similar to: Server 2008R2 won't join 4.5.0 Domain

This is actually a similar scenario to mine, I neglected to mention that before this happened, I had joined a Server 2008 R2 to the domain and promoted it to FSMO, then moved FSMO back to S4 DC and demoted the Server 2008 R2 controller. I did what you suggested and it worked! I am assuming this is a bug. Thank you for your suggestion. Thomas Maerz > On Nov 9, 2016, at 3:59 AM, Kelvin Yip via

Hello, I am using 4.5.1, the first time I promote a Windows 2008 R2 as a domain controller, everything is fine. After that, I demote 1 Windows 2008 R2 and 1 Samba DC(4.5.1). Then I promote a Windows 2008 R2 DC again, I get the exact problem as yours. I cancel the process. Then I ran to DC with all FSMO roles, and type the following command several times: samba-tool dbcheck --cross-ncs --fix --yes

Some things to check out for linux-based patch management of Windows (and other) clients: http://vfense.github.io/vFense/ <http://vfense.github.io/vFense/> http://www.opsi.org/en <http://www.opsi.org/en> Thomas Maerz Network/Systems Administrator Brewer Science, Inc. A+ NET+ CCENT MCDST tmaerz at brewerscience.com <mailto:tmaerz at brewerscience.com> work: 573-364-0444 x1402

Hello, I am currently working on a solution to replace Apple OpenDirectory on some aging Xserve hardware. I currently have CentOS Samba4 AD DC?s replicating for redundancy using sernet-samba repositories. The third one has File/Print roles defind and it works perfectly EXCEPT on OSX 10.6. IT works great on any Windows workstation and OSX 10.7,10.8, 10.9 GNOME/Nautilus and even CIFS CLI mounting

I have semi-successfully provisioned 2 domain controllers on one domain with (I think) working replication. I followed the Samba wiki and used the sernet-samba-ad repos and packages on CentOS 6.4 x64. Questions: Replication status has times for outbound neighbors as @ NTTIME(0) on both sides. What does this mean? dc1: http://pastebin.com/atxPraCA dc2: http://pastebin.com/V9JkwbUq Both reports end

I would set up your server as a Samba AD and use the directory. Give each user a username and password on the server that they will authenticate to the server with and when they connect the permissions will act as you are expecting. Joining the machines to the domain is not necessary; it simply integrates the workstation with the server so that the user doesn’t have to enter the credentials

Hello, We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago. Simplified Current Configuration: 2 DCs at main site with internal DNS using subdomain ad.companyname.com 2 BIND CentOS servers serving all intranet DNS requests — main zone: companyname.com 2 BIND CentOS servers

Hello, Using this tool on a Samba 4.1.16 forest I get the following two errors. DC=ForestDnsZones,DC=domain,DC=local NamingContext 1 Failed Discovery: Property 'msds-sdreferencedomain' does not exist. DC=DomainDnsZones,DC=domain,DC=local NamingContext 1 Failed Discovery: Property 'msds-sdreferencedomain' does not exist. Replication does indeed work as I

2016-05-06 9:39 GMT+02:00 Rowland penny <rpenny at samba.org>: > On 05/05/16 21:46, Thomas Maerz wrote: > >> Hello, >> >> We have an issue we’ve been struggling with for quite some time since we >> rolled out 10 Samba4 domain controllers at our main office and all remote >> sites about 3 years ago. >> >> Simplified Current Configuration:

> Clients are not being pointed correctly, clients joined to the domain should be pointed at the DCs first, anything they do not know, they ask their forwarders. Although I agree that what you’re suggesting is a sane configuration, there are other ways to do it and I have tried it both ways. As I’ve explained in my first post, curgently all clients are pointed at BIND servers which forward all

You can join a Windows Server to a Samba4 Domain controller and set up the WSUS server role and it should work. HOWEVER, if you are going to point all your devices at the WSUS server, you will require CALs for the devices or the users using them to maintain licensing compliance with Microsoft. At this point, you have paid for the number of Windows Server CALs you need to run actual Active

On 01/04/16 03:09, Thomas Maerz wrote: > I know this is old, but I wanted to add one more detail: Samba v3 is > deprecated as of March 2015 with the release of Samba 4.2! From the > Samba 4.2 release notes: > https://wiki.samba.org/index.php/Samba_4.2_Features_added/changed > > "IMPORTANT NOTE ABOUT THE SUPPORT END OF SAMBA 3 > With the final release of Samba 4.2, the

I know this is old, but I wanted to add one more detail: Samba v3 is deprecated as of March 2015 with the release of Samba 4.2! From the Samba 4.2 release notes: https://wiki.samba.org/index.php/Samba_4.2_Features_added/changed <https://wiki.samba.org/index.php/Samba_4.2_Features_added/changed> "IMPORTANT NOTE ABOUT THE SUPPORT END OF SAMBA 3 With the final release of Samba 4.2, the

I know this is an old ‘thread’ but if you want to use the Microsoft AD Replication Status Tool, you need to add the DN of your domain to those two cross reference entries because Samba4 does not do that for some reason. Here’s a link on how to do it with RSAT: https://www.safaribooksonline.com/library/view/active-directory-cookbook/0596004648/ch17s09.html

On 05/05/16 21:46, Thomas Maerz wrote: > Hello, > > We have an issue we’ve been struggling with for quite some time since we rolled out 10 Samba4 domain controllers at our main office and all remote sites about 3 years ago. > > Simplified Current Configuration: > > 2 DCs at main site with internal DNS using subdomain ad.companyname.com > 2 BIND CentOS servers serving all

Hi Maxence, > Fyi, i've updated to 4.7.1, the dbcheck still not fix the broken links, > is the fix you talk about planned for a future release ? > > Our customer reported me, some users have issues when their logon server > is DC1 but not when it's DC2. > > On DC1 some users have access to all shares, some doesn't have any > access at all. actually this last

On Mon, 6 Nov 2017 11:39:50 +0100 (CET) Maxence SARTIAUX via samba <samba at lists.samba.org> wrote: > Hello. > > To follow-up this issue, since the upgrade, when i do a named reload > it crash, look like there's duplicated zones. > > Here's the log when i trigger a reload > > > nov 05 03:09:02 data.contoso.com named[2807]: received control >

Hello last week we updated three domain controllers (Sernet Samba) from 4.2 to 4.7, typical upgrade path (4.3->4.4->4.5->4.6->4.7), everything was ok. The next day we got a mail from the Sernet team informing they fixed a bug affecting the group memberships. https://bugzilla.samba.org/show_bug.cgi?id=13095 We've applied the update and few days after the update which should

I have added "auth_debug_password=yes" to "10-logging.conf" and restarted dovecot.?But I do not see any information about the password in the logs. Does this mean that the thunderbird does not send the password??Although it asks for the password and I enter one. New log: dovecot: master: Warning: Killed with signal 15 (by pid=19769 uid=0 code=kill) dovecot: master: Dovecot

Not specific to CentOS but I know you guys would be really helpful anyhow. Basically, I have a file which has been editted in the past very similarly to the hosts file only now I want to use it as a hosts file and need to run some fancy sed to massage the data into shape. Currently, the data in the file is in the form of <ip address> <tab> <short hostname> <space>