similar to: Upgrading Samba 4 server [SEC=UNOFFICIAL]

UNOFFICIAL I am running several small networks with Samba 4 acting as AD/DC. I want to upgrade the OS and Samba on the older servers. But I understand that to upgrade the OS, I need to do a new install (at least to get from Centos 6 to 7). I don't have the luxury of new hardware, so creating a secondary DC and taking over from PDC is not an option. These are small networks so recreating the

UNOFFICIAL Hi Rowland, How can I get these ldf files? I have now setup a lab-domain so I can try this out without fear of stuffing anything up. I believe that I now have finally completed upgrading from 2003 server to Samba 4 (fingers crossed). Thanks so much to everyone for your help and patience. Cheers Russell -----Original Message----- From: Rowland penny [mailto:rpenny at samba.org]

Hi Russell, Ah, right, of course you can't create the msDS-PasswordSettingsContainer object on a 2003 schema. The code doesn't actually care what type of object the Password Settings Container is as long as it exists. So the simplest short-term kludge to get back to a working AD would be to create the PSO container as an object that does exist in your schema, e.g. ldbadd -H

On 28/05/2019 08:41, Thamm, Russell via samba wrote: > UNOFFICIAL What do you mean 'UNOFFICIAL' ? > Hi, > > I'm trying to build samba-latest on CentOS 7. The PC is not online, so I have to download everything manually. > Most of the prerequisites are on the CentOS Everything ISO so I don't have to download a lot. If you mean

On Mon, 2019-06-24 at 07:12 +0000, Thamm, Russell via samba wrote: > UNOFFICIAL > Hi > > Today I demoted the temporary DC (Julius) on my network. > > The demotion failed. > > Failed to confirm we are not an RODC ... cannot find attribute msDS- > isRODC > > So I shutdown Julius and forced the demotion. > > The domain seems stable until I tried LDAP

UNOFFICIAL Thanks Tim, I was just wondering if my mistake was raising the functional-level. This confirms it. This apparently also broke backup. I cannot create the container, because the current schema (2003) doesn't support msDS-PasswordSettingsContainer. It seems impossible (and dangerous) to update the schema. I was given a reference to a thread about updating the schema but - the

UNOFFICIAL Firstly thanks for the help with my previous problem building SAMBA. The UNOFFICIAL in the subject heading is added automatically by our email system. I'm getting the following error when trying to join a 2003 server domain. ... Adding CN=TITUS,OU=Domain Controllers,DC=SSUNIT050,DC=local Adding

UNOFFICIAL Hi, I have a SAMBA4 box (CentOS 6.5, SAMBA 4.1.7) that joined a 2003 domain and I have transferred (not seized) all FSMO roles to the samba box. I demoted the 2003 DC (had to forceremoval). The Samba box now is the sole DC and DNS server on the network. I followed the instructions in https://lists.samba.org/archive/samba-technical/2014-February/097703.html for repairing the domain

UNOFFICIAL Hi Today I demoted the temporary DC (Julius) on my network. The demotion failed. Failed to confirm we are not an RODC ... cannot find attribute msDS-isRODC So I shutdown Julius and forced the demotion. The domain seems stable until I tried LDAP authentication which fails. The samba log says: Error 32 determining PSOs in system. I can't seem to find anything on this error.

UNOFFICIAL Hi, I'm trying to build samba-latest on CentOS 7. The PC is not online, so I have to download everything manually. Most of the prerequisites are on the CentOS Everything ISO so I don't have to download a lot. I installed all the documented dependencies and configure complained about python3. So I downloaded and installed python36-libs-3.6.8-1.el7.x86_64.rpm

UNOFFICIAL Hi, I am running an old SAMBA DC (Bilbo) that I want to upgrade. I installed the latest version of SAMBA 4 on an old PC (jimbo) and joined the domain. I intend to transfer the FSMO roles, upgrade Bilbo and transfer the roles back. I have transferred all roles except domaindns and forestdns. Jimbo says that these roles have no owner but Bilbo thinks it is the owner. Is there some way

UNOFFICIAL Hi, I currently have two DCs, one temporary and one permanent. Both running Samba 4.10.4 on Centos 7 I tried to transfer the roles from the temporary (julius) to the permanent (titus). rid, schema, pdc, naming & infrastructure transferred without error. However when I tried to transfer the domaindns role (-U administrator), I got the old Module 'samba' has no attribute

UNCLASSIFIED Hi Andrew and Roland, I originally installed samba-4.1.7 on CentOS 6.5. I successfully joined the domain. I intended to take over from the 2003 server but because the domain was being heavily used, I delayed seizing the roles. Now I really, really want to replace the 2003 server. The network is currently not in use and I want to complete the job while I have an opportunity. If I

Hm really. Then you should have a look also at your krb5.conf file. Section : [libdefaults] default_realm = Best regards, Louis > -----Oorspronkelijk bericht----- > Van: Thamm, Russell [mailto:Russell.Thamm at dst.defence.gov.au] > Verzonden: donderdag 13 juni 2019 9:35 > Aan: samba at lists.samba.org > CC: L.P.H. van Belle > Onderwerp: RE: [Samba] Problem

UNOFFICIAL Hi, I have setup a SAMBA 4 box as a DC on a 2003 server standalone domain. I intend to take over as the PDC and retire the 2003 server. I am using internal DNS. If I modify/add a DNS A entry on the 2003 server, it is propagated to SAMBA 4 very quickly. But the reverse never happens. Executing samba-dnsupdate --verbose indicates "No DNS updates needed" and shows no errors.

I tried the backports tip from https://bugzilla.samba.org/show_bug.cgi?id=13754 and samba 4.10.1 this works... compile finishes without an error... -----Ursprüngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Dirk Laurenz via samba Gesendet: Dienstag, 2. April 2019 23:32 An: samba at lists.samba.org Cc: 'Norbert Hanke' <norbert.hanke at

UNCLASSIFIED I built another PC using Centos7 and samba 4.1.7. This got further but gave a segmentation fault. On successive runs, I got: Your filesystem or build does not support posix ACLs, which s3f3 requires. (This is BS) So I tried the next version that I had downloaded 4.3.3. With this I was able to successfully join the domain. I am thinking to: 1) seize roles with samba 3.3 server 2)

UNCLASSIFIED Hi Louis, I will make the change. This is what SAMBA gave me when I joined the domain. Cheers Russell -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of L.P.H. van Belle via samba Sent: Wednesday, 12 June, 2019 6:33 p.m. To: samba at lists.samba.org Subject: Re: [Samba] Problem joining domain [SEC=UNCLASSIFIED] I migth be picky in

UNCLASSIFIED Sorry to be a bloody pest, but I've hit a new problem. I shutdown the 2003 server & seized the roles. I then upgraded to samba 4.7.12. and demoted the 2003 server. Everything seemed to be working OK for several days, so I upgraded to 4.8.12. All seems OK except samba-tool dbcheck gives an error [root at julius samba-4.8.12]# samba-tool dbcheck -v --cross-ncs

Hi Dirk. Ok, now im ready with the debian packages for 4.10, this could make your life more easy. I've not tested this but should work, you could try this. Install a debian 9 server as minimal as possible, so choose expert install, only install ssh server, nothing else. Now in this order, start building the armhf samba 4.10 packages This should be easy todo now since i've match the