similar to: [Patches] AD Database corruption after upgrade from <= 4.6 to 4.7 (bug #13228)

Hi Stefan I am also one of the Sernet customer. Can you guide me how to run the patch to fix the bug. I am running 2 DC's Sernet Samba 4.7.4 with 2 RODC's running Sernet Samba 4.7.4. Whenever I run samba-tool drs replicate --fix --yes command on the DC it shows the below errors which cannot be fixed: Failed to remove deleted DN attribute fromServer : (65, "objectclass_attrs: at

Hi Harsh, sorry, but you're problem is not related to my patches. This may need further investigation. metze Am 31.01.2018 um 12:45 schrieb Harsh Kukreja: > Hi Stefan > > I am also one of the Sernet customer. Can you guide me how to run the patch > to fix the bug. > > I am running 2 DC's Sernet Samba 4.7.4 with 2 RODC's running Sernet Samba > 4.7.4. Whenever

Hi I am running samba-tool dbcheck --cross-ncs --fix --yes command on my DC running 4.7.4 to remove the Deleted and Stale records which is failing Target GUID points at deleted DN '<GUID=3484ea7a-da88-4269-9b32-55a9c7faabf6>;CN=NTDS

Hi Denis Thanks for your response without your crystal ball. I have increased the log level =9 dns:0 on both the servers. It replicates successfully by manually running the command samba-tool drs replicate SERVER2 SERVER1 dc=iumnet,dc=edu,dc=na --full-sync but it is still failing when I check from the samba-tool drs showrepl Also I run samba-tool dbcheck --cross-ncs --fix on both the servers

On Tue, 22 Jan 2019, Rowland Penny via samba wrote: > On Tue, 22 Jan 2019 14:20:21 -0500 (EST) > "Vincent S. Cojot via samba" <samba at lists.samba.org> wrote: > >> >> Hi All, >> >> On my two-DC setup (dc00 and dc01 - Used to be a 4-Dc setup but 02 >> and 03 are gone), I've noticed the following errors which I am unable >> to

Hi All, On my two-DC setup (dc00 and dc01 - Used to be a 4-Dc setup but 02 and 03 are gone), I've noticed the following errors which I am unable to fix.. Any hints? * Basic dbcheck is clean. [root at dc00 ~]# samba-tool dbcheck Checking 327 objects Checked 327 objects (0 errors) * Cross-NCS shows two errors related to a de-comissionned DC (dc02) and cannot auto-fix this.. How do I fix

Hi I have tried using FQDN for DC1 and DC2 but still it is failing.Please assist to fix samba-tool drs replicate iumdcdp01.iumnet.edu.na iumsvrpdc DC=iumnet,DC=edu,DC=na --sync-forced -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9

Hi Denis Thanks for your advise I will not use these wordings here. Please check the result below when I run the command on the DC-1 when DC-2 is off or on smbclient -k //IUMSVRAPP01/Pastel12 -d 9 INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9 quota: 9

Hi Denis & Rowland Thanks for the suggestion to trim the smb.conf after which the DC-1 is connecting to the Windows Server 2008 shared folder smbclient -k //IUMSVRAPP01/Pastel12 -d 9 and DC-2 is also connecting after using the DNS name of the Windows server. *You'd better switch your DNS to Bind-DLZ. Internal DNS is not that good for larger site (looking at your DNS domain name, I guess

Hi I have two Samba 4 DC’s as below server-1 with all FSMO roles running Samba 4.6.12 on Ubuntu 12.04 server-2 joined to server-1 as a DC running Samba 4.7.4 Ubuntu 16.04 The problem is when I share files from my Windows 2008 file sharing server which shows it is logged on to Server-2 DC and the client PC which logs on to the server-1 DC cannot access the shared folder and gives an error Logon

Hi James Thanks for your response. hots -t A iumsvrpdc (use it's fqdn as well) I have verified it with the FQDN which says that the record iumsvrpdc.iumnet.edu.na exists Search for 'iumsvrpdc' objectGUID ldbsearch -H /usr/local/samba/private/sam.ldb '(invocationId=*)' --cross-ncs objectguid : it shows 2 records found # record 1 dn: CN=NTDS

Hi I have created a new DC on the Ubuntu 16.04 with the latest sernet samba 4.7.0 package. After joining to the PDC running 4.6.8 package I backed up the idmap.ldb file and copied to the new DC. When I run the samba-tool ntacl sysvolreset command on the new DC to replicate GID Mappings it fails with the below error: open: error=2 (No such file or directory) ERROR(runtime): uncaught exception -

Hi Denis I have upgraded my samba DC-1 from 4.6.12 to 4.7.4 which has solved the replication issues between DC-1 and DC-2. Now both the DC's are running on 4.7.4. Like Rowland said previously, you should remove all RODC that have been installed prior to Samba 4.7. There are many fixes that have been added since 4.6. Before I remove my RODC's I like to clear out few doubts: 1. Instead of

Hi The DRS sync between two Domain Controllers connected on one network is failing. I have enabled the log level 9. samba-tool drs replicate 172.16.10.5 iumsvrpdc DC=iumnet,DC=edu,DC=na --full-sync -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9

The upgrade shouldn't have touched the Samba database, just the binaries etc, so check the smb.conf file and recreate it if you cannot find it, or if it is incorrect. The smb.conf still exists [global] workgroup = IUMNET realm = IUMNET.EDU.NA netbios name = IUMDCDP01 server role = active directory domain controller dns forwarder = 172.16.10.254

Hi I am trying to remove a dead offline domain using the below command which is failing samba-tool domain demote --remove-other-dead-server=IUMONG-RODC -UAdministrator ERROR: Demote failed: DemoteException: IUMONG-RODC is not an AD DC in iumnet.edu.na A transaction is still active in ldb context [0x2bf15b0] on tdb:///var/lib/samba/private/sam.ldb IUMONG-RODC domain is still visible under domain

Hi I am running Server-1 Samba4 AD 4.6.10 with an additional Server-2 Samba4 AD 4.7.2 The Inbound replication on the Server-1 is failing with the error below: DC=iumnet,DC=edu,DC=na Default-First-Site-Name\Server-2 via RPC DSA object GUID: 27182378-a9c7-451e-bb95-7b2172a5f311 Last attempt @ Tue Jan 9 12:55:59 2018 WAST failed, result 58

Hi Rowland Thanks for the link https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage It should fix the Firewall authentication problem. I like to find out if I can rename the Domain name of the DC when I move it to the new DC like currently it is IUMNET.EDU.NA <http://iumnet.edu.na/> but my GApps domain name is IUM.EDU.NA <http://ium.edu.na/> and I like to use the same on my new

Hi Rowland The samba-tool command is not working please see the error below: root at iumdcdp01:/home/administrator# samba-tool ERROR(<type 'exceptions.ValueError'>): uncaught exception - bad marshal data (unknown type code) File "/usr/bin/samba-tool", line 46, in <module> retval = cmd._run("samba-tool", subcommand, *args) File

On 19/12/16 17:57, Miguel medalha wrote: >>> No, I don't, because this is a loopback and I only want certain >>> users on these computers to have the screensaver and lock disabled. If I did that it would apply to everyone. > No, it wouldn't apply to everyone. As of April this year, according to Microsoft, all policies must have "Authenticated Users" with