similar to: 4.5.0 as AD, missing replication links

Hi, Do you have some link to explain what are the difference between new and old KCC? Is it the old one do not respect "NTDS Settings" links in "Active Directory Sites and Services" console and force replication between every DC? If yes new KCC would rely on what is defined into each server's "NTDS Settings", is it? 2016-11-18 17:01 GMT+01:00 lingpanda101 via

On 9/21/2016 11:32 PM, Garming Sam wrote: > I would have assumed that deleting all the NTDS connections for all the > DCs would have remedied this issue. I'll write a patch to try to avoid > this error in any case. > > Ignoring this error and answering your earlier question, it's often hard > to tell if the KCC is doing what is expected or not. To figure that out, >

Hi! In Option "Inter-Site Transports", i have only  one the name "DEFAULTIPSITELINK" , in properties Sites in this link: Matriz Filial Matriz -> site with DC1 and DC2 Filail ->  site With DC3 Regards; On 17-05-2018 13:12, lingpanda101 wrote: > On 5/17/2018 12:07 PM, Carlos wrote: >> Hi! >> >> Thanks for answer. >> >> But, i allowed

On 9/18/2016 6:23 PM, Garming Sam wrote: > Hi, > > For the unsorted attributeID values errors, can you first try: > > samba-tool dbcheck --cross-ncs --fix --yes 'fix_replmetadata_unsorted_attid' > > There's too much going on, and it does look like it might be bailing > out. Running it with 'fix_replmetadata_unsorted_attid' should fix those > first

Hi! I have 2 DC, now add one more DC, but all dcs dont view between they. New DC is "DC2" DC1 - vlan10 -> OK to DC3(Connectad by openvpn) DC1 -> vlan10 -> OK to DC2(vlan50) DC2-> vlan50 -> OK to DC1(vlan10) DC2-> Openvpn -> Dont "see" DC3 DC3 -> Openvpn -> OK to DC1(vlan10) DC3 -> Openvpn -> Dont "view" DC2(vlan50) All version

On 5/17/2018 3:58 PM, Carlos wrote: > > Hi! > > In "NTDS settings" created new connection for: > > DC2 ->DC3 > > DC3 -> DC2 > > All OK, > > I tested with option > > kccsrv:samba_kcc=No > > is ok too. > > But in my DC2, a received one erro: > > May 17 16:54:44 dc2 samba[10421]: [2018/05/17 16:54:44.543336,  0] >

Hello, Updated samba from 4.4.5 to 4.5.0. All DC's are Ubuntu 12.04.5 LTS. I install samba from source(./configure,make,make install). Looking at the release notes I see the section on "replPropertyMetaData Chnages". I run 'samba-tool dbcheck --cross-ncs --fix --yes' and see the errors and samba attempts to fix. ERROR: unsorted attributeID values in

On 9/22/2016 6:31 PM, Garming Sam wrote: > On 23/09/16 00:59, lingpanda101 at gmail.com wrote: >> For clarification I'll add a few things. >> >> I initially deleted all the NTDS site links for each site and allowed >> the new KCC to create them. However it did not create them I believe >> correctly. By that I mean it defined what appeared to be a bridgehead

Hi all, I have a strange behaviour on our AD. DC=ForestDnsZones,DC=ad,DC=domain,DC=tld Authentification\DC208 via RPC DSA object GUID: 20f711ed-cb02-4543-badb-28d3ed4c4ae1 Last attempt @ NTTIME(0) was successful 0 consecutive failure(s). Last success @ NTTIME(0) DC=ForestDnsZones,DC=ad,DC=domain,DC=tld NTDS DN:

Hi! Thanks for answer. But, i allowed all ports in my firewall... I tested, shutdown  my DC1 DC2 dont comunication with DC3 I create user in DC2, dont replication with DC3... I waited more in 20 minutes Why ?? Regards; On 17-05-2018 12:01, lingpanda101 wrote: > On 5/17/2018 10:30 AM, Carlos via samba wrote: >> Hi! >> >> I have 2 DC, now add one more DC, but all dcs

I forgot to associate inter-site links (all using default), which fixed a lot though I'm still having an issue. * vsc site o vsc-dc01 o vsc-dc02 * aws site o aws-dc01 * epo site o epo-dc01 * vsc-dc01 => anywhere: OK * vsc-dc02 => anywhere: not replicating * aws-dc01 => anywhere: OK * epo-dc01 => anywhere: OK I've tried with samba_kcc =

To see which DC is used by Windows client: open a MSDOS console, type "set", look for LOGONSERVER=\\<your_dc> <your_dc> is the DC used to connect on. If issue comes from one DC I would have on sysvol synchronisation between DC, ACL on all sysvol, DNS entries (but I don't think that's a DNS issue if you have only GPO issue). 2016-03-29 14:51 GMT+02:00 Sébastien Le

Hi Denis, I have seen in an old post that you have tested new KCC from full mesh to bridge head at a french school. Is your "drs showrepl" correct on such DC's ? In my case, a drs showrepl is showing a full mesh on inbound and outbound (not good) but only 1 KCC connection objects (good) Where is a full description of my trouble:

Hi all, Here is our smb.conf: [global] workgroup = AD realm = AD.DOMAIN.TLD netbios name = DC200 server role = active directory domain controller server services = -dns idmap_ldb:use rfc2307 = yes #kccsrv:samba_kcc=true acl_xattr:ignore system acls = yes winbind nss info = rfc2307 [netlogon] path =

Hi everybody, I'm playing with the new Improved KCC of samba 4.3.X Here is my network's topology : - DC : smb4dc located on Default-First-site-Name - DC : dc110 located on PetitQuevilly - DC : dc113 located on SaintEtienne - DC : dc120 located on Barentin - Etc.... (total of 15 DC) I want smb4dc acting as a bridge head for all others

On Thu, 2016-12-15 at 14:25 +0100, mathias dufresne via samba wrote: > No answer from anyone from the community so I managed by myself, > answering > also questions by myself. > > So... > Question 1: How can a DC relies on deleted object to perform > replication? > That is a bug from Samba (the new KCC?). > Sorry to say that but what else? Deleted object are objects

On 9/24/2016 7:32 AM, Denis Cardon wrote: > > the job of the samba_kcc script is to create the ntdsConnection > objects. Afterward the repsFrom/repsTo attribute are created in > accordance with the ntdsConnection objects (you can force the creation > using samba-tool drs replicate although). You can check that the > process is asynchronous when you join a new DC, the INBOUND

I'm not an expert in idmap (at all in fact :p) but I thought idmap stuffs were here to replace RFC2307 UID/GID declared into AD/LDAP objects. In others words, if you configure correctly idmap into smb.conf I expect you don't need any more declaring UID/GID for machine accounts. Anyway here my machines get access to their GPO: I tested one computer's GPO this morning, the one giving

Complete event id of : > But still, events log show a warning about kerberos ticket from LsaSrv > source and right after a permission denied on GPT.ini And a getfacl of the problem GPO SID please, i'll check. And a output of ipconfig /all on the problem pc. And question, dedicated IP or dhcp IP? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba

On Thu, 17 May 2018 16:58:13 -0300 Carlos via samba <samba at lists.samba.org> wrote: > Hi! > > In "NTDS settings" created new connection for: > > DC2 ->DC3 > > DC3 -> DC2 > > All OK, > > I tested with option > > kccsrv:samba_kcc=No > > is ok too. > > But in my DC2, a received one erro: > > May 17 16:54:44 dc2