similar to: failure joining a domain as a DC

On Thu, 21 Dec 2017 13:16:05 -0500 (EST) Daniel McFeeters <danielj.mcfeeters at lcdhd.org> wrote: > I thought I had posted already, but my first message may have been > confusing. Here is the output of the domain join: > > $ sudo samba-tool domain join redacted.domain.local DC > -U"REDACTED\my.domain.admin" --dns-backend=SAMBA_INTERNAL Finding a > writeable DC

Hi, After reading wiki documentation about join I have tested to join a second dc, but with problems. I need to add a second controller to our AD, and then upgrade existing server (4.4.5) and I have tried to join a new DC 4.10.7 to 4.4.5 server but I receive join errors, attached output wit and without debug: I have executed samba-tool dbcheck --cross-ncs all seems OK I have made a test

I thought I had posted already, but my first message may have been confusing. Here is the output of the domain join: $ sudo samba-tool domain join redacted.domain.local DC -U"REDACTED\my.domain.admin" --dns-backend=SAMBA_INTERNAL Finding a writeable DC for domain 'redacted.domain.local' Found DC samba4dom.redacted.domain.local Password for [REDACTED\my.domain.admin]: NO DNS

Perhaps I'm rooting around at a lower level than I should be, and somewhat beyond what I can understand, but here is a bit of info I dug up. It might be helpful? The GUID in the first search matches the one referred to in the error message. $ sudo ldbsearch -H /var/lib/samba/private/sam.ldb.d/DC\=DOMAINDNSZONES\,DC\=REDACTED\,DC\=DOMAIN\,DC\=LOCAL.ldb "(DC=DomainDnsZones)" # record

I have a Samba4 Domain Controller, which we have run in production since ~2009 (early alpha). It's had a few issues over the years which we've managed to recover from. I'm trying to join a second Samba4 DC to the domain, but having trouble when I issue the join. I have run dbcheck on the existing DC, which found and fixed some errors. There are still about 60+ errors like this: #

OK, we're getting closer here I think. I repeated with -d 2 without much help. Here is -d 3, which may point us in the right direction. As I suspected, it seems to point to some corruption in the DNS still, perhaps? The key line seems to be here: Missing parent while attempting to apply records: No parent with GUID 60e25dda-6d35-4aab-bfa5-6137cb271e27 found for object remotely known as

----- On May 24, 2020, at 11:30 PM, samba samba at lists.samba.org wrote: > On Sun, 2020-05-24 at 23:01 -0400, Rich Webb via samba wrote: >> Hello, >> >> I'm attempting to join a new samba 4 server version 4.12.3 to an >> existing samba 4 domain running on Zentyal 3.2 (samba version >> 4.1.7). >> >> I'm getting the error in the subject line:

On Mon, 25 Mar 2019 15:12:16 +0100 franta via samba <samba at lists.samba.org> wrote: > Hi team, > I have Samba (4.9.5) AD DC, and when trying to add second DC, join > fail: > > # samba-tool domain join zamecek.home DC > -U"SSUPS-ZAMECEK\administrator" --option='idmap_ldb:use rfc2307 = > yes' --dns-backend=BIND9_DLZ Finding a writeable DC for domain

Hi, That failure is a little odd. It's replicated all the DB objects, but is failing trying to commit the transaction. It looks like the error is happening trying to get the objectClass for the Administrator user. The weird thing is it should have already successfully passed this check once when it first received the object. You could try the following: 1. If you run 'samba-tool

On 25/03/15 16:50, VIKAS wrote: > Hi Team, > > Samba Version = 4.2 > > Bind = 9.10 with dlz > > > Not able to to view replication.(samba-tool drs showrepl) > > > [root at dc2]# samba-tool drs showrepl (want to highlight the name which is > using to connect) > > ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to >

