similar to: Member server winbind issue

Hi Sven, Ok, before i back to my packaging, i reviewed the changes. You still missed a bit but it looks much better already, your completely there, but we will get there. And you really need to be more precise, why im telling that... Well the review. ( thats not all, im still reviewing the base only) ... https://up.tao.at/u/samba/graz-file.info2.txt Checking file:

Hai,   I've updated the packages on my repo. Please take note of the following.   Jessie-backports ( waiting on fixed debian version ) Jessie 4.5.12 ->  4.5.14 Jessie (unstable) 4.6.7 -> 4.6.8 Stretch-backports ( waiting on fixed debian version ) Stretch 4.6.7 -> 4.6.8 Stretch-unstable ( waiting for 4.7 )   I made a small change in the source and package names. You guys will not

On Sun, Nov 10, 2019 at 11:00:20AM +0000, Rowland penny via samba wrote: > On 10/11/2019 10:49, andi via samba wrote: > > Hello, > > > > I have configured an samba AD DC for use with > > some windows and linux machines. The linux machines use > > samba for user auth and also as kerberos kdc for > > nfs mounts. This works fine so far but after a while >

Hi Rowland, I'll consider the update. But I need to backup this host (adc02) before, because it the only and the main DC on my network... =( Find attached below the output of the script: Config collected --- 2020-04-07-15:30 ----------- Hostname: dcs01 DNS Domain: test.example.domain.br Realm: TEST.EXAMPLE.DOMAIN.BR FQDN: dcs01.test.example.domain.br ipaddress: 177.X.X.3

Hello! Our organization has since June had problems with samba on our web server incrementing keytab version numbers every month - precisely every month. Since apache2 with mod_auth_kerb isn't made aware of this, all our web sites go 503. The manual solution has been exporting new keytabs and reloading apache, but we haven't figured out why the KVNOS are incremented in the first place.

Thanks in advance. here's the total firehose drink. I've obscured host, domain, subnet. Hope that will still work for you. Don't want all the info publicized. klist -ket /var/lib/samba/private/secrets.keytab!! there is no /var/lib/samba/private/secrets.keytab klist -ket /etc/krb5.keytab KVNO Timestamp           Principal ---- -------------------

Hi all, I'm simply overwhelmed with both the speed and quality of responses. I wish all mailing lists and forums were like this! I'm going to follow your suggestions and try to follow the template below. My choice of new DC will probably be 4.9.5 on buster. What steps would you recommend to unlink my broken 4.0.9 -> 4.5.16 replication before shutting down 4.5.16? Is it sufficient

Hai, Before you start, Backup, /etc/ /var/lib/samba better safe than sorry.. Stop samba and related services ( check it at least nmbd smbd winbind samba samba-ad-dc) > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Prunk Dump via samba > Verzonden: woensdag 21 juni 2017 11:57 > Aan: samba at lists.samba.org > Onderwerp:

On Wed, 22 Nov 2017 13:07:09 +0100 Herman Øie Kolden via samba <samba at lists.samba.org> wrote: > Hello! > > Our organization has since June had problems with samba on our web > server incrementing keytab version numbers every month - precisely > every month. Since apache2 with mod_auth_kerb isn't made aware of > this, all our web sites go 503. The manual solution

Hello everyone, I have setup two Samba AD DC's running Debian 9 with BIND9_DLZ dns backend. Both are running Samba 4.5.16 - I know it is already very old version but this is the default one coming with debian stretch repo. (I will upgrade to Debian buster - and with this to newer Samba version - as soon as it is released stable and I could test the upgrade correctly :) )

Hai Rowland, Yes, agree here, better correct DC1, then join new. So i'll post this, its focused on Debian servers, but usable for any other. I've run the debug on the company AD-DC server here. A good example for an AD-DC setup with Bind9_DLZ. And remember, most is on/from wiki.samba.org Im running this. ( Debian Stretch as AD-DC ) This server started as a wheezy server and is

This does not look bad, pretty ok. But im do have a question here. > ipaddress: 10.103.1.6 X.X.103.1 This indicated that the primary interface is eno2 > 2: eno2: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP > ??? inet 10.103.1.6/24 brd 10.103.1.255 scope global eno2 > 3: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc mq state UP > ??? inet

Hello Rowland, A small change has been made and replication works in both directions: dhcpcd.conf requires both dns servers in reverse order. RY11CITDC, /etc/dhcpcd.conf -------------------------------------------------------------- ..... interface eth0 static ip_address=10.44.1.10/16 static routers=10.44.1.1 static domain_name_servers=10.44.1.9 10.44.1.10 RY11CITDC, /etc/dhcpcd.conf

Thanks for the fast reply. Sorry - I was not aware that attachments are not forwarded. (All information you requested was included there) I think I have already tried resync via "samba-tool drs replicate" - but better see below the printout of previous attachment "faiserver.log" Thanks for help in advance :) root at faiserver:~# uname -a Linux faiserver.example.corp

On 14/09/2017 10:20, Rowland Penny via samba wrote: > On Thu, 14 Sep 2017 09:32:21 -0300 > Flávio Silveira via samba <samba at lists.samba.org> wrote: > >> Hi! >> >> Just to confirm, I don't think there is a way to test if ntp is setup >> properly, right? >> >> Moving forward to Winbindd config as describe here: >>

On 14/09/2017 11:04, Rowland Penny via samba wrote: > On Thu, 14 Sep 2017 10:49:48 -0300 > Flávio Silveira via samba <samba at lists.samba.org> wrote: > >> >> On 14/09/2017 10:20, Rowland Penny via samba wrote: >>> On Thu, 14 Sep 2017 09:32:21 -0300 >>> Flávio Silveira via samba <samba at lists.samba.org> wrote: >>> >>>> Hi!

Mandi! L.P.H. van Belle via samba In chel di` si favelave... > Im pretty sure this is a bug in the DC part. Ahem, sorry, but i'm lost in following this therad. I've hust setup my test domain, using samba 2:4.5.8+dfsg-2+deb9u1~bpo8+1 (your package, lous) on a debian jessie. Very minimal configuration: root at vdcsv1:~# samba-tool testparm Press enter to see a dump of your

On Thu, 14 Sep 2017 10:49:48 -0300 Flávio Silveira via samba <samba at lists.samba.org> wrote: > > > On 14/09/2017 10:20, Rowland Penny via samba wrote: > > On Thu, 14 Sep 2017 09:32:21 -0300 > > Flávio Silveira via samba <samba at lists.samba.org> wrote: > > > >> Hi! > >> > >> Just to confirm, I don't think there is a way to

On Thu, 14 Sep 2017 11:18:09 -0300 Flávio Silveira via samba <samba at lists.samba.org> wrote: > > > On 14/09/2017 11:04, Rowland Penny via samba wrote: > > On Thu, 14 Sep 2017 10:49:48 -0300 > > Flávio Silveira via samba <samba at lists.samba.org> wrote: > > > >> > >> On 14/09/2017 10:20, Rowland Penny via samba wrote: > >>>

Hai,     > When running second command I recieve error: > root at location-000001:~# systemctl start bind9 samba > Failed to start samba.service: Unit samba.service is masked.   ah yes, sorry, that is offcourse samba-ad-dc   >and yep - replication is working then!! :) what i expected the old bug. ;-)   About the other start up for both DC's do the following.  type :   systemctl