similar to: Multiple versions of S.O.

On Thu, 17 May 2018 17:37:28 -0300 Carlos <carlos.hollow at gmail.com> wrote: > Matriz site Filial site > DC1 -------(OPENVPN)-------- DC3 > | > | > DC2 > > DC1 -> DC2 = OK > DC1 -> DC3 = OK > > DC2 -> DC1 = OK > DC2 -> DC3 = NO > > DC3 -> DC1 = OK > DC3 -> DC2 =

> OK, make sure that the two idmap.ldb files match and then run > 'samba-tool ntacl sysvolreset' on both machines and see if this cured > this problem. I did: root at dc1:~$ service sernet-samba-ad stop root at dc2:~$ service sernet-samba-ad stop root at dc2:~$ mv /var/lib/samba/private/idmap.ldb /root/idmap.ldb.bak root at dc1:~$ scp /var/lib/samba/private/idmap.ldb

On Thu, 17 May 2018 18:01:48 -0300 Carlos <carlos.hollow at gmail.com> wrote: > I dont have DC4... > But, i shutdown DC1(manutenção) > i created user in DC2, this user doesn't exist in DC3, never > replication... is not problem? > > Regards... > > On 17-05-2018 17:49, Rowland Penny wrote: > > On Thu, 17 May 2018 17:37:28 -0300 > > Carlos

On Thu, 17 May 2018 17:19:17 -0300 Carlos via samba <samba at lists.samba.org> wrote: > I understand, but dont replication between sites, is my problem.... > > Regards; > Lets start by confirming if this is your setup: Matriz site Filail DC1 --------------- DC3 | | | | DC2

Hi people I have a questions, i have 3 domain controllers, all with samba dc2 with dc1 drs is perfect dc3 with dc1 drs is perfect but dc2 with dc3 i have errors: WERR_DS_DRA_ACCESS_DENIED in CN=Configuration, DC =DomainDNsZonesm anda DC= ForestDnsZones have you any idea what can do? Sorry for my english, i am from Argentine.

Hello，I'm using samba ad dc about a year. I have 2 DCs, One is DC1 with FSMO role. And another is DC2. there's a error in DC1 when i use dbcheck tool. And samba-tool dbcheck --cross-ncs--fix can't fix that. And I made a big mistake ! In DC2 I use "tdbbackup -s .bak /var/lib/samba/private/sam.ldb" create a bak file. and using that bak file replace the sam.ldb

On Thu, 17 May 2018 20:24:06 -0300 Carlos <carlos.hollow at gmail.com> wrote: > Thank  very much you for the explanations!! > I'm sorry for one more question... > What is wrong in DCs in mode " full mesh topology" ? I don't > understand why not... Nothing, except that you are using an openvpn link between sites (not that this really matters, it would be the

Andrew Bartlett, samba Think you for your reply. I know the process to resovle the problem now. first ,I need transferring and Seizing FSMO Roles to DC2 and then demoting DC1. After that ,I join the DC1 from DC2 with the fsmo role to the domain again. Right? Is there any other method that I can edit the sam.ldb file directly and add the dsServiceName entry of the DC1?

Hi Mathias, thanks for the hint. My interpretation so far was that complex involves managing any data in addition to what the AD is supposed to manage anyway. Anyway, I tried to follow your advice, but not to success so far. On Ubuntu 16.04, bind is running under the user bind instead of root, and app armor is active. I figured out how to change both and bind starts successfully and answers

Hi Mathias, Once more: Thanks for your support and guidance! Actually I reconfigured only the first DC initially, assuming that the second join asks me as does the initial one - wrong assumption. My take is the tools could be improved, e.g. : join of DC2 adds DNS record of DC2 to DC1 and verifies it is replicated before claiming success... looking in all the tools and logs for errors is tedious at

Hello Rowland, Louis and Min, sorry for late reply, I was really busy in the past days. As Min already wrote, I have made the same experience unfortunately. With Rowland's suggested settings it didn't solve the problem. I'm on another issue at the moment and didn't find time to check the rsync/unison process on my own, but I'll promise I'll dive into it as soon as I can.