Trying to add a new samba 4 domain controller to an existing Windows 2003 domain. There are two existing domain controllers: dc1.home.aaronson.com and dc2.home.aaronson.com. As you can see below, samba 4 dies during the join. I am stumped. Dcdiag throws no errors on the existing controllers. Any ideas/ ubuntu at sulu:/usr/local/samba# sudo bin/samba-tool domain join home.aaronson.com

Hi team, I have Samba (4.9.5) AD DC, and when trying to add second DC, join fail: # samba-tool domain join zamecek.home DC -U"SSUPS-ZAMECEK\administrator" --option='idmap_ldb:use rfc2307 = yes' --dns-backend=BIND9_DLZ Finding a writeable DC for domain 'zamecek.home' Found DC dc1.zamecek.home Password for [SSUPS-ZAMECEK\administrator]: workgroup is SSUPS-ZAMECEK realm is

Hi Team, Samba Version = 4.2 Bind = 9.10 with dlz Not able to to view replication.(samba-tool drs showrepl) [root at dc2]# samba-tool drs showrepl (want to highlight the name which is using to connect) ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to *dc2.ik.lan.mum* failed - drsException: DRS connection to dc2.ik.lan.mum failed: (-1073741772, 'The

Thank you for the quick response: root at DC2:~# rm -rf /etc/samba/smb.conf root at dc2:~# ll /etc/samba/ [The lmhosts file I created trying to troubleshoot: touch /etc/samba/lmhosts. It hasn't been touched.] total 52 drwxr-xr-x 4 root root 4096 May 2 12:57 ./ drwxr-xr-x 135 root root 12288 May 2 11:05 ../ drwxr-xr-x 2 root root 4096 May 2 09:56 etc/ -rw-r--r-- 1 root root

Hi Denis, yes, the problem initiated after changing the primary group of all my 11034 users. I changed the primary group to different groups. This caused that now every user is member of the LDAP object "Domain users" ldapsearch -LLL -x -h dc1 -x -b "cn=domain users,cn=users,dc=example,dc=net" member | grep ^member: | wc -l 11034 After this action the replication

hi again, now the join finished but ... i have a high CPU load caused by a samba-process. Samba is consuming 100% of one CPU and the replication fails. Is my AD to large???? root at dc2:# samba-tool drs showrepl Default-First-Site-Name\DC2 DSA Options: 0x00000001 DSA object GUID: e9d31c7e-acb3-4473-823a-39b06ab9fa95 DSA invocationId: 49a80da8-975f-49ef-834b-224b2bbf0805 ==== INBOUND

On Sat, 26 Aug 2017 11:28:00 +0400 HB via samba <samba at lists.samba.org> wrote: > > -----Message d'origine----- > > De : samba [mailto:samba-bounces at lists.samba.org] De la part de > > Rowland Penny via samba > > Envoyé : lundi 21 août 2017 16:34 > > À : samba at lists.samba.org > > Objet : Re: [Samba] DC Upgrade from 4.1.7 to 4.6.7 > >

Hi, the only thing i did, was to assign every user to a ohter group. After this i changed the primary group to this new groups and the samba-server itself assigned the users to the group "domain users"automatically (attribute: member). Now i try to revert this and to rechange the primary group to 513. So i can have again a Domain users object with small number of members. Thanx

Dne 2019-03-25 16:02, Rowland Penny via samba napsal: > On Mon, 25 Mar 2019 15:12:16 +0100 > franta via samba <samba at lists.samba.org> wrote: > >> Hi team, >> I have Samba (4.9.5) AD DC, and when trying to add second DC, join >> fail: >> >> # samba-tool domain join zamecek.home DC >> -U"SSUPS-ZAMECEK\administrator"

Hi guys, i have some issue with our company DC (samba 4.7.12 on a Debain 9 machine) and work ok from about 3 years. Now we tried to join another DC for redundancy but we receive the following error: Provision OK for domain DN DC=example,DC=com Starting replication Schema-DN[CN=Schema,CN=Configuration,DC=example,DC=com] objects[402/1550] linked_values[0/0]