similar to: samba_dlz b9_format: unhandled record type 0

Hai, Hm, yes, i recall that but i dont remember how i fixed it. I've checked mail mails and review the old thread. Sorry, i dont have more on this for you. Do you know that exact moment when it started? Yes? Then search in you DNS zones for record with around that time, if possible remove it or change/update it. Make sure you have good backups! Greetz, Louis >

I suspect there's something wrong in wbinfo on a freshly installed Samba AD Domain Controller on Ubuntu 18.04 server. wbinfo does not resolve Windows SID to usernames: # wbinfo -S S-1-5-21-299502267-616249376-1417001333-14107 3000103 I should see "SAMDOM\username" instead of "3000103", right? getfacls has the same behavior: # getfacl /var/lib/samba/sysvol # file:

I have a working Samba 4.7.6 DC with the default /sysvol and /netlogon shares. These shares work perfectly and domain users can access them without any issue. Now, to ease experimenting with config files and stuff (it's not a production server), I've added a /rootdisk share (path=/) limiting its access ro root and domain admins: --------- # cat /etc/samba/smb.conf [global]        

Hi, Ok it's better like this!:-) The dhcp failover mode works well and 2 windows 7 client PC are well handled. They can have an IP and addresses are created/deleted in the DNS successfully. but... I try to remove my 2 old windows 2000 AD server from the production's LAN and put my 2 new Samba4 instead. The dhcp servers works fine but not really the DDNS. We have this kind of error

Hello all, I have two new server samba4, with isc-dhcp and Bind. ( Thanks to Louis 's scripts ) The AD was migrate from 2 Windows 2000 servers last friday, with a copy of them in a private lan. Today we have shutdown the old windows 2000 server and put the 2 new samba4 in place of them. The problem is that the DHCP does not update the DNS systematically... That works with laptops ( which

Another mistake : The louis's script ddns-kerberos-check.sh was not running in hourly.cron directory ( i make a chmod 770 to resolve that ) to recall here what I did: - I cloned the Windows 2000 server AD servers on a private network and I migrated to samba4 - Meanwhile, users have continued to use the Windows 2000 AD servers on the production network - I replaced the production servers

So there's no error on my side: I have no idmap lines in my smb.conf and since I can't add any I should live with the error/warning, right? Is this error related to sysvolreset taking forever to run? What about Louis/your script here https://github.com/thctlo/samba4/blob/master/samba-check-set-sysvol.sh ? I know it's safer but... is it also faster? :) Thanks again Claudio --- #

I've added a "print" in file "/usr/lib/python2.7/dist-packages/samba/ntacls.py" just before the line raising the error to log the (missing) file causing the error. I've found I had an orphaned GPO: it was shown in RSAT but didn't have any file in sysvol folder on both DCs. Just removed it from AD (it was only a test GPO) and the error disappeared. I've

On Fri, 2 Mar 2018 15:15:49 +0100 Claudio Nicora <claudio.nicora at gmail.com> wrote: > This could be the right way... > > There is a bit of a problem with that, it should be: > > > > DC=SRVAD-NEW,DC=samdom.local,CN=MicrosoftDNS,DC=DomainDnsZones,DC=SAMDOM,DC=LOCAL > The SAMDOM.LOCAL zone is set to replicate to the whole forest (maybe > I've missed that info

On Tue, 2018-07-10 at 09:35 +0200, Ing. Claudio Nicora via samba wrote: > Some other info about this issue. > It's the same as the one described in this bug: > https://bugzilla.samba.org/show_bug.cgi?id=11415 Try with 4.8.3. We have managed to join Windows 2012R2 with that release, after doing a Samba-side schema upgrade to the 2012 schema. Andrew Bartlett -- Andrew Bartlett

On Fri, 2 Mar 2018 16:15:43 +0100 Claudio Nicora <claudio.nicora at gmail.com> wrote: > > > Is bind9 running during the join ? > > How have you set up bind ? > No it's not. > Following the doc here > https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End > I see than the needed files (like /var/lib/samba/private/named.conf > and

On Fri, 2 Mar 2018 16:48:26 +0100 Claudio Nicora <claudio.nicora at gmail.com> wrote: > > > No, I was just checking if you where something you shouldn't, like > > creating the zone files in the Bind configs. > Good, it's better to clear out any doubt. > > > There doesn't seem to be anything wrong in any of your conf files, > > the only other

On Tue, 2018-07-10 at 10:27 +0200, Ing. Claudio Nicora wrote: > I can hardly follow your suggestion: > - my Windows server is 2008R2 and I can't easily upgrade it to 2012 That is fine, windows 2008R2 should be easier. > - Samba 4.7.6 is the latest available on Ubuntu repos > > Since I'm testing full migration to Samba, I'd like to stay on the safe > side and

> Undoubtedly '3000000' will be Administrator, who will be mapped to ID > '0' (root) in idmap.ldb and 'users' is mapped from 'Domain Users' in > idmap.ldb. Will live with that; that share is only used while playing with samba config easily from Windows clients. I'll remove it just before going to production. > There is a slight problem with the way

> you should remove 'winbind' from the shadow line, it isn't required. Done, thanks. > That is all perfectly normal on a Samba AD DC. The only way to get all > users and groups mapped to names, is to use uidNumber & gidNumber > attributes for all users & groups. This is NOT recommended on a DC, > this is because of sysvol, where some groups have also to be

On Sun, 4 Mar 2018 00:14:48 +0100 Claudio Nicora <claudio.nicora at gmail.com> wrote: > > > And I can now confirm that 4.7.4 on the latest Ubuntu 18.04 snapshot > > joins to a Samba AD domain as a DC. > I'm sure it does, that's why I suspect something is wrong in my > Win2000-->Win2008R2 upgraded domain AD. > > > Another thing that comes to my

Thanks Rowland and Louis! :) Ok I'm going to test the failover mode! ;) Do I need to set the same value for NSRVS in dhcp-dyndns.sh? ( the first AD server, "S4" for me ) Or can I keep NSRVS=S4.ariane.intra on server S4 and NSRVS=S4bis.ariane.intra on server S4bis? It seems to be more secure for me if the first server switch off... Sam Le 27/01/2016 12:16, Rowland penny a écrit :

Hi there, I'm in the process of switching from using Samba4 internal DNS to using BIND as my backend DNS. However, I'm currently running into some issues with the transition. Here's an example of the messages I'm getting from /var/log/messages logs: Nov 9 15:34:26 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction on zone DOMAIN Nov 9 15:34:26 pho-dcpvl-01N

> Your glasses (or lack of) ;-) I usually agree, but in this case I've seen that warning and voluntarily ignored it because it worked for 2 days... I thought I was lucky ;-) > Or to put it another way, you must set the permissions from Windows > > This is one of the problems/features of using a DC as a fileserver. > > Remove everything after the 'read only = No'

Hi, named exited when loading 'AD DNS Zone': Feb 03 17:46:43 ID-01 named[4498]: Loading 'AD DNS Zone' using driver dlopen Feb 03 17:46:43 ID-01 named[4498]: samba_dlz: started for DN DC=elephanttalk,DC=cn Feb 03 17:46:43 ID-01 named[4498]: samba_dlz: starting configure Feb 03 17:46:43 ID-01 named[4498]: zone 30.168.192.in-addr.arpa/NONE: has 0 SOA records Feb 03 17:46:43 ID-01