similar to: Problem with demoting, new dc and replic

On Thu, 17 May 2018 13:11:36 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 5/17/2018 12:45 PM, Carlos Bordon via samba wrote: > > Hi! > > > > i have 3 dcs with samba > > > > > > i demote bdc and replace it with dc2 with de same ip > > > > the replicate with dc1 is ok, and the replicate of dc3 with dc1 is > > ok,

Hi people I have a questions, i have 3 domain controllers, all with samba dc2 with dc1 drs is perfect dc3 with dc1 drs is perfect but dc2 with dc3 i have errors: WERR_DS_DRA_ACCESS_DENIED in CN=Configuration, DC =DomainDNsZonesm anda DC= ForestDnsZones have you any idea what can do? Sorry for my english, i am from Argentine.

On Thu, 17 May 2018 17:19:17 -0300 Carlos via samba <samba at lists.samba.org> wrote: > I understand, but dont replication between sites, is my problem.... > > Regards; > Lets start by confirming if this is your setup: Matriz site Filail DC1 --------------- DC3 | | | | DC2

On Thu, 17 May 2018 16:23:15 -0300 Carlos Bordon <cgermanb at gmail.com> wrote: > i found a new issue > drs replicate dc4 dc1 CN=configuration,dc=example,dc=com > > ERROR=(<class 'samba.drs_utils.drsexception'>) dsreplicasync failed > file"/usr/local/samba/lib/pynthon2.7/site-packages/samba/netcmd/dry.py" > line 386 in run

On Thu, 17 May 2018 16:58:13 -0300 Carlos via samba <samba at lists.samba.org> wrote: > Hi! > > In "NTDS settings" created new connection for: > > DC2 ->DC3 > > DC3 -> DC2 > > All OK, > > I tested with option > > kccsrv:samba_kcc=No > > is ok too. > > But in my DC2, a received one erro: > > May 17 16:54:44 dc2

hi! Query, I have 3 DCs, in each of the servers should have configured the other two DCs in the resolv.conf? or with only the primary is enough? Maybe that's my problem that does not replicate the dc3 with the dc2 thanks to all!

On Tue, 22 May 2018 11:03:48 -0300 Carlos Bordon via samba <samba at lists.samba.org> wrote: > and for 4.6 what recommends? upgrade directly to 4.8.2? > You can upgrade to 4.8.2, just steer clear of 4.8.0 and 4.8.1 ;-) Rowland

On 5/17/2018 12:45 PM, Carlos Bordon via samba wrote: > Hi! > > i have 3 dcs with samba > > > i demote bdc and replace it with dc2 with de same ip > > the replicate with dc1 is ok, and the replicate of dc3 with dc1 is ok, > > the problem is in dc2 with dc3 > > i found the problem, but i dont known how fixes > > when i do samba-tools drs showrepl in dc3

I dont understand whats the question here. But what i can say about the resolv.conf settings if you have multiple dc's. You have to think in 2 DNS resolving settings. 1) on the server as client resolving ( resolv.conf ) 2) clients resolving ( DNS Services ) The difference explained. If i do : ping hostname this is a server which is doing a client dns request through resolve.conf

Hi! In Option "Inter-Site Transports", i have only  one the name "DEFAULTIPSITELINK" , in properties Sites in this link: Matriz Filial Matriz -> site with DC1 and DC2 Filail ->  site With DC3 Regards; On 17-05-2018 13:12, lingpanda101 wrote: > On 5/17/2018 12:07 PM, Carlos wrote: >> Hi! >> >> Thanks for answer. >> >> But, i allowed

On 5/17/2018 3:58 PM, Carlos wrote: > > Hi! > > In "NTDS settings" created new connection for: > > DC2 ->DC3 > > DC3 -> DC2 > > All OK, > > I tested with option > > kccsrv:samba_kcc=No > > is ok too. > > But in my DC2, a received one erro: > > May 17 16:54:44 dc2 samba[10421]: [2018/05/17 16:54:44.543336,  0] >

On Thu, 17 May 2018 17:37:28 -0300 Carlos <carlos.hollow at gmail.com> wrote: > Matriz site Filial site > DC1 -------(OPENVPN)-------- DC3 > | > | > DC2 > > DC1 -> DC2 = OK > DC1 -> DC3 = OK > > DC2 -> DC1 = OK > DC2 -> DC3 = NO > > DC3 -> DC1 = OK > DC3 -> DC2 =

Hi, Again more data: The command samba-tool visualize reps seems to agree with the observed lack of replication from DC4 to DC3 & DC2: > RepsTo objects for DOMAIN > destination >

Hi all, We are running a three DC samba AD, using 4.12.8 sernet packages. Very stable for years. Today at 12:30 my colleague moved two users from * CN=Users,DC=samba,DC=company,DC=com to * OU=disabled,DC=samba,DC=company,DC=com This change was done on the DC4 at 12:30 using LAM (ldap-account-manager version 7.3) Ever since that, my automated samba-tool ldapcmp scripts started reporting

Hi! Thanks for answer. But, i allowed all ports in my firewall... I tested, shutdown  my DC1 DC2 dont comunication with DC3 I create user in DC2, dont replication with DC3... I waited more in 20 minutes Why ?? Regards; On 17-05-2018 12:01, lingpanda101 wrote: > On 5/17/2018 10:30 AM, Carlos via samba wrote: >> Hi! >> >> I have 2 DC, now add one more DC, but all dcs

Hello Christian, Ive had a quick look at you output, that looks pretty normal. I'll have a good look Friday, tomorrow day off. So my suggestion is post the output to the list but -d10 is not needed. The regular output should be sufficiant. Im wondering why there is no dc3 in kcc also but why i see over 15 RPC sessions. Maybe normal maybe not, this i dont know. Greetz, Louis >

Mandi! Julien TEHERY via samba In chel di` si favelave... > Is there a good pratice when adding new remote DCs in terms of replication > topology? I think you have to define a topology of the domain, using ADSS: https://blogs.technet.microsoft.com/canitpro/2015/03/03/step-by-step-setting-up-active-directory-sites-subnets-site-links/ defining links and weight. -- dott. Marco Gaiarin

On 10/7/2015 7:31 AM, mourik jan c heupink wrote: > On 7-10-2015 13:18, mourik jan c heupink wrote: >> So my dc3 seems unsynced or so. >> >> So I am now checking to make sure that my rsync replication script >> works as it should. (I'm guesssing it does NOT) > > The rsync seems to be working as it should, so now I'm > guessing that idmap.ldb differs

Hi Rowland, list, On 20-6-2016 20:04, Rowland penny wrote: > If you are using Sernet 4.4.4 packages, you must have a Sernet > subscription, you may get quicker help there. Well I'm not sure this kind of support is included, but even if it were, then others would not benefit from the dialogue with their support. :-) > I was wrong, if you are using 4.2.0 or later, you do not need to

Am 21.06.2016 um 10:41 schrieb lists: > Hi Achim, > > On 21-6-2016 0:01, Achim Gottinger wrote: >> Hi MJ and Rowland, >> >> I did abit of testing last week (two debian jesie servers with sernet >> 4.2 samba packages). Seems when rsync is run against rsyncd or involved >> via xinet as it is described in the wiki the user and group mapping does >> not