similar to: 'RPC Server is Unavailable' when updating GPO

On Wed, 2016-11-02 at 09:38 -0700, gespi via samba wrote: > Hi, > > Researched the forums before posting but was not able to find > solution to my > issue. Could be a unique problem. > >  GPO's are not being applied to users and computers because 'RPC is > unavailable'. The GPO's were being applied before, but not sure what > happened. Started noticing

I failed to mention this morning I restarted the samba server and that error did not come up once I ran 'Group Policy Update..'. But after a few minutes the RPC error returned. Figure this could be a samba issue as it was working on restart. The client is part to the Domain and able communicate with samba via ping. And i am still able to add additional machines to the Domain regardless of

As per title, is it possible to export GPO's from one AD DC and import them into another, one on a different domain? Searching online, all posts refer to transferring GPO's between servers on the same domain, or restoring GPO's from backups when rebuilding a server. It is tedious to configure by hand 30-40 GPO's - it would save a lot of time if there was a way to just copy

Hello Samba-List, Recently I ran into a few access rights problems with GPO's. I have an test environment running with four samba4 AD DC's (sernet 4.1.2/debian wheezy). Used the Script's from the samba wiki for sysvol replication. The AD Database is comming from an classic upgrade and i have "idmap_ldb:use rfc2307 = yes" in my smb.conf. Some groups like for example

Somewhat Samba related, I ask this question (that might be over the line and into Windows territory) but, here I go . . . Of those user on this mailing list that manage Samba installs for various clients/customers, what are your most used GPO policies you have put into place for AD management? I ask because, when you venture over into Windows world and start reading posted articles about their

Hi I'd like to learn more on the pros and cons of a mixed domain that consists of both MS and Samba domain controllers and member servers. What I have learnt so far is this; I created a new lab domain with an MS DC 2019. I then added a Samba 4.19-3 file server as a domain member w/o any issues. The clients are 2 Win 10 VM's for tests of shares, GPO's and related technologies. Still

On Wed, 2023-12-06 at 11:34 +0100, Anders ?stling via samba wrote: > Hi > I'd like to learn more on the pros and cons of a mixed domain that > consists > of both MS and Samba domain controllers and member servers. This is a situation that is meant to work, but is not actively tested (all our tests are pure Samba), but seems to work for some folks. However given the way Windows

This is beacuse all workstations are windows, but we are thinking migrate to fedora. i already have all the users in samba DC. We access to internet and others apps with user from DC. because of that, we need both systems for now El lun., 14 ene. 2019 a las 18:23, Rowland Penny via samba (< samba at lists.samba.org>) escribió: > On Mon, 14 Jan 2019 17:57:26 -0300 > Carlos Bordon via

My main home server runs Fedora 25. I have experimented in the past with an Ubuntu samba AD domain controller(in a VM). Which was really cool because I could join Windows 10 pro machines to it and assign GPO's just like my AD at work. Currently I'm looking into setting up a FreeRadius server. I want to eventually be able to have the same authentication across machines and wifi and the lot.

Hi, I am using samba 4.1.7 as Domain Controller. Actually I have two samba servers DC1 and DC2. DC1 is the primary DC and DC2 joined as another DC. We use the Active Directory for a couple of weeks. The directory replication works fine, and a sysvol replication works with rsync. (I set it up based on the samba wiki). But I have a problem with the authentication. If I log in to a windows

Dear Rowland, > Just a thought, Do all the GPO's that exist in AD also exist in Sysvol > of the DC you are trying to backup ? Yes, I compared the Sysvol-Directories. They are synched correctly, all GPO's are exactly the same on both ADs. Best regards Bene -- forumZFD Entschieden für Frieden|Committed to Peace Benedikt Kaleß Leiter Team IT|Head team IT Forum Ziviler

I have upgraded Samba from a NT PDC to an AD DC about a week ago. Everything went pretty well until today. I've already configured about 25 GPO's (through RSAT on a Windows 10 machine) - but when I came to add more GPO's - it wouldn't let me with the above error message. My specs are: Samba 4.5.0 Slackware -current 64bit Kernel 4.4.20 The client machine is a Windows 10 Pro.

Hi, I'm running a samba 4.2 server on RedHat5 and for some reason I can't seem to logon using the AD Users and Computers -tool. Whenever I try to connect to the PDC I get the following error: "The following Domain Controller could not be contacted: <name of pdc>. The RPC server is unavailable." I've checked for any possible firewall issues, but even with all

On Tue, 6 Nov 2018 11:16:07 +0100 Corrado Ravinetto via samba <samba at lists.samba.org> wrote: > > > Il 05/11/2018 14:01, Rowland Penny via samba ha scritto: > > This is what I thought, so remove the libnss_winbind links from the > > DC, these are only required if you want to use your DC as a > > fileserver. > ok, but my gpo where are stored ?? > If i

On 14/04/2023 15:51, Anderson Sampaio Mello via samba wrote: > Thanks everyone for the reply. > > But actually the samba documentation: > > https://wiki.samba.org/index.php/Group_Policy#SSSD > > and from David Mulder(dmulder): > > https://dmulder.github.io/group-policy-book/policy-refresh.html#sssd-refresh > > It makes it clear that sssd does support samba AD

I get this error when I run samba-tool ntacl sysvolcheck ProvisioningError('%s ACL on GPO directory %s %s does not match expected value %s from GPO object' % (acl_type(direct_db_access), path, fsacl_sddl, acl)) There are two GPO directories. One is the Default Domain Controllers Policy and one is the Default Domain Policy It looks like it's the Default Domain Policy that's

> OK, make sure that the two idmap.ldb files match and then run > 'samba-tool ntacl sysvolreset' on both machines and see if this cured > this problem. I did: root at dc1:~$ service sernet-samba-ad stop root at dc2:~$ service sernet-samba-ad stop root at dc2:~$ mv /var/lib/samba/private/idmap.ldb /root/idmap.ldb.bak root at dc1:~$ scp /var/lib/samba/private/idmap.ldb

Hello, I am getting these errors in /var/log/messages : Oct 12 16:36:15 sambadc samba[7147]: [2013/10/12 16:36:15.817541, 0] ../source4/dsdb/kcc/kcc_periodic.c:664(kccsrv_samba_kcc) Oct 12 16:36:15 sambadc samba[7147]: Calling samba_kcc script Oct 12 16:36:15 sambadc abrt: detected unhandled Python exception in '/usr/local/samba/sbin/samba_kcc' Oct 12 16:36:15 sambadc

Hi, Thank you for your reply! I don't have any openchange services included in my installation. Nor am I using sogo. I changed the DNS settings on the DHCP server now, to only include the PDC. Any idea if I can still have the PDC forward the DNS calls with "dns forwarder" in smb.conf? Can I still use a secondary DNS server in resolv.conf on the PDC? It feels a bit risky,

> I think the 10.0.06 entry was created during domain creation. I'd skim > thru dns records from an windows machine if possible and delete all > occurences of unwanted ip adresses. I assume the gpo's still can not be > loaded during logon on the client? Did you inspect gpresult /h result.html? I did remove the record for 10.0.0.6 now. Currently I only have 10.0.1.6 in the DNS