similar to: DNS replication only working one way

I'm sorry Rowland, I meant to mention in my initial email that I am running 4.7.3. and other replication (like AD object replication) is working in both directions. it is just DNS replication that is only working one way. On Tue, Dec 12, 2017 at 2:15 PM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Tue, 12 Dec 2017 14:00:32 -0600 > Taylor Hammerling via samba

I ran thru the wikipage you linked to, and the results were as they should be # record 1 dn: CN=NTDS Settings,CN=DC1,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tcsbasys,DC=com objectGUID: 0d5ebcac-88d7-44fb-a830-ec3eacb6757f # record 2 dn: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=tcsbasys,DC=com objectGUID:

Hello, We are currently testing S4rc5 for an upcoming S3 to S4 migration. I am able to duplicate this issue with both classicupgrade and a new provision (both cases using internal DNS). I am able to join a 2008R2 system to the domain and promote it to a DC, however I am unable to demote it. The problem appears to be that the 2008R2 server fails replicating to the S4 DC. The specific error that I

Hello everyone, First time with Samba 4. I've got it running mostly (with Windows 7 clients, everything works like a charm.), but I-m struggling with an issue that is driving me nuts (spent countless hours trying out stuff and googleing without luck): When users log in from Win XP Pro terminals, and are forced to change initially assigned passwords, they get an error (1728: error in RCP

Hello. I've got a network of FreeBSD servers which traditionally hosted a classic domain. I upgraded some months ago, removing the old PDC and BDC and migrating to an AD DC controller in a jail. This is working fine with Samba 4.4.13. Now I'm trying to add a second DC, so I created a new jail on another physical server and went on with the setup, following: >

Apologies, despite that error, the permissions now look good on the sysvol folder. Is there anything I need to do moving forward to keep my DCs idmap.ldbs in sync? or is this a one time thing? On Fri, Dec 15, 2017 at 1:16 PM, Taylor Hammerling <thammerling at tcsbasys.com > wrote: > ok, I followed the directions on that wikipage, made a hot backup, copied > the hot backup over to

On 10/12/2017 3:17 AM, mj wrote: > Hi all, James, > > After following James' suggestions fixing the several dbcheck errors, > and having observed things for a few days, I'd like to update this > issue, and hope for some new input again. :-) > > Summary: three DCs, all three running Version > 4.5.10-SerNet-Debian-16.wheezy, samba-tool dbcheck --cross-ncs reports

Hi, Some time back I had written to the list about integrating Cisco ISE and facing errors with RPC login. When we actually integrated using ISE 2.4.0357 we noticed that Kerberos authentication is working like a charm. But MS-RPC authentication throws error. From the samba logs, we noticed that ISE workstation is able to negotiate the RPC ports switch to higher Dynamic RPC ports,

Interesting... How do I go about getting them/keeping them in sync? On Fri, Dec 15, 2017 at 11:47 AM, Rowland Penny via samba < samba at lists.samba.org> wrote: > On Fri, 15 Dec 2017 11:09:38 -0600 > Taylor Hammerling via samba <samba at lists.samba.org> wrote: > > > This isn't necessarily an issue (I don't think) but more so a > > curiosity. > >

Hi Andrew. Any idea to solve this ? Thanks ----- Mail original ----- De: "Gaetan SLONGO via samba" <samba at lists.samba.org> À: "Andrew Bartlett" <abartlet at samba.org> Cc: samba at lists.samba.org Envoyé: Jeudi 7 Décembre 2017 12:16:27 Objet : Re: [Samba] Replication issue (maybe due to 4.7.0 bug?) Hi Andrew, Thank you for your answer.

On Sun, 2 Apr 2017 20:37:00 +0200 Karl Heinz Wichmann <wichmann-karl at web.de> wrote: > Hallo Rowland > > At the moment we use the internal samba dns. > > I have startet dcpromo and we get every second following message: > > [2017/04/02 20:26:29.712194, 2] > ../source4/rpc_server/drsuapi/getncchanges.c:1483(getncchanges_collect_objects) >

Daniel, I could kiss you :D I am using the default SSL certs in samba. I tried connecting to the new DC using it's FQDN instead of it's IP, and BAM, it connected just fine. Couldn't really tell you why, but as long as I can access it I'm happy! On Tue, Dec 12, 2017 at 11:20 AM, Daniel Carrasco <d.carrasco at i2tic.com> wrote: > Are you using the default ssl certs in

I found this page https://bugzilla.samba.org/show_bug.cgi?id=12807 which seemed to have someone experiencing the same issue I am. I tried adding "allow dcerpc auth level connect:dnsserver = yes" to my smb.conf, rebooted the server, but still I get the an access denied message in windows. However, what is logged in the log.samba files has changed since adding this option to my smb.conf.

Are you using the default ssl certs in samba?. I had a similar issue, and after create my own certificate with all common names used on my domain (for example domain.com, dc1.domain.com and dc2.domain.com), I'm able to manage the dns using RSAT using that named. With ip address still failing. Greetings!! El 12 dic. 2017 6:13 p. m., "Taylor Hammerling via samba" < samba at

Hi Andrew, Thank you for your answer. Don't have much more informations with these logs : ==> /var/log/samba/log.samba <== [2017/12/07 12:10:58.989255, 2] ../source4/rpc_server/drsuapi/getncchanges.c:1731(getncchanges_collect_objects) ../source4/rpc_server/drsuapi/getncchanges.c:1731: getncchanges on DC=ads,DC=dom,DC=be using filter (uSNChanged>=1) [2017/12/07

ok, I followed the directions on that wikipage, made a hot backup, copied the hot backup over to the new DC, renamed the hot backup (thus replacing the existing idmap.ldb) and ran "samba-tool ntacl sysvolreset" and it spat out the following after a minute or 2 of thinking... root at dc1 samba/private# samba-tool ntacl sysvolreset open: error=2 (No such file or directory) ERROR(runtime):

On 12/12/2017 11:24 AM, Taylor Hammerling via samba wrote: > I found this page https://bugzilla.samba.org/show_bug.cgi?id=12807 which > seemed to have someone experiencing the same issue I am. > I tried adding "allow dcerpc auth level connect:dnsserver = yes" to my > smb.conf, rebooted the server, but still I get the an access denied message > in windows. > However,

On Tue, 12 Dec 2017 11:56:08 -0600 Taylor Hammerling via samba <samba at lists.samba.org> wrote: > I am attempting to transfer the all FSMO roles from an old DC to our > new DC. Both DCs are running Samba 4.7.3. I have transferred the > Schma, Infrastructure, RID, PDC and Naming roles without issue. > > unfortunately, the forestdns and domaindns roles are giving me grief.

Hi all, James, After following James' suggestions fixing the several dbcheck errors, and having observed things for a few days, I'd like to update this issue, and hope for some new input again. :-) Summary: three DCs, all three running Version 4.5.10-SerNet-Debian-16.wheezy, samba-tool dbcheck --cross-ncs reports no errors, except for two (supposedly innocent) dangling forward links

I am attempting to add a Windows 2008R2 DC to my S4 domain... and it always stalls out attempting to replicate CN=Configuration object X of Y. So I have been digging, digging, digging, and I found this in the log file of the DC the 2008R2 box is attempting to replicate from - Feb 1 16:52:42 larkin28 samba[18650]: ../source4/rpc_server/drsuapi/getncchanges.c:1961: DsGetNCChanges 2nd