similar to: User profiles question

No, the question is about your client machine. Who are the DNS servers configured on it? Does it have a second dns server configured? If it uses your first DC as DNS, and you take that DC offline, who the client machine will query for domain info? As for the issue below it is normal. Every DC registers an "A" record for your domain name. When you use dig, it will retrieve all

Hello.In my configuration I have three DCs one who build the domain and two replication. For the configuration of the client I put in the resolv.conf the three DC addresse. So normally the client is able to contact all DCs of domain. But to have domain information only the dc that built the domain provided them, and when I stop it, replication DCs are unable to provide this information to client

Just a thought if the client machines are still getting a listing in the DNS for the failed machines wouldn't this be a problem? How would the programs know not to use the failed server? Is there a way to temporarily move the failed machines out of dns listings? On Fri, Feb 24, 2017 at 8:52 AM, Vinicius Bones Silva via samba < samba at lists.samba.org> wrote: > No, the question is

jep thats also configured. OLIVER WERNER System-Administrator > Am 10.01.2017 um 13:41 schrieb Vinicius Bones Silva via samba <samba at lists.samba.org>: > > check your /etc/nsswitch.conf and confirm that passwd and group lines have the winbind keyword > > passwd: files winbind > group: files winbind > > > > Em 10/01/2017 10:29, Oliver Werner via samba

I'm not sure I understood the question. Uncommenting the lines or commenting them yelds the same results, as long as "idmap_ldb:use rfc2307 = yes" is kept in place. Commenting it as well changes the ids to the 3 million range. Cleaning the caches did not affect the results. Em 29/10/2016 07:31, Andrew Bartlett via samba escreveu: > On Thu, 2016-10-27 at 17:23 -0200, Vinicius

Hi Rowland, Just to let you know, we removed all the idmap entries we had on the smb.conf of our two DCs and the ids reported by getent passwd at the DCs were in the 3.000.000 range, as you said. We had to add back 'idmap_ldb:use rfc2307 = yes' to get the user listing with the original numbers on the DCs. Here's what we commented out on the configurationfiles. #

check your /etc/nsswitch.conf and confirm that passwd and group lines have the winbind keyword passwd: files winbind group: files winbind Em 10/01/2017 10:29, Oliver Werner via samba escreveu: > HI, > > on debian i use pam winbind by adding > > the file /usr/share/pam-configs/winbind and enable this. > > Is there another way on RHEL? i have configure RHEL that wbinfo -u

who are the DNS servers your workstations have configured? Windows does not behave very well if the first DNS is offline, as far as I have tested. Em 17/02/2017 13:20, basti via samba escreveu: > Hello, > I have installed an samba ad1 and an samba ad2 with replication. > On the dc1 "samba-tool drs showrepl" say "... was successful" > On dc2 there is the same. >

who are the DNS servers used by the client machine? Em 24/02/2017 05:42, Keshia lesly diana Etsiké malam via samba escreveu: > Hello, > I am currently testing for Samba4. The creation of the domain and the secondary Dc implementation works well. But by performing tests for a fail over situation I realized that when the DC that created the domain is in fail over the linux client machine can

I'm having a similar issue on a new DC I've installed today: [root at theoden ~]# samba-tool ntacl sysvolcheck ERROR(<type 'exceptions.TypeError'>): uncaught exception - must be string, not None File "/usr/lib64/python2.7/site-packages/samba/netcmd/__init__.py", line 176, in _run return self.run(*args, **kwargs) File

PROBABLY its a problem with your reverse dns resolution. From the samba server, if you do a host 172.25.0.12 (change as appropriate) does it resolve to a hostname in the .example.com domain? If it don't, samba wont know that it's uspposed to block the access. Em 09/11/2016 19:37, Erick Ocrospoma via samba escreveu: > Hi everybody, > > > I'm setting up a Samba under

Did you create a kerberos keytab file to use with dovecot? https://wiki2.dovecot.org/Authentication/Kerberos Also, make sure there's a reverse DNS entry for the dovecot server, kerberos usually fails if the reverse address is not resolvable. Regards, Vinicius. Em 11/07/2017 06:41, Mark Foley via samba escreveu: > I'm not sure whether this is a Dovecot issue or a Samba issue, but as

using testparm of 4.6.0rc2 against the smb.conf of a production server (the production server is not using rc2, dont worry) produces the error: [root at fwborda1 samba-460rc2]# testparm /root/smb.conf Load smb config files from /root/smb.conf rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384) Processing section "[netlogon]" Processing section "[sysvol]"

Your smb.conf is for a Domain Controller. Winbind is meant to run on member servers. You are setting up a domain controller or you are joining this samba to an existing domain? Em 04/01/2017 10:25, Lukz Ferris via samba escreveu: > Rowland, > > > I looked at Samba wiki, but it doesn't helped me as I wanted, maybe I'm doing something wrong. > > > This is what I tried

Probably a ld issue. It might have not run in the rpm's post script. Do a ldd /usr/lib64/samba/libsmbregistry-samba4.so /usr/lib64/samba/vfs/acl_xattr.so and check if either are reporting missing dependencies. Em 07/02/2017 21:25, John Gardeniers via samba escreveu: > This is really weird. The error below occurred for about 10 minutes after the > post-update reboot and then went

I've had this problem as well. We created a domain with two 4.4.4 DCs and everything worked. Sometime after we upgraded the DCs to 4.5.0, the machine joins and some user logons displayed the invalid SID message. We tried recreating the domain from scratch with 4.5.0, but had the same problem. We recreated everything with 4.4.4 , and did not have problems so far. Em 20/10/2016 18:47,

On 10 November 2016 at 07:51, Vinicius Bones Silva via samba < samba at lists.samba.org> wrote: > PROBABLY its a problem with your reverse dns resolution. > > From the samba server, if you do a host 172.25.0.12 (change as > appropriate) does it resolve to a hostname in the .example.com domain? If > it don't, samba wont know that it's uspposed to block the access. >

Hi, This is just a report I wanted to share. Maybe someone can put it on the wiki. I created a new DC for a new site using the samba internal dns option. Later, I decided to go with bind. So I ran the command, and got this error: [root at theoden ~]# samba_upgradedns --dns-backend=BIND9_DLZ --verbose Reading domain information DNS accounts already exist No zone file

Hi, The ldapsearch message is because you can't connect by plain text (-x) by default . Try using https, that should do it. Does smbclient -L SERVERDOM -U Administrator work? Or does it give NT_STATUS_LOGON_FAILURE as well? if you increase the log level, do you see "Unable to convert SID (S-1-X-XXX) at index X in user token to a GID." in your log files? Em

Hi, I'm trying to remove a DC from a site we have shutdown. The demote command is throwing up this message: [root at aragorn ~]# samba-tool domain demote --remove-other-dead-server=pippin Removing nTDSConnection: CN=eca08dbb-1f34-476e-96dd-33ec22b2bc94,CN=NTDS Settings,CN=GANDALF,CN=Servers,CN=SAOPAULO,CN=Sites,CN=Configuration,DC=e-trust,DC=com,DC=br Removing nTDSDSA: CN=NTDS