similar to: readonly DC?

On Thu, 2016-11-17 at 18:31 +0000, Jo L via samba wrote: > Hello Samba-ers, > > I tried to continue my Samba setup after a long pause doing other > stuff. > To recall, I want to run two Samba DCs for one domain as virtual > machines on > two Windows systems (I switched from VirtualBox to Hyper V, which > helps to > run them automatically at system startup, but I don´t

Alright, I'm taking the plunge: We're switching our three AD DCs from Samba internal to BIND_DLZ back end. I needed a version of BIND with DLZ, as it appears support for that is not so ubiquitous. I went here first: https://wiki.samba.org/index.php/Using_BIND_DLZ_backend_with_secured_/_signed_DNS_updates We use Ubuntu 14.04 here, and the Debian/Ubuntu instructions fail on apt-get

Hi, This is just a report I wanted to share. Maybe someone can put it on the wiki. I created a new DC for a new site using the samba internal dns option. Later, I decided to go with bind. So I ran the command, and got this error: [root at theoden ~]# samba_upgradedns --dns-backend=BIND9_DLZ --verbose Reading domain information DNS accounts already exist No zone file

I installed a third DC today. Replication works find, but as systemctl status samba-ad-dc showed an error w.r.t. dnsupdate I was running samba_dnsupdate ?verbose. Below is the output. It looks like there are some missing DNS records, but what are potential causes of this error: dns_tkey_gssnegotiate: TKEY is unacceptable I already checked what?s listed @

OK. "net cache flush" worked (dunno why a restart isn't equivalent, but hey). So let's start peeling back other issues! On Mon, Jul 11, 2016 at 1:54 PM, Rowland penny <rpenny at samba.org> wrote: > On 11/07/16 17:57, Zaphod Beeblebrox wrote: > >> >> >> - Whether I use BIND9_DLZ or I use SAMBA_INTERNAL, >> samba_dnsupdate

I cannot join two new VMs to my domain, I receive the following error on both machines: twerks at cbadc03:~$ kinit Administrator Password for Administrator at CB.CLIFFBELLS.COM: itwerks at cbadc03:~$ klist -e Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: Administrator at CB.CLIFFBELLS.COM Valid starting Expires Service principal 03/21/2016 00:19:56 03/21/2016

Hi all! Today, after two years of production, I get this error: samba-tool user create test20160627 testpassword ERROR(ldb): Failed to add user 'test20160627': - ../lib/ldb/ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=test20160627,CN=Users,DC=ad... - ../lib/ldb/ldb_tdb/ldb_index.c:1148: unique index violation on objectSid in CN=test20160627,CN=Users,DC=ad... Help me

> This certainly sounds stressful. Yes! > Another way to (on a backup, particularly given your history above) remove the index is with samba-tool dbcheck --reindex. Re-indexing... completed re-index OK 0 root at empire:~[0] samba-tool dns add empire chester-dc.example.com p-cats A 10.4.4.142 -U ash Password for [CHESTER-DC\ash]: Record added successfully Thanks! > The missing

Hi there, I have Samba 4.1.13 AD DC compiled on CentOS 6.2 (32bit). Everything is working fine. Issue: ldbadd cannot re-add a deleted user account. What I did: 1. save user account # ./bin/ldbsearch -H /usr/local/samba/private/sam.ldb sAMAccountName=krtu > ./user-add.ldif 2. delete the user account # ./bin/ldbdel -H /usr/local/samba/private/sam.ldb

> OK, could this just be a permissions problem i.e. user 'ash' doesn't > have the required rights to add a dns record, try again, but this time > use the 'Administrator' user. I've repeated the "samba-tool dns add", and the "samba-tool domain join" commands with "-UAdministrator". I get the same errors with either user. (the error

