similar to: ADC 4.7.0 KCC replication failing with PDC 4.6.8

Hi Rowland Thanks for the link https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage It should fix the Firewall authentication problem. I like to find out if I can rename the Domain name of the DC when I move it to the new DC like currently it is IUMNET.EDU.NA <http://iumnet.edu.na/> but my GApps domain name is IUM.EDU.NA <http://ium.edu.na/> and I like to use the same on my new

Hi Denis Thanks for your advise I will not use these wordings here. Please check the result below when I run the command on the DC-1 when DC-2 is off or on smbclient -k //IUMSVRAPP01/Pastel12 -d 9 INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9 quota: 9

I do have GPO directories under sysvol which I have copied using rsync to the new DC and when I run samba-tool ntacl sysvolreset command is failing on the new DC. I am not sure what do I call the main DC thats why I use PDC. I have removed the unnecessary lines from smb.conf Please let me know what do I have to do now. I want to migrate the old DC running on Ubuntu 12.04 to the new DC on Ubuntu

Hi Denis & Rowland Thanks for the suggestion to trim the smb.conf after which the DC-1 is connecting to the Windows Server 2008 shared folder smbclient -k //IUMSVRAPP01/Pastel12 -d 9 and DC-2 is also connecting after using the DNS name of the Windows server. *You'd better switch your DNS to Bind-DLZ. Internal DNS is not that good for larger site (looking at your DNS domain name, I guess

Hi Denis I have upgraded my samba DC-1 from 4.6.12 to 4.7.4 which has solved the replication issues between DC-1 and DC-2. Now both the DC's are running on 4.7.4. Like Rowland said previously, you should remove all RODC that have been installed prior to Samba 4.7. There are many fixes that have been added since 4.6. Before I remove my RODC's I like to clear out few doubts: 1. Instead of

Hi I have tried using FQDN for DC1 and DC2 but still it is failing.Please assist to fix samba-tool drs replicate iumdcdp01.iumnet.edu.na iumsvrpdc DC=iumnet,DC=edu,DC=na --sync-forced -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9

Hi I have two Samba 4 DC’s as below server-1 with all FSMO roles running Samba 4.6.12 on Ubuntu 12.04 server-2 joined to server-1 as a DC running Samba 4.7.4 Ubuntu 16.04 The problem is when I share files from my Windows 2008 file sharing server which shows it is logged on to Server-2 DC and the client PC which logs on to the server-1 DC cannot access the shared folder and gives an error Logon

Hi James Thanks for your response. hots -t A iumsvrpdc (use it's fqdn as well) I have verified it with the FQDN which says that the record iumsvrpdc.iumnet.edu.na exists Search for 'iumsvrpdc' objectGUID ldbsearch -H /usr/local/samba/private/sam.ldb '(invocationId=*)' --cross-ncs objectguid : it shows 2 records found # record 1 dn: CN=NTDS

The upgrade shouldn't have touched the Samba database, just the binaries etc, so check the smb.conf file and recreate it if you cannot find it, or if it is incorrect. The smb.conf still exists [global] workgroup = IUMNET realm = IUMNET.EDU.NA netbios name = IUMDCDP01 server role = active directory domain controller dns forwarder = 172.16.10.254

Hi Rowland The samba-tool command is not working please see the error below: root at iumdcdp01:/home/administrator# samba-tool ERROR(<type 'exceptions.ValueError'>): uncaught exception - bad marshal data (unknown type code) File "/usr/bin/samba-tool", line 46, in <module> retval = cmd._run("samba-tool", subcommand, *args) File

Hi The DRS sync between two Domain Controllers connected on one network is failing. I have enabled the log level 9. samba-tool drs replicate 172.16.10.5 iumsvrpdc DC=iumnet,DC=edu,DC=na --full-sync -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9

Hi Denis Thanks for your response without your crystal ball. I have increased the log level =9 dns:0 on both the servers. It replicates successfully by manually running the command samba-tool drs replicate SERVER2 SERVER1 dc=iumnet,dc=edu,dc=na --full-sync but it is still failing when I check from the samba-tool drs showrepl Also I run samba-tool dbcheck --cross-ncs --fix on both the servers

Hi Stefan I am also one of the Sernet customer. Can you guide me how to run the patch to fix the bug. I am running 2 DC's Sernet Samba 4.7.4 with 2 RODC's running Sernet Samba 4.7.4. Whenever I run samba-tool drs replicate --fix --yes command on the DC it shows the below errors which cannot be fixed: Failed to remove deleted DN attribute fromServer : (65, "objectclass_attrs: at

Hi I am trying to remove a dead offline domain using the below command which is failing samba-tool domain demote --remove-other-dead-server=IUMONG-RODC -UAdministrator ERROR: Demote failed: DemoteException: IUMONG-RODC is not an AD DC in iumnet.edu.na A transaction is still active in ldb context [0x2bf15b0] on tdb:///var/lib/samba/private/sam.ldb IUMONG-RODC domain is still visible under domain

Hi I upgraded my samba 4 DC running on Ubuntu 12.04 from 4.6.7 to 4.6.10 sernet samba package. apt-get update apt-get upgrade sernet-samba While downloading the new package the internet went down and it stopped so later when the connection was restored I started it again with ap-get upgrade sernet-samba and it started again. Now after rebooting the server the sernet-samba-ad service is not

Hi I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4 AD 4.7.2 The Inbound replication on the Server-1 is failing with the error below: DC=iumnet,DC=edu,DC=na Default-First-Site-Name\Server-2 via RPC DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311 Last attempt @ Tue Jan 9 12:55:59 2018 WAST failed, result 58

Hi Harsh, > > Thanks for your advise I will not use these wordings here. thanks! > Please check the result below when I run the command on the DC-1 when > DC-2 is off or on > smbclient -k //IUMSVRAPP01/Pastel12 -d 9 > ... > session setup failed: NT_STATUS_INVALID_PARAMETER_MIX Looking at this message, I would start with doing some cleanup in your smb.conf. I would trim

Hi Harsh, > Thanks for the suggestion to trim the smb.conf after which the DC-1 is > connecting to the Windows Server 2008 shared folder smbclient -k > //IUMSVRAPP01/Pastel12 -d 9 > and DC-2 is also connecting after using the DNS name of the Windows server. > > *You'd better switch your DNS to Bind-DLZ. Internal DNS is not that good > for larger site (looking at your DNS

Yes they exists on both the DC’s. DC1 Samba 4.6.12 DC2 Samba 4.7.4 Sent from my iPhone On 12 Jan 2018, at 6:34 PM, lingpanda101 <lingpanda101 at gmail.com> wrote: On 1/12/2018 3:27 AM, Harsh Kukreja wrote: Hi James Thanks for your response. hots -t A iumsvrpdc (use it's fqdn as well) I have verified it with the FQDN which says that the record iumsvrpdc.iumnet.edu.na exists

On 1/11/2018 1:57 PM, Harsh Kukreja wrote: > Hi > > I have tried  using FQDN for DC1 and DC2 but still it is > failing.Please assist to fix > > samba-tool drs replicate iumdcdp01.iumnet.edu.na > <http://iumdcdp01.iumnet.edu.na> iumsvrpdc DC=iumnet,DC=edu,DC=na > --sync-forced -UAdministrator > INFO: Current debug levels: >   all: 9 >   tdb: 9 >