similar to: Issue to Demote old DC

Hi, I want demote my DC (old) with Samba 4.2.1, but the following message appear: root at dc-old:~# samba-tool domain demote -Uadministrator Using dc1.empresa.com.br as partner server for the demotion Password for [EMPRESA\administrator]: Deactivating inbound replication Asking partner server dc1.empresa.com.br to synchronize from us Failed to bind - LDAP error 8 LDAP_STRONG_AUTH_REQUIRED -

I've been thinking if it's better to make a new Samba 4 DC server instead upgrade the old DC and then transfer the FSMO roles to it and shut down the old server. This way the installation would be cleaner and free of any errors of the old installation. I'm using Samba 4.2.1 and the result of command below is: root at EMPRESA:~# samba-tool fsmo show InfrastructureMasterRole owner:

Hi, I need to remove my Samba 4 server from the domain and the following error is happening: samba-tool domain demote -Uadministrator Using WIN-DC1.empresa.com.br as partner server for the demotion Password for [EMPRESA\capbacci]: Deactivating inbound replication Asking partner server WIN-DC1.empresa.com.br to synchronize from us Error while replicating out last local changes from

Hi, I removed the last server (samba4-dc-old listed below) from the domain, but information related to that server remained. Is there any way to remove this registry from Samba 4? samba-tool drs showrepl Default-First-Site-Name\SAMBA4-DC DSA Options: 0x00000001 DSA object GUID: a1ab021c-0ef7-4fd3-a69d-28afc7c1260a DSA invocationId: a20c8ed0-c72a-4e57-9e59-2236f127d0b8 ==== INBOUND NEIGHBORS

Hi, I have jointed 2 Samba 4 servers in my domain and transferred FSMO roles to the primary Samba 4 server. I have verified that the Samba 4 servers are OK, but I am having trouble removing the latest DC Windows Server 2008. It reports that there is no other DC to transfer data from the directory DC = DomainDNSZones, DC = Enterprise, DC = com, DC = br However the functions are all on my DC

hmm, ? Well based on what i see, that error comes at the end of this process, so strange it errors out. Beside that your output looks good. ? You can try to install these, if its python problem Run samba-toold drs showrepl? after every install, that helps in detecting which package you might miss. ? apt install python-dnspython ? apt install python-iso8601 ? apt install python-crypto ? apt

Hi, Is the problem because of the Samba version? Since my Windows server is 2008 and was having trouble joining the Samba 4.10 on domain , I chose to install Samba from the very old Debian 9 repository (apt-get). Now that Samba is in the domain I want to upgrade to 4.10. Is there a problem updating Debian 4-5-16 from the Van Belle repository ( http://apt.van-belle.nl/)? I believe this may

Hi, I have 2 DC Samba 4 in my network. My new DC is Samba 4.6.3 My Old DC is Samba 4.2.1 I want demote my DC (old) with Samba 4.2.1, but the following message appears: ~# samba-tool domain demote -Uadministrator Using dc1.empresa.com.br as partner server for the demotion Password for [EMPRESA\administrator]: Deactivating inbound replication Asking partner server dc1.empresa.com.br to

Hi, >If your replication is good and all is verified, you can turn off the windows DC. >I suggest, leave everyting as is. Wait 3-5 days. Replication between Samba 4 DC are OK. However, sometimes problems arise between Windows Server 2008 and Samba 4 records, usually related to attributes of 2 or 3 specific computers. I edit the Samba registry with ldbedit and everything is OK. After a

Hi When I work with RSAT on Samba4 appear the following message: "A global catalog (GC) cannot be contacted. A GC is needed to list the objects group memberships. ..." Occur, for example, when I access properties about an user or computer, as member of or Unix Attribute tab I have executed some tests, and for me looks like is healthy my DC. Is there another test to verify the health

On Thu, 3 Nov 2016 10:25:00 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 11/3/2016 9:59 AM, Marcio Demetrio Bacci wrote: > > Thanks Lingpanda101 > > > > Following the result of command: > > > > # file: Policies/{0F1E5B10-3640-4FFE-AA6B-5DE4CFF73625} > > # owner: 10060 > > # group: 30028 > > user::rwx > >

I'm having problems with GPO in Samba 4.2.1 I created a GPO to Block Control Panel and applied in my Domain OU. In desktop client I typed "gpupdate /force" and appear a success message that to ask reboot my system. After rebuot the GPO don't work. Other GPOs as WSUS update, Wallpaper and others, don't work too. Following is the result of command: GPRESULT /H

Hi Rowland I'm using Samba 4.2.1 on Debian 7 Regards, Márcio 2016-11-15 20:30 GMT-02:00 Rowland Penny via samba <samba at lists.samba.org>: > On Tue, 15 Nov 2016 20:19:23 -0200 > Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote: > > > Hi > > > > When I work with RSAT on Samba4 appear the following message: "A > > global

On Mon, 22 May 2017 19:37:58 -0300 Marcio Demetrio Bacci via samba <samba at lists.samba.org> wrote: > Hi, > > I'm trying demote my old DC, but the following message appear: > > root at dc-old:~# samba-tool domain demote -Uadministrator > Using dc1.empresa.com.br as partner server for the demotion > Password for [EMPRESA\administrator]: > Deactivating inbound

Hi, I performed the procedures below on Samba4-DC1 (Master) and apparently everything went fine. /etc/init.d/samba-ad-dc stop sed -i -e 's/${DOMAINDN}/DC=empresa,DC=com,DC=br/g' \ -e 's/${NETBIOSNAME}/SAMBA4-DC1/g' \ -e 's/${NISDOMAIN}/empresa/g' \ /tmp/ypServ30.ldif root at samba4-dc1:/tmp# ldbmodify -H /var/lib/samba/private/sam.ldb

I'm using Ubuntu 14.04-64 bits I had installed with apt-get the follows packages krb5-user krb5-config winbind samba samba-common smbclient cifs-utils libpam-krb5 libpam-winbind libnss-winbind The samba version is 4.1.16-Ubuntu Below are my files of configuration */etc/samba/smb.conf* [global] netbios name = cliente-ad192 workgroup = EMPRESA security = ads realm = EMPRESA.COM

Hi, I have 2 DC in my network. DC master is a Samba 4 and the secondary is Windows Server 2008. I want to put another Samba 4 as DC to replace Windows Server, however the following errors are emerging: root at samba4-dc2:~# samba-tool domain join empresa.com.br DC -k yes -d 3 lpcfg_load: refreshing parameters from /etc/samba/smb.conf GENSEC backend 'gssapi_spnego' registered GENSEC

Hi, I have a problem. My domain is EMPRESA.COM.BR and I need to rename to EMPRESA.GOV.BR. Is it possible in Samba 4? How can I migrate users account? I'm using Samba 4.6.3. Regards, Márcio Bacci

Hi, I have 2 DC (both with Samba 4.6.5) and apparently the secondary DC is receiving information of the main DC, according to information below: root at dc2:/root samba-tool drs showrepl Default-First-Site-Name\DC2 DSA Options: 0x00000001 DSA object GUID: b3061034-9e5c-452d-a215-43e8a83b90ec DSA invocationId: 4010374c-e457-49ed-9b6d-24c6e40eb737 ==== INBOUND NEIGHBORS ====

Hi, My DCs are Windows Server 2008 (not R2) and I intend to replace then by Samba 4. I'm using Samba 4.10.5 on Debian 9.9 when I execute the commands below it seems that errors occur of not receive replication of the objects from the base of AD or no commit the operation: root at samba4dc:/etc/init.d# samba-tool domain join empresa.com.br DC -Uadministrator --realm=empresa.com.br INFO