similar to: Problem with demoting, new dc and replic

On Thu, 17 May 2018 13:11:36 -0400 lingpanda101 via samba <samba at lists.samba.org> wrote: > On 5/17/2018 12:45 PM, Carlos Bordon via samba wrote: > > Hi! > > > > i have 3 dcs with samba > > > > > > i demote bdc and replace it with dc2 with de same ip > > > > the replicate with dc1 is ok, and the replicate of dc3 with dc1 is > > ok,

Hi people I have a questions, i have 3 domain controllers, all with samba dc2 with dc1 drs is perfect dc3 with dc1 drs is perfect but dc2 with dc3 i have errors: WERR_DS_DRA_ACCESS_DENIED in CN=Configuration, DC =DomainDNsZonesm anda DC= ForestDnsZones have you any idea what can do? Sorry for my english, i am from Argentine.

On Thu, 17 May 2018 16:23:15 -0300 Carlos Bordon <cgermanb at gmail.com> wrote: > i found a new issue > drs replicate dc4 dc1 CN=configuration,dc=example,dc=com > > ERROR=(<class 'samba.drs_utils.drsexception'>) dsreplicasync failed > file"/usr/local/samba/lib/pynthon2.7/site-packages/samba/netcmd/dry.py" > line 386 in run

On Thu, 17 May 2018 17:19:17 -0300 Carlos via samba <samba at lists.samba.org> wrote: > I understand, but dont replication between sites, is my problem.... > > Regards; > Lets start by confirming if this is your setup: Matriz site Filail DC1 --------------- DC3 | | | | DC2

On Tue, 22 May 2018 11:03:48 -0300 Carlos Bordon via samba <samba at lists.samba.org> wrote: > and for 4.6 what recommends? upgrade directly to 4.8.2? > You can upgrade to 4.8.2, just steer clear of 4.8.0 and 4.8.1 ;-) Rowland

On 5/17/2018 12:45 PM, Carlos Bordon via samba wrote: > Hi! > > i have 3 dcs with samba > > > i demote bdc and replace it with dc2 with de same ip > > the replicate with dc1 is ok, and the replicate of dc3 with dc1 is ok, > > the problem is in dc2 with dc3 > > i found the problem, but i dont known how fixes > > when i do samba-tools drs showrepl in dc3

On Thu, 17 May 2018 16:58:13 -0300 Carlos via samba <samba at lists.samba.org> wrote: > Hi! > > In "NTDS settings" created new connection for: > > DC2 ->DC3 > > DC3 -> DC2 > > All OK, > > I tested with option > > kccsrv:samba_kcc=No > > is ok too. > > But in my DC2, a received one erro: > > May 17 16:54:44 dc2

hi! Query, I have 3 DCs, in each of the servers should have configured the other two DCs in the resolv.conf? or with only the primary is enough? Maybe that's my problem that does not replicate the dc3 with the dc2 thanks to all!

Hi! In Option "Inter-Site Transports", i have only  one the name "DEFAULTIPSITELINK" , in properties Sites in this link: Matriz Filial Matriz -> site with DC1 and DC2 Filail ->  site With DC3 Regards; On 17-05-2018 13:12, lingpanda101 wrote: > On 5/17/2018 12:07 PM, Carlos wrote: >> Hi! >> >> Thanks for answer. >> >> But, i allowed

I dont understand whats the question here. But what i can say about the resolv.conf settings if you have multiple dc's. You have to think in 2 DNS resolving settings. 1) on the server as client resolving ( resolv.conf ) 2) clients resolving ( DNS Services ) The difference explained. If i do : ping hostname this is a server which is doing a client dns request through resolve.conf

On 5/17/2018 3:58 PM, Carlos wrote: > > Hi! > > In "NTDS settings" created new connection for: > > DC2 ->DC3 > > DC3 -> DC2 > > All OK, > > I tested with option > > kccsrv:samba_kcc=No > > is ok too. > > But in my DC2, a received one erro: > > May 17 16:54:44 dc2 samba[10421]: [2018/05/17 16:54:44.543336,  0] >

Hi! Thanks for answer. But, i allowed all ports in my firewall... I tested, shutdown  my DC1 DC2 dont comunication with DC3 I create user in DC2, dont replication with DC3... I waited more in 20 minutes Why ?? Regards; On 17-05-2018 12:01, lingpanda101 wrote: > On 5/17/2018 10:30 AM, Carlos via samba wrote: >> Hi! >> >> I have 2 DC, now add one more DC, but all dcs

yes, but with kerberos i dont have the posibility to make policies or rules for traffic filter 2018-06-01 13:14 GMT-03:00 Rowland Penny via samba <samba at lists.samba.org>: > On Fri, 1 Jun 2018 13:03:08 -0300 > Carlos Bordon via samba <samba at lists.samba.org> wrote: > > > is a palo alto > > > > It has the form of filtering by users for what I was

Hello, I am running in a duplicate test environment of my work domain. I have 2 x 4.1 DCs and 2 x 4.7 DCs. I have transferred FSMO role to #3 and it is replicating to #4 fine. I have demoted #1 which appeared to go fine and have turned it off. When I try to demote #2 it fails with the error... Using dc3.domain.com as partner server for the demotion Password for [DOMAIN\administrator]:

Hi, I have searched here, and noticed some discussion lately on problems demoting a dc. In my case, all roles are on DC2, and DC1 & DC3 know that: root at DC1:/var/log/samba# samba-tool fsmo show InfrastructureMasterRole owner: CN=NTDS Settings,CN=DC2,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=samba,DC=company,DC=com RidAllocationMasterRole owner: CN=NTDS

On Thu, 17 May 2018 17:37:28 -0300 Carlos <carlos.hollow at gmail.com> wrote: > Matriz site Filial site > DC1 -------(OPENVPN)-------- DC3 > | > | > DC2 > > DC1 -> DC2 = OK > DC1 -> DC3 = OK > > DC2 -> DC1 = OK > DC2 -> DC3 = NO > > DC3 -> DC1 = OK > DC3 -> DC2 =

Hi all, We are running a three DC samba AD, using 4.12.8 sernet packages. Very stable for years. Today at 12:30 my colleague moved two users from * CN=Users,DC=samba,DC=company,DC=com to * OU=disabled,DC=samba,DC=company,DC=com This change was done on the DC4 at 12:30 using LAM (ldap-account-manager version 7.3) Ever since that, my automated samba-tool ldapcmp scripts started reporting

Hi, Again more data: The command samba-tool visualize reps seems to agree with the observed lack of replication from DC4 to DC3 & DC2: > RepsTo objects for DOMAIN > destination >

On 10/7/2015 7:31 AM, mourik jan c heupink wrote: > On 7-10-2015 13:18, mourik jan c heupink wrote: >> So my dc3 seems unsynced or so. >> >> So I am now checking to make sure that my rsync replication script >> works as it should. (I'm guesssing it does NOT) > > The rsync seems to be working as it should, so now I'm > guessing that idmap.ldb differs

Hi all, i've got initial setup on DC1 (4.0.1)... all working good and flawless Added additional geographically distributed controllers (DC2, DC3, DC4,DC5) with 4.0.5 - no problem. All PC's can connect to their own site/DC Transferred all FSMO's to DC2 - transferred successfully (with seize "error" bug) DC1 crashed badly.... during maintenance, SAMBA was