similar to: DNS and DC replication clarification

On Mon, 2017-03-06 at 16:59 +0000, Rowland Penny via samba wrote: > On Mon, 6 Mar 2017 16:30:48 +0000 (UTC) > Mircea Husz via samba <samba at lists.samba.org> wrote: > > > All, > > > > I configured two DCs (Samba version 4.5.5) replicating ad.corp.com > > in > > two sites ( > > > > https://wiki.samba.org/index.php/Active_Directory_Sites)

On Mon, 6 Mar 2017 16:30:48 +0000 (UTC) Mircea Husz via samba <samba at lists.samba.org> wrote: > All, > > I configured two DCs (Samba version 4.5.5) replicating ad.corp.com in > two sites ( > > https://wiki.samba.org/index.php/Active_Directory_Sites) > > Following 'DNS configuration on Domain Controllers' section from this > wiki >

>On Tuesday, October 29, 2019, 03:41:35 PM CDT, Andrew Bartlett via samba <samba at lists.samba.org> wrote: >>On Tue, 2019-10-29 at 19:23 +0000, Mircea Husz via samba wrote: >> We're adding a new datacenter and am taking the opportunity to >> upgrade Samba version to 4.11. We have three AD servers currently on >> version 4.7.9. >> I plan to add a new AD

On Sat, 2017-03-11 at 13:39 +1300, Andrew Bartlett via samba wrote: > On Fri, 2017-03-10 at 16:17 -0600, Mircea Husz via samba wrote: > > > > Hello, > > > > I just configured a three-site DCs setup with Samba 4.6.0, and > > replication worked great. > > But then I added a custom cert to one of the DCs to authenticate > > various apps against it. I

-------------------------------------------- On Mon, 3/6/17, lingpanda101 via samba <samba at lists.samba.org> wrote: Subject: Re: [Samba] DC site replication issue ? To: samba at lists.samba.org Date: Monday, March 6, 2017, 9:20 AM On 3/6/2017 9:56 AM, Mircea Husz via samba wrote: > All, > > I'm migrating a samba3 domain to a new samba4 AD version 4.5.5. Did a fair

Hi, In order to work around a known upstream bug I needed to add a udev rule to pxeboot initrd.img on CentOS 7. The process is straightforward: 1 - extract the pxeboot initrd.img to a new directory 2 - add the udev rule needed to fix the bug 3 - pack and compress it back in initrd.img format The resulting updated image works, it fixes the upstream bug and life is good. But although it works,

Hi! I have a question about order in dcs is /etc/resolv.conf , my configuration: DC01: /etc/resolv.conf IP DC02 IP DC01 DC02 /etc/resolv.conf IP DC01 IP DC02 https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory#DNS_Configuration_on_Domain_Controllers --- However this setting causes the error: samba_dnsupdate --verbose --all-names dns_tkey_negotiategss:

On Tue, 2017-05-30 at 12:18 +0100, Rowland Penny via samba wrote: > On Tue, 30 May 2017 13:09:38 +0200 (CEST) > > Sébastien QUESSON via samba <samba at lists.samba.org> wrote: > > > > > > All I can think of is, you have a user with > > > > > > > > > > 'sAMAccountName=username' and another with 'CN=username', this >

We're adding a new datacenter and am taking the opportunity to upgrade Samba version to 4.11. We have three AD servers currently on version 4.7.9.? I plan to add a new AD DC, version 4.11, by joining it to the domain. Can the domain function in production with three DCs on 4.7.9, and a new one running 4.11 ? Thanks,-Mike

Hello, I just configured a three-site DCs setup with Samba 4.6.0, and replication worked great. But then I added a custom cert to one of the DCs to authenticate various apps against it. I used this wiki https://wiki.samba.org/index. php/Configuring_LDAP_over_SSL_(LDAPS)_on_a_Samba_AD_DC Now I can authenticate my apps over LDAPS against my DC, but broke replication. How do I need to configure

Hi Roland, Thank you for the explanation. Allow me to press the point, I'd like to understand what I'm doing. Is there value in me remapping them from their 3000000 - range default as I see it on the AD server? What is the reason for specifying a lower range such as 3000-7999 ? Thank you, -Mike On Friday, January 27, 2017 3:42 PM, Rowland Penny via samba <samba at

I scripted the creation of snapshots and it works fine. Now I'd like to run the script as non-root. virsh snapshot-create-as --domain hq-live-v01 \      --name snappy \      --diskspec vda,file=/var/lib/libvirt/images/hq-live-v01.snappy,snapshot=external \      --diskspec vdb,file=/var/lib/libvirt/images/hq-live-storage.snappy,snapshot=external \      --disk-only --quiesce --atomic This

All, We have a samba3 domain which provides logon services for Windows clients, and several cifs shares, some for Windows clients and some for linux servers to mount. I am testing samba 4.5.4 in a lab to understand all that needs to happen for a migration to AD on samba4. During testing we bumped up against winbind config for linux member servers. Since we want users to authenticate against AD,

That makes sense. I didn't realize that IDs for BUILTIN accounts are not identical between DCs. Since they are not identical they need to be mapped to a consistent set. Thank you for the explanation. On Friday, January 27, 2017 4:57 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: On Fri, 27 Jan 2017 22:00:11 +0000 (UTC) Mircea Husz <mirceahusz at yahoo.com> wrote:

On Mon, 2017-03-06 at 15:48 -0500, lingpanda101 via samba wrote: > On 3/6/2017 12:53 PM, Mircea Husz wrote: > > > > -------------------------------------------- > > On Mon, 3/6/17, lingpanda101 via samba <samba at lists.samba.org> > > wrote: > > > >   Subject: Re: [Samba] DC site replication issue ? > >   To: samba at lists.samba.org > >  

On Wed, Mar 20, 2019 at 15:48:43 -0500, Eric Blake wrote: > On 3/20/19 1:50 PM, Mircea Husz wrote: > > I scripted the creation of snapshots and it works fine. Now I'd like to run the script as non-root. > > > > virsh snapshot-create-as --domain hq-live-v01 \ > >      --name snappy \ > >      --diskspec

> -----Ursprüngliche Nachricht----- > Von: Rowland penny [mailto:rpenny at samba.org] > Gesendet: Sonntag, 5. Juni 2016 17:46 > An: Jo <j.o.l at live.com> > Cc: 'samba' <samba at lists.samba.org> > Betreff: Re: AW: [Samba] inconsistent DNS information, windows domain > member issues.. > > On 05/06/16 13:43, Jo wrote: > >> Your DCs really

On Mon, 15 Aug 2016 16:02:38 +0100 Rowland Penny via samba <samba at lists.samba.org> wrote: > > OK, this has nothing to do with the classicupgrade, I have setup a > couple of VMs and provisioned a test DC in one and joined another DC > in the other. > > I am now at the point the OP is at, samba_dnsupdate cannot add the > required records, all I get in log.samba is

Hi, Existing Samba setup has no sites, two servers (one AD and one DC) are all in Default-First-Site-Name site. Inter-Site Transport: IP Site Link: DEFAULTIPSITELINK Sites: Default-First-Site-Name (already existing): Domain Controller(s): AD, HKDC Subnets: 192.168.1.0/24 SZOffice (new created): Domain Controller:

All, I'm migrating a samba3 domain to a new samba4 AD implementation. The samba3 domain is at the top level corp.com, and after having read the naming FAQ we decided to create ad.corp.com for Samba4. We're doing a test migration and so far things are going well. Part of test is migration of old samba servers, which involves joining them to AD, which creates a DNS record under