similar to: AD, 4.5.0, DRS or deletion question

No answer from anyone from the community so I managed by myself, answering also questions by myself. So... Question 1: How can a DC relies on deleted object to perform replication? That is a bug from Samba (the new KCC?). Sorry to say that but what else? Deleted object are objects which are not in use. They have something to do perhaps with replication but they MUST NOT be used as valid source

> Hi, > > Try to add "rdns = false" in krb5.conf on SERVER1. > Hi Mathias, Thanks for your reply I have tried that option but same issues. This is getting worst now. Not sure what else to do, any other test/changes you advise me to do? Right now I'm out of ideas. > > 2016-06-21 13:36 GMT+02:00 Juan Garcia <juan at ish.com.au > <mailto:juan at

2016-07-04 4:40 GMT+02:00 Juan Garcia <juan at ish.com.au>: > Hi, >> >> Try to add "rdns = false" in krb5.conf on SERVER1. >> >> Hi Mathias, > > Thanks for your reply I have tried that option but same issues. This is > getting worst now. Not sure what else to do, any other test/changes you > advise me to do? Right now I'm out of ideas.

The system described by https://lists.samba.org/archive/samba/2016-May/199829.html (Invalid data for index DN=@INDEX:OBJECTCLASS:DNSNODE) now appears to perform DNS updates correctly, all systems are 4.2.10-Debian, and we've been able to add a user and a new DC. (Thanks for the help!) Synchronisation between v-ward (the new local DC), and empire isn't entirely working, though. >

Hi samba-tool dbcheck ERROR(<class 'KeyError'>): uncaught exception - 'No such element' ? File "/opt/samba/lib/python3.6/site-packages/samba/netcmd/__init__.py", line 185, in _run ??? return self.run(*args, **kwargs) ? File "/opt/samba/lib/python3.6/site-packages/samba/netcmd/dbcheck.py", line 141, in run ???

On Thu, 2016-12-15 at 14:25 +0100, mathias dufresne via samba wrote: > No answer from anyone from the community so I managed by myself, > answering > also questions by myself. > > So... > Question 1: How can a DC relies on deleted object to perform > replication? > That is a bug from Samba (the new KCC?). > Sorry to say that but what else? Deleted object are objects

On 24/07/2019 17:05, Rowland penny via samba wrote: > On 24/07/2019 16:01, Carlos via samba wrote: >> Hi >> >> samba-tool dbcheck >> ERROR(<class 'KeyError'>): uncaught exception - 'No such element' >> ? File >> "/opt/samba/lib/python3.6/site-packages/samba/netcmd/__init__.py", >> line 185, in _run >> ??? return

Hi everybody, One of my DC crash this afternoon (dead disk). I can't remove this DC server from windows GUI (computer object from < users and computers >) and NTDS settings from < sites and services > because windows GUI error. So i manually remove this old server : - Clean all DNS stuff (tpc, sites, kerberos, kpasswd, srv entries.....) - With apache directory

Hi, ok, now join(with samba 4.10.6) was ok, but same original error :-/ smbclient //localhost/netlogon -UAdministrator -c 'ls' Enter XXXXXXX\Administrator's password: session setup failed: NT_STATUS_INTERNAL_DB_CORRUPTION Regards; On 24/07/2019 10:17, Rowland penny via samba wrote: > On 24/07/2019 12:53, Carlos via samba wrote: >> HI >> >> As the reported

Solved ! Thanks for the script. In my case, it was just too late. I have just found a ugly but working solution: From Configuration, Schema, Domaindnszones, forestdnszones and principal, I remove using ldbdel a "repsTo" binary object. No more trouble with drs showrepl :-) -----Message d'origine----- De : samba [mailto:samba-bounces at lists.samba.org] De la part de Stefan Kania

UNCLASSIFIED Hi Rowland No tombstonelifetime. Do I need to upgrade the schema? The current schema is 30 (Windows 2003). When I try to update the schema, I get the following error: Applying Sch31.ldf updates... Exception [Errno 2] No such file or directory I downloaded sch31.ldf and tried to apply that. samba-tool domain schemaupgrade --ldf-file=sch31.ldf --base-dir=/home/user/work/ldif

UNCLASSIFIED Sorry to be a bloody pest, but I've hit a new problem. I shutdown the 2003 server & seized the roles. I then upgraded to samba 4.7.12. and demoted the 2003 server. Everything seemed to be working OK for several days, so I upgraded to 4.8.12. All seems OK except samba-tool dbcheck gives an error [root at julius samba-4.8.12]# samba-tool dbcheck -v --cross-ncs

Dear list, Does anybody know how to lower the tombstone lifetime in samba 4.5 or later? There used to be a wiki entry, but this has been deleted as it is probably not adequate anymore: https://wiki.samba.org/index.php/Restoring_deleted_AD_objects#Changing_the_defaults_for_msDS-deletedObjectLifetime_and_tombstoneLifetime I used to change the attribute tombstoneLifetime in CN=Directory

Hi, I am seeing the following error when running samba-tool dbcheck # samba-tool dbcheck --cross-ncs ERROR(<class 'KeyError'>): uncaught exception - 'No such element' File "/usr/local/samba4/lib/python3.6/site-packages/samba/netcmd/__init__.py", line 185, in _run return self.run(*args, **kwargs) File

Hi, all. What is greatest period for AD DC (non FSMO) can be unavailable, for example, because network segment is unavailable for long time (3, 4 weeks)? Is the controller will be removed from AD automatically? And what to do after this network segment will become available? I have read about tombstoneLifeTime attribute of Directory Service (Configuration, Services, Windows NT), which default

An awful response: change tombstoneLifetime : ) When deleting objects they go to recycle bin then to deleted objects then are deleted. This if you have some recycle bin working which is not the case by default I reckon. tombstoneLifetime is the number of days AD has to keep deleted objects before the real deletion. If you use the recycle bin this very same tombstoneLifetime is also used to

Hi, To upgrade my secondary DC Samba 4.5-16 to 4.8 should I remove the smb.conf file in /etc/samba first? I remember I tried last month to upgrade from 4.5-16 to 4.7 and broke the installation. Or are just the procedures below enough? Create this file repo file for apt. echo "deb http://apt.van-belle.nl/debian stretch-samba48 main contrib non-free" | sudo tee -a

Hi Denis, I have seen in an old post that you have tested new KCC from full mesh to bridge head at a french school. Is your "drs showrepl" correct on such DC's ? In my case, a drs showrepl is showing a full mesh on inbound and outbound (not good) but only 1 KCC connection objects (good) Where is a full description of my trouble:

Hi Louis and others, While I cannot speak for the GP, I've had this same problem since I recently (finally!) upgraded to Samba 4.8 (4.8.11). In fact, the very reason I wanted to run dbcheck for was to confirm that Samba still works correctly after upgrading (it does seem to replicate normally, anyway).[1] I've configured Samba with the following switches: --enable-debug --enable-selftest

We have a test samba setup containing two domain controllers (both running samba v4.1.6). Recently we created an ldap group, added around 5000 members to it and then deleted the users from the directory. We set tombstoneLifetime to few days and waited for these ldap objects to be purged from the system. But we notice that the particular group has slowed down considerably for all ldap operations.