > > You classicupgrade this to a DC > Yes, with BIND9_DLZ DNS backend. > > > You join another computer as a DC > > > > At this point, have you checked that all DNS

I am testing DC administration using samba-4.10.15 on FreeBSD-12.1p6 and have run across this: [root at smb4-2 ~ (master)]# samba-tool domain join BROCKLEY.HARTE-LYNE.CA DC -U"BROCKLEY\administrator" INFO 2020-06-25 14:26:10,692 pid:47306 /usr/local/lib/python3.7/site-packages/samba/join.py #104: Finding a writeable DC for domain 'BROCKLEY.HARTE-LYNE.CA' INFO 2020-06-25

I think this relates to the previous problem you posted about replication not working (which is probably due to the WERR_DS_DRA_SCHEMA_MISMATCH error you're hitting). I think the demote command is trying to replicate out to another DC one last time, so that you don't lose any local modifications to the local DC's database. This is failing. Try using the --remove-other-dead-server

Thanks Rowloand for the hint! I installed sernet-samba 4.7 and give it a try. Now I get: [root at dc-12 1]# samba-tool domain join obel.lan DC --realm=obel.lan -Uadministrator Finding a writeable DC for domain 'obel.lan' Found DC dc-11.obel.lan Password for [OBEL\administrator]: workgroup is OBEL realm is obel.lan Adding CN=DC-12,OU=Domain Controllers,DC=obel,DC=lan Adding

Hi together, Demoting from a Win-Server-Based Active Directory fails root at srvf01:~# samba-tool domain demote --server windc-server -UAdministrator Using srv15.lan.compumaster.de as partner server for the demotion Password for [COMPUMASTER\Administrator]: Desactivating inbound replication Asking partner server windc-server to synchronize from us Error while demoting, re-enabling inbound

may I extend the issue with some strange behaviour? Look here: installing the sernet 4.7 as mentioned above I can´t join the domain in a regular way. ONLY it works when I asked BOTH of the working DCs with 4.9.3 before I try without explicit naming of a server... ^^ Follow me here: [root at dc-02 etc]# samba-tool domain join obel.lan DC -U"OBEL\administrator" --realm=obel.lan

Hi, I need to remove my Samba 4 server from the domain and the following error is happening: samba-tool domain demote -Uadministrator Using WIN-DC1.empresa.com.br as partner server for the demotion Password for [EMPRESA\capbacci]: Deactivating inbound replication Asking partner server WIN-DC1.empresa.com.br to synchronize from us Error while replicating out last local changes from

Hi all, After installing a bunch of new AD DC using the 4.3.1 version I decided to remove the old ones. On one DC I've set up log level as follow: log level = 1 auth:9 registry:7 winbind:7 passdb:7 sam:3 rpc_srv:2 rpc_cli:2 First I'm not sure this is the right way to declare specific log levels but man smb.conf gives me: Example: log level = 3 passdb:5 auth:10 winbind:2 So it sems, to

On 10/02/2016 07:57 PM, Paul R. Ganci via samba wrote: > > > On 10/02/2016 06:15 PM, Paul R. Ganci via samba wrote: >> On 09/11/2016 10:38 AM, Paul R. Ganci via samba wrote: >> >>> On 09/11/2016 01:23 AM, Rowland Penny via samba wrote: >>> Rowland, thanks for your reply. What you describe is pretty simple >>> in principle. It is the details about

On 09/11/2016 10:38 AM, Paul R. Ganci via samba wrote: > On 09/11/2016 01:23 AM, Rowland Penny via samba wrote: > Rowland, thanks for your reply. What you describe is pretty simple in > principle. It is the details about which I am confused. There are 3 > aspects of a Samba 4 AD that have to be properly setup for the AD to > function correctly. Namely the Samba configuration,

Hi, I have set up two AD DCs (both running Samba 4.1). This is my setup: dc1.mydomain.lan: The first DC (used for domain provision) dc2.mydomain.lan: Promoted to AD DC after domain setup I promoted dc2 using this command: samba-tool domain join mydomain.lan DC -Uadministrator --realm=mydomain.lan While the promotion worked without any issues I now want to demote dc2 again. This is what I did:

Hi Chris, Le 22/03/2016 22:07, Chris Hastie a écrit : > I'm trying to remove a DC from a Samba4 based AD network, but run into > an error that I can't fathom. Can anyone point me in the right direction? > > # samba-tool domain demote -Uadministrator which version of samba are you using? 4.4 or below? is the sogo3.ad.oak-wood.co.uk server still running ok or do you have

On 10/02/2016 06:15 PM, Paul R. Ganci via samba wrote: > On 09/11/2016 10:38 AM, Paul R. Ganci via samba wrote: > >> On 09/11/2016 01:23 AM, Rowland Penny via samba wrote: >> Rowland, thanks for your reply. What you describe is pretty simple in >> principle. It is the details about which I am confused. There are 3 >> aspects of a Samba 4 AD that have to be properly