I installed two virtual machines with Samba as domain controllers for the same domain. I was struggling with network and DNS configuration initially, maybe my problem is related. DC1 starts up ok, the last line of the log reads STATUS=daemon 'samba' finished starting up and ready to serve connections DC2 starts with plenty of lines [2016/05/15 22:00:32.744910, 0]

Hi, I have 2 domain controllers with samba4, and i realized i have some missing spns for the second domain controller: > samba-tool spn list dc1$ dc1$ User CN=dc1,OU=Domain Controllers,DC=test,DC=pt has the following servicePrincipalName: ?? ? HOST/dc1.test.pt ?? ? HOST/dc1.test.pt/test[1] ?? ? ldap/dc1.test.pt/test[1] ?? ? GC/dc1.test.pt/test.pt[2] ?? ?

> Obviously there is something wrong with the dns updates on DC2. Any > ideas? > > Tom > >The problem is (as far as I understand it), you cannot write to an >RODC, it forwards write actions to a writeable DC, which then replicates >them back. >From the above, it is timing out, is there a firewall or similar in the >way ? Can you ping a DC from the RODC ? >

On Sat, 20 Oct 2018 13:58:15 +0200 (CEST) tomict via samba <samba at lists.samba.org> wrote: > > > Just one thought, where does the nameserver on DC2 point ? > > Is it to DC1 ? > > or itself, DC2 ? > > > If it is pointing to itself, try pointing it at DC1 > > > Rowland > > The Nameserver on DC2 points to the ip address of DC1 > > Tom

Hi! I have 2 DC, now add one more DC, but all dcs dont view between they. New DC is "DC2" DC1 - vlan10 -> OK to DC3(Connectad by openvpn) DC1 -> vlan10 -> OK to DC2(vlan50) DC2-> vlan50 -> OK to DC1(vlan10) DC2-> Openvpn -> Dont "see" DC3 DC3 -> Openvpn -> OK to DC1(vlan10) DC3 -> Openvpn -> Dont "view" DC2(vlan50) All version

Hi! Thanks for answer. But, i allowed all ports in my firewall... I tested, shutdown  my DC1 DC2 dont comunication with DC3 I create user in DC2, dont replication with DC3... I waited more in 20 minutes Why ?? Regards; On 17-05-2018 12:01, lingpanda101 wrote: > On 5/17/2018 10:30 AM, Carlos via samba wrote: >> Hi! >> >> I have 2 DC, now add one more DC, but all dcs

Hi! In Option "Inter-Site Transports", i have only  one the name "DEFAULTIPSITELINK" , in properties Sites in this link: Matriz Filial Matriz -> site with DC1 and DC2 Filail ->  site With DC3 Regards; On 17-05-2018 13:12, lingpanda101 wrote: > On 5/17/2018 12:07 PM, Carlos wrote: >> Hi! >> >> Thanks for answer. >> >> But, i allowed

I have the following tinc setup: client -- tinc DC1 -- tinc DC2 -- 10.1.2.0/24 subnet It generally works well, however, there is one issue I'm not able to solve: *sometimes*, connectivity to *some* destinations does not work for the first few seconds. To demonstrate: $ mongo mongo.example.com:27017 MongoDB shell version: 3.2.12 connecting to: mongo.example.com:27017/test

On 5/17/2018 3:58 PM, Carlos wrote: > > Hi! > > In "NTDS settings" created new connection for: > > DC2 ->DC3 > > DC3 -> DC2 > > All OK, > > I tested with option > > kccsrv:samba_kcc=No > > is ok too. > > But in my DC2, a received one erro: > > May 17 16:54:44 dc2 samba[10421]: [2018/05/17 16:54:44.543336,  0] >