similar to: Data Locations

On 07/30/2019 10:05 AM, Rowland penny via samba wrote: > > Try running these commands: > > ldbsearch --cross-ncs --show-binary -H /var/lib/samba/private/sam.ldb > -b 'CN=MicrosoftDNS,DC=DomainDnsZones,DC=edm-inc,DC=com' -s sub > '(objectclass=dnsNode)' > domain_records.ldif > > ldbsearch --cross-ncs --show-binary -H /var/lib/samba/private/sam.ldb >

On 07/17/2019 12:48 PM, Rowland penny via samba wrote: > > What are you trying to join to ? Active Directory domain, the only DC is a Server 2003 machine. > > Have you removed any existing smb.conf file ? Yes > > Can you post the contents of the following files: > > /etc/hostname athena > > /etc/hosts 127.0.0.1?????? localhost?????? localhost.localdomain

On 07/17/2019 02:12 PM, Rowland penny via samba wrote: > On 17/07/2019 19:31, Robert A Wooldridge via samba wrote: >> Active Directory domain, the only DC is a Server 2003 machine. > Is the function level set to its highest level ? Apparently not.? It is set to Windows 2000 level.? It could be set to Server2003 level but it thinks that one of my file servers is a domain controller

On 07/30/2019 03:08 AM, Rowland penny via samba wrote: > I have been thinking about this and reading the code that didn't get > run and I know think that the OP is at the point that existed before > 4.6.0, He possibly has missing records in AD, can I suggest he reads > this: > > https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record athena:~# host -t A

On 08/21/2019 02:02 AM, L.P.H. van Belle via samba wrote: > Try this command: > samba-tool domain join edm-inc.com DC \ > --server=server.fqdn.here \ # << AD-DC server with FSMO roles > --realm=EDM-INC.COM > --dns-backend=SAMBA_INTERNAL \ # if your running with bind9, --dns-backend=BIND9_DLZ > --option='idmap_ldb:use rfc2307 = yes' \ >

On 07/30/2019 09:15 AM, Rowland penny via samba wrote: > This is getting weird, anything and everything seems to be working > except for Serverinfo ??????? The other DC is Windows Server 2003, does that make any difference? Adding a DNS entry also fails: athena:~# samba-tool dns add athena edm-inc.com smtp A 10.10.1.9 ERROR(runtime): uncaught exception - (9717,

So you have to reset the other account flags after doing it? On 08/15/2019 02:43 PM, Kris Lou via samba wrote: > pdbedit -c="[]" <user> > > This clears the Account Flags (warning, clears ALL Account flags) that you > can also view via "pdbedit -Lv <user>" > > > Kris Lou > klou at themusiclink.net > > > On Thu, Aug 15, 2019 at 12:11

After a quick look at this thread, yes, i suggest you add a new DC. I also suggest you read : First this one. https://github.com/thctlo/samba4/blob/master/howtos/stretch-base-1.1-checkup.txt Now you are joining a existing domain. Line 20, the resolv.conf, set the first name server to you windows DC, the second to the internet. Besides that, before you install samba do these checks. Next is

I'm trying to add an entry to dns.? The IP is external to the domain's IP's.? Here's the error: athena:~# samba-tool dns add athena.edm-inc.com smtp2.edm-inc.com smtp2 A 134.209.164.116 Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

Ok, I successfully added a couple of machines to DNS using samba-tool but when I query with host they are not there. Here's the command line that I used: samba-tool dns add ads1.edm-inc.com edm-inc.com smtp A 10.10.1.215 It asks for the domain admin password and returns successfully. But doing a host smtp returns nothing. Any ideas? -- Bob Wooldridge EDM Incorporated

Is there an easy way to undo an account that is locked out due to wrong password count exceeded? -- Bob Wooldridge EDM Incorporated

I'm trying to join as a DC using Debian Buster and samba package (v4.9.5) and I'm getting this error when I attempt to join: > Could not find machine account in secrets database: Failed to fetch > machine account password for DOM from both secrets.ldb (Could not find > entry to match filter: '(&(flatname=DOM)(objectclass=primaryDomain))' > base: 'cn=Primary

On 07/25/2019 02:33 AM, Rowland penny via samba wrote: > On 24/07/2019 22:21, Robert A Wooldridge via samba wrote: >> I'm still trying to figure out of my samba DC which has received by >> transfer all 7 FSMO roles is actually doing DNS.? When I do this >> serverinfo command it fails: >> >> >> athena:~# samba-tool dns serverinfo athena > > Do you

On 07/18/2019 10:20 AM, Rowland penny via samba wrote: > I think this could be one of your problems, not entirely sure, but I > think the minimum function level reliably required is 2003, you may > have to remove that fileserver. No joy.? I was able to demote that file server using: samba-tool domain demote -Uadministrator And then I promoted the DC to Server 2003 level.? But

I need to do a simple query, against some LDAP data in 'laster draft schema' format i've added to te samba/AD schema. All LDAP query return the same result on all (6) of the DC: root at vdcsv1:~# ldapsearch -H ldap://vdcsv2.ad.fvg.lnf.it -W -D CN=mta,OU=Restricted,DC=ad,DC=fvg,DC=lnf,DC=it -b DC=ad,DC=fvg,DC=lnf,DC=it "(cn=prova123)" rfc822MailMember Enter LDAP Password:

On 07/23/2019 03:16 PM, Rowland penny via samba wrote: > Did you actually read my last post ???? > > If you only transferred 5 of the roles, which of the SEVEN roles did > you not transfer ? My bad, I transferred all 7 roles: SchemaMasterRole owner: CN=NTDS Settings,CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com InfrastructureMasterRole

Hai, Ok, below looks ok, as Rowland also said. But i have one more thing. > > ?????? Checking file: /etc/krb5.conf > > > > [libdefaults] > > ??? dns_lookup_realm = false > > ??? dns_lookup_kdc = true > > ??? default_realm = EDM-INC.COM > > ??? default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5 > > ??? default_tkt_enctypes =

On 07/25/2019 10:10 AM, Rowland penny via samba wrote: > How are you logging in to the DC and who as ? > > If I login as the user 'rowland' to one of my DCs I get this prompt: > > SAMDOM\rowland at dc4:~$ > > If I login as root, I get this: > > root at dc4:~# > > Your prompt is: > > athena:~# > > Which I think means you are doing this as

Mandi! Andrew Bartlett via samba In chel di` si favelave... > > I'm still on samba4.5, sorry me. > Fix that first. Eh... i hope on this year. > > I've done some (bash) scripting around ldbsearch, but i've found some > > performance and 'lock' trouble. > Correct, Samba before 4.7 has very poor unindexed search performance, > due to a bug.  OK.

I'm still trying to figure out of my samba DC which has received by transfer all 7 FSMO roles is actually doing DNS.? When I do this serverinfo command it fails: athena:~# samba-tool dns serverinfo athena Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File