similar to: Can't join, error: Not removing account DC2$ which looks like a Samba DC account maching...

Hi, I have a primary DC that I provisioned with this command: samba-tool domain provision --server-role=dc --use-rfc2307 --dns-backend=SAMBA_INTERNAL --realm={{ samba_default_realm }} --domain={{ samba_default_realm_domain }} --adminpass={{ samba_ldap_adminpw }} I am now trying to provision a second DC in the same domain with the command: samba-tool domain join {{ samba_default_realm |

On Tue, 20 Feb 2018 14:10:16 +0500 "denis.shigapov" <denis.shigapov at stroylandiya.ru> wrote: It seems that the problem starts here: Could not find machine account in secrets database Yet near the top there is: Setting up secrets.ldb It seems that either 'secrets.ldb' doesn't contain the required info or 'vas.lah' doesn't have the required permissions

Hallo, I encountered a similar problem. I created a test environment with two domain controllers (copy from a working environment). I tried to join a read-only domain controller. Unsuccessfully. Samba-tool fell with a error: .... added interface ens192 ip=192.168.59.5 bcast=192.168.59.255 netmask=255.255.255.0 resolve_lmhosts: Attempting lmhosts lookup for name dcg2.unn.global<0x20>

Hi folks, I manage the AD with rsat and recently we had problems with the CN of some users that have accentuation. When checking the user configuration via samba-tool user edit <username> in the location where the CN should be readable, a hexadecimal or something of that type appears. E.g: Acentuação da Silva dn: CN=Acentuação da Silva,OU=TESTE,DC=teste,DC=intra objectClass: top

Hi Samba Team, Have recently followed Samba guide and successfully migrate from PDC to AD and from BDC to join AD forest. Need some advice here as I encountered global catalog (GC) cannot be contacted issue when using RSAT. This message pops up when I click "member of" tab while viewing user properties although it will display correctly after I acknowledged the error. Another similar

On 4/2/2018 1:47 PM, Krzysztof Paszkowski via samba wrote: > Hi all, > > After demoting one of AD DCs, I’m unable to join the domain again. > Demoting was fine. > > OS is Centos 6 > Samba 4.7.6 (with 4.7.4 doesn’t work either) built from sources. > > > klist > Ticket cache: FILE:/tmp/krb5cc_0 > Default principal: administrator at DOMAIN.NET.PL > > Valid

On 4/2/2018 3:56 PM, Krzysztof Paszkowski via samba wrote: > I'm trying to use the same hostname. > The meta cleanup - I can't see the demoted controller in ADUC nor in Active Directory Sites and Services. > Shall I try via ntdsutil? > > Regards, > Kris > > -----Original Message----- > From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of

Hello, Thanks for the feedback Garming!!! 👍 On Wed, Apr 17, 2019 at 12:35 AM Garming Sam <garming at catalyst.net.nz> wrote: > Hi, > > While I think we have most of the 2012 schema problems under control > now, there's still quite a bit of work to get the functional level > things working. In order to actually raise the level, we still need to > implement a number of

Hello, I had posted this in another topic, but because the problem is different, I decided to create a new topic. Conf: - Primary DC/pdc Emulator as DC3 - Second DC as DC4 After an upgrade from schema 45 to 69 in DCs, when adding a computer in the domain and if the domain to respond is DC4 the synchronization for DC3 is not done. I already did several tests that I already knew and also new

I'm trying to use the same hostname. The meta cleanup - I can't see the demoted controller in ADUC nor in Active Directory Sites and Services. Shall I try via ntdsutil? Regards, Kris -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of lingpanda101 via samba Sent: Monday, April 2, 2018 9:09 PM To: samba at lists.samba.org Subject: Re: [Samba]

Hi all, After demoting one of AD DCs, I’m unable to join the domain again. Demoting was fine. OS is Centos 6 Samba 4.7.6 (with 4.7.4 doesn’t work either) built from sources. klist Ticket cache: FILE:/tmp/krb5cc_0 Default principal: administrator at DOMAIN.NET.PL Valid starting Expires Service principal 04/02/18 18:44:33 04/03/18 04:44:33 krbtgt/DOMAIN.NET.PL at DOMAIN.NET.PL

Did you run the command to disable the password check or complexabilty on all you DC's? That is needed. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Marco Gaiarin via samba > Verzonden: dinsdag 24 oktober 2017 15:33 > Aan: samba at lists.samba.org > Onderwerp: [Samba] 'check password script'

Hi, i have setted up a DC ESC.LAN, if i try to do "samba-tool domain join MUNICH.ESC.LAN SUBDOMAIN -Uadministrator" i get the following error, how can i build up a AD Subdomain (Domain Tree) [root at MUC-PDC ~]# samba-tool domain join MUNICH.ESC.LAN SUBDOMAIN -Uadministrator Administrator password will be set randomly! Finding a writeable DC for domain 'ESC.LAN' Found DC

Make a note: it is better to disable 'check password script' in the DC(s) before trying to join a new DC. ;( root at vdcpp1:~# samba-tool domain join ad.my.dom DC -U"MYDOM\administrator" --dns-backend=BIND9_DLZ Finding a writeable DC for domain 'ad.my.dom' Found DC vdcsv1.ad.my.dom Password for [MYDOM\administrator]: workgroup is MYDOM realm is ad.my.dom Adding

Hello, If when joining the computer in the domain and at the moment who received the request was the "second DC", it should automatically synchronize with the "first DC", correct? On Wed, Apr 17, 2019 at 5:00 PM Elias Pereira <empbilly at gmail.com> wrote: > Hi, > > Everything seems to be ok, but the following is happening now. > > When I put a new

I've cleared all DNS records (indeed, they were still there). I'm not sure if that was the issue, cause I've discovered that the real problem is related to insufficient Administrator rights. I was able to join that DC to domain using credentials of my second user (member of domain admins group). The first one had to get out from Domain admins. Can this be related to fixing the

Hello list, I tried to set up a folder on our fileserver domain member, so I can deploy software for users' machines, but is not working. If I put the software inside "netlogon" it installs correctly. \\172.16.1.7\storage\programs Auth Users - read & execute, list folder contents, read and write Do I need other permissions? -- Elias Pereira

Hey Luke, thanks for the help!!! It's working now!!! God bless you and your family!! :D Remember that GPOs need to run as the context of either the computer or the > user. Computers typically do not have access to many folders on a file > server, even as "Everyone". That is why the NETLOGON folder works. > > If you're deploying as a USER configuration, then it

Hello Morillo, I have reviewed the steps described again. In fact, I had already done this several times. :D Even so, it does not map. The shared folder is mapped, but the printer is not. On windows 7 it works correctly. On Tue, Mar 3, 2020 at 12:33 PM MORILLO Jordi via samba < samba at lists.samba.org> wrote: > Hello Elias, > > Printing is working well for us. > Carrefully

Which GPO? Computer or User Configuration? Remember that GPOs need to run as the context of either the computer or the user. Computers typically do not have access to many folders on a file server, even as "Everyone". That is why the NETLOGON folder works. If you're deploying as a USER configuration, then it should run as the context of the user, meaning the Everyone permission