No dice. Logged in to a workstation with RSAT installed. Added computer to OU Domain Controllers, closed ADUC, attempted join again. itwerks at cbadc03:~$ kinit Administrator Password for Administrator at CB.CLIFFBELLS.COM: itwerks at cbadc03:~$ klist -e Ticket cache: FILE:/tmp/krb5cc_1000 Default principal: Administrator at CB.CLIFFBELLS.COM Valid starting Expires Service

OK, Thanks for all. Regards; On 23/07/2019 12:06, Rowland penny via samba wrote: > On 23/07/2019 16:02, Carlos via samba wrote: >> I haven't more output log, because i need join in dc in last week, >> and i "resolved"(workaround) in used samba 4.6.X -> after -> 4.8.3. >> Sorry..... > > OK, it would have been nice to have the output, this is

Hi, I am trying to make Samba 4 as additional DC to a Domain Hosted in Windows Server 2003 R2. Is it possible? Or do we have to first migrate to Windows Server 2008 R2 and then to Samba? samba-toll domain join command comes upto Domain Provision and it reports OK. However when the replication starts it fails. Error thrown is: "Failed to bind to uuid

On 2/9/2016 3:48 PM, Rowland penny wrote: > On 09/02/16 19:59, Allen Chen wrote: >> Hi there, >> >> I have Samba 4.1.13 AD DC compiled on CentOS 6.2 (32bit). Everything >> is working fine. >> >> Issue: ldbadd cannot re-add a deleted user account. >> What I did: >> 1. save user account >> # ./bin/ldbsearch -H /usr/local/samba/private/sam.ldb

"I expect you don't have just copied your VMs disks without changing VMs hostname and FQDN. I expect you don't fully re-use smb.conf from another DC (you can do that but you must change hostname into smb.conf)." 1) These are new Ubuntu VMs, not cloned, built from scratch. I tried joining them with no smb.conf in /usr/local/samba/etc You have disabled SELinux too 2) AFAIK

This showed up at -d3: DRS replication add DN of aca72580-587e-4dab-adee-07a5f8027dfa is CN=foo,OU=bar,DC=baz Failed to apply records: Failed to locally apply remote add of CN=foo,OU=bar,DC=baz: ../lib/ldb/ldb_tdb/ldb_index.c:2012: Failed to re-index servicePrincipalName in CN=blah,OU=blah,DC=blah - (null): Operations error Failed to commit objects: WERR_GEN_FAILURE I've deleted the object

Hi, Does anyone have experience of using ldbedit or similar, to remove the duplicates below? (Is that even the right way for me to go?) Can I perhaps query something using ldbsearch, to find the duplicates, before using ldbedit? On Sun, 18 Nov 2018 at 21:37, Jonathan Hunter <jmhunter1 at gmail.com> wrote: > [...] > In my database, as reported by the domain join command above, I have

I have 4 DC in samba I can not create users in two of them gives me the following error Please any idea Karel slds root at nbn-2:~# samba-tool user add pepito New Password: Retype Password: params.c:pm_process() - Processing configuration file "/etc/samba/shares.conf" ERROR(ldb): Failed to add user 'pepito': - ../ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in

Dear All, Any suggestion to the message below? Thank You. amtbsrv02 ~ # samba-tool domain join amtb-workgroup DC -Uadministrator --realm=KL01.AMTB-M.ORG.MY --dns-backend=BIND9_DLZ Finding a writeable DC for domain 'amtb-workgroup' Found DC amtbserver.kl01.amtb-m.org.my Password for [AMTB-WORKGROUP\administrator]: workgroup is AMTB-WORKGROUP realm is kl01.amtb-m.org.my checking

> Hi all, > > We have a Samba AD DC service running on Ubuntu 16.0.4 with Samba > 4.3.11. We are planning to upgrade it to a recent version, probably > 4.8.3. > > I think that I have two options: > > a) Package upgrade via 3rd party repositories (Louis Van Belle's repo) > by following wiki. > > b) A fresh install of 4.8.3 on another VM then join it to