similar to: migrating NT-style domain SID-error

I build new version of talloc-2.1.6 (build from external tarball) and samba-4.3.6. But if I provision domain by command samba-tool domain provision --realm=test.alt --domain test --adminpass='Pa$$word' --dns-backend=SAMBA_INTERNAL --server-role=dc --use-rfc2307 --use-xattrs=yes I got error: Fixing provision GUIDs ERROR(runtime): uncaught exception - pytalloc_reference_ex() called for

It's amazing how long Samba just keeps running even when apparently everything's broken. In preparation of finally upgrading our DCs to 41.0, I ran dbcheck on all of them, resulting in: graz-dc-sem: > Checking 3861 objects > Error: governsID CN=ucsUser,CN=Schema,CN=Configuration,DC=ad,DC=tao,DC=at on 1.3.6.1.4.1.19414.3.2.2 already exists as an attributeId or governsId > Error:

Hi Rowland, after we solved the puzzle today here is what we found: The Samba PDC with tdbsam backend was installed a loooooong time ago. Many updates and distributions later, the Samba PDC was still running with with the same databases and the same smb.conf. The only thing that someone sometime changed was the hostname and the NetBIOS-Name in smb.conf. BUT in secrets.tdb was still the old name.

Hello, we have 2 DC with Sernet Samba-packages 4.9.4 if we do a "samba-tool dbcheck" we get the following error: ---------- samba-tool dbcheck Checking 1631 objects ERROR(<type 'exceptions.UnicodeDecodeError'>): uncaught exception - 'ascii' codec can't decode byte 0xc3 in position 29: ordinal not in range(128) File

Hi Louis, Am 28.02.2019 12:47, schrieb L.P.H. van Belle via samba: > Hai Stefan, > > See. > https://bugzilla.samba.org/show_bug.cgi?id=13616 > That's what I found, too. We did not do an update it's a fresh installation (migrate from samb3 with classicupgrade). I now did a "samba-tool dbcheck -v " and I see that the "ü" in the DN of a OU it's the

dpkg -l |grep ldb You want to see : libldb1 I think its 1.4.3 you will see, thats the version im having also atm. The bugnr is not in the release notes, so i expect this in the next release to be corrected. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan Kania via samba > Verzonden: donderdag 28

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I try to set up a ADDC with bind9 and dhcp-Server for dynamic DNS-updates. I followd the wiki: https://wiki.samba.org/index.php/Configure_DHCP_to_update_DNS_records_wi th_BIND9 My problem is, that the PTR Record will not be updated, because the script is using the wrong reverse-zone: - --------------------- Dez 26 17:30:05 addc-01 named[512]:

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello everybody, since the patch for all the badlock bugs it is not possible to access a Samba 4 ADDC-database with ldb-tools. Everytime I try it, I get the following error: root at addc-02:~# ldbsearch -H ldaps://addc-02.example2.net -U administrat or TLS failed to missing crlfile - with 'tls verify peer = as_strict_as_possible' When I

I decided to give Samba 4.9.x a new try as AD DC in one of my servers. It has been running version 4.8.9. I installed version 4.9.4 and when I ran samba-tool dbcheck I still obtained the following error message: ERROR(<type 'exceptions.UnicodeDecodeError'>): uncaught exception - 'ascii' codec can't decode byte 0xc3 in position 25: ordinal not in range(128)   File

Hello Stefan, you need to use "-U" with user from Domain Admin group(maybe it works with other users too, but I didn't test it). Andrej Am 07.08.2018 um 17:00 schrieb Stefan Kania via samba: > When I start the replication from the other DC it works as you can see: > ------- > root at addc-01:~# samba-tool drs replicate rodc-01 addc-01 dc=example,dc=net > Replicate

Hello, I set up a domain with two DCs (dns-backend is BIND9_DLZ) on a Debian 10 system. I used either the Debian-packages or the Packages from Louis (4.12.8). I created an Ansible-role to setup everything, starting from installing the packages over doing the provision/join up to change the settings for bind9. The first DC runs fine. After the reboot services are all present, allthe SRV Record for

On Tue, 15 May 2018 08:07:27 +0200 Stefan Kania <stefan at kania-online.de> wrote: > Good morning, > > today we started allover with a new machine, we got the same errors > but now we have an errormessage when doing a "samba-tool dbcheck" > --------------- > root at addc:~# samba-tool dbcheck > Checking 664 objects > ERROR(runtime): uncaught exception -

It's me again :-) Now we have DDNS with DHCP running but we have a problem on one of our two DCs. Btw we used the setup and the script from wiki. Doing a "dhclient" on a host we are getting the following messages: ------------- Mai 16 12:13:28 samba41 dhcpd[3961]: Commit: IP: 192.168.0.249 DHCID: 1:50:5b:5d:1c:ab:aa Name: horst Mai 16 12:13:28 samba41 dhcpd[3961]: execute_statement

The DDNS setup from the wiki uses the keytab of the seperate "Unprivileged user for TSIG-GSSAPI DNS updates via ISC DHCP server" you have to Check this one not the one which BIND uses. Regards Am 16.05.2018 um 12:45 schrieb Rowland Penny via samba: > On Wed, 16 May 2018 12:32:52 +0200 Stefan Kania via samba > <samba at lists.samba.org> wrote: > >> It's me

Hello, I just start testing the setup of an RODC with 4.8.3 (I use the packages from Louis). The join works fine. After a reboot of the rodc I can see all Objcts with: ldbsearch --url=/var/lib/samba/private/sam.ldb and all users and groups with: wbinfo -u wbinfo -g But as soon as I try to test the replication I got this message: ----------- root at rodc-01:/var/lib/samba/private# samba-tool drs

Hello everybody, if I set up a RODC in a different site with an own subnet do I have to replicate the machine-passwords with "samba-tool rodc reload host\$ --server=addc"? Or can a machine always authenticate against a RODC? Greetings Stefan -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 195

Hi All, After reading the list for a while I have a question myself. I have the task of upgrading a couple of systems and one of them is the office AD infrastructure from a Samba-4.1 installation to the latest stable version. I already did a concept of proof by incrementally compiling versions 4.2/3/4/5/etc to the then latest stable 4.10 and it seemed to work out OK but was a lot of work. I had a

We would like to use samba 4.x as our ADDC and also as an ldap source for authentication. Google apps can use an ldap server as a source for users and groups. There seems to be plenty of use of AD as a ldap server for this purpose. I wanted to check to see if anyone has used samba 4 running as an ADDC as an authentication server for other services that can consume ldap. -- David Bear mobile:

Hello all; I use CentOS 7.5.1804 I update from samba-4.8.2 to samba-4.9.1 and finish with not errors, but when I run samba-tool dbcheck --cross-ncs I have the error: [root at gtmad ~]# samba-tool dbcheck --cross-ncs Checking 4087 objects ERROR(<type 'exceptions.UnicodeEncodeError'>): uncaught exception - 'ascii' codec can't encode character u'\xe9' in

I just tested Samba 4.9.2 on one of my DCs, previously running version 4.8.6. Immediately after install, I ran "samba-tool dbcheck" and got the following: Checking 511 objects ERROR(<type 'exceptions.UnicodeDecodeError'>): uncaught exception - 'ascii' codec can't decode byte 0xc3 in position 25: ordinal not in range(128)   File