similar to: Winbind, cached logons and 'user persistency'...

Hai Marco, > Yesterday i've updated my main switch, disconnecting for a > brief lag of time all my ''infrastructutes''. > > My SMTP server (exim) start to complain about 'unroutable addresses': > > 2019-01-16 18:32:40 1gjp3Q-0006aw-TG <= root at sv.lnf.it > H=(3jane.sv.lnf.it) [10.5.1.13] P=esmtp S=655 > id=20190116173240.C20003CE035A

On Wed, 30 Jan 2019 17:25:19 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > nscd caches certain things, as does winbind, if you want to run nscd > > with winbind, you need to stop nscd caching the things that winbind > > does, when you do this, nscd isn't caching very much,

On Mon, 11 Feb 2019 14:47:01 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > Sorry. Still on this issue. > > Today i'm upgrading my DC (with latest 4.5 from louis repo). Note that > i've 7 DC in total. > > In site 'PP' i've upgraded samba, then rebooted the container. reboot > on 'vdcpp2' happen on: > > Feb

Sorry. Still on this issue. Today i'm upgrading my DC (with latest 4.5 from louis repo). Note that i've 7 DC in total. In site 'PP' i've upgraded samba, then rebooted the container. reboot on 'vdcpp2' happen on: Feb 11 13:59:52 vdcpp2 shutdown[33452]: shutting down for system reboot at '14:00:30' bind, ntp and (i suppose) samba was stared. After that,

On Mon, 11 Feb 2019 15:28:57 +0100 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > Mandi! Rowland Penny via samba > In chel di` si favelave... > > > It sounds to me that 'exim' is using LDAP for its lookups and is NOT > > using any cache (winbind or otherwise). So when the LDAP source goes > > away, so do your users. > > No, rowland;

Im wondering why your log below shows this order, i just noticed. Why is the computer tring to set the A records 2 x. Lines 1-13, show a successfull commit of the A/AAAA records. ( TSIG key ok ) If you count the below lines, after line 13, my logs shows. samba_dlz: starting transaction on zone 1.168.192.in-addr.arpa Yours is trying again to update samba_dlz: starting transaction on zone

Following: https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC i've demoted and removed a DC. Seems all went as expected: root at vdcud1:~# samba-tool domain demote --server=vdcsv1.ad.fvg.lnf.it -U gaio Using vdcsv1.ad.fvg.lnf.it as partner server for the demotion Password for [LNFFVG\gaio]: Deactivating inbound replication Asking partner server vdcsv1.ad.fvg.lnf.it to synchronize

Mandi! Rowland Penny via samba In chel di` si favelave... > > No. Anyway, note that query return correctly 'result: 0 Success', > > simply return no data. > That just means the search retuned without error Eh. Query succeded and return no data. Yes. > If you run the command: > ldapsearch -H ldap://vdcpp1.ad.fvg.lnf.it -W -D >

Mandi! Rowland Penny via samba In chel di` si favelave... > If an ldap lookup works on every DC, except for one and the data is > definitely there on the one DC it doesn't work on, then it must be > something on that DC. is there a firewall or apparmor/selinux in the > way ? No. Anyway, note that query return correctly 'result: 0 Success', simply return no data. Another

I need to do a simple query, against some LDAP data in 'laster draft schema' format i've added to te samba/AD schema. All LDAP query return the same result on all (6) of the DC: root at vdcsv1:~# ldapsearch -H ldap://vdcsv2.ad.fvg.lnf.it -W -D CN=mta,OU=Restricted,DC=ad,DC=fvg,DC=lnf,DC=it -b DC=ad,DC=fvg,DC=lnf,DC=it "(cn=prova123)" rfc822MailMember Enter LDAP Password:

In our network we found some client with clock differences. Some machine have effectively some troubles, eg have NO 'Windows Time' service defined, probably some glitches happened when moving from our old NT-like domain. Anyway, catching for that, we have found some other strangeness. Windows time service run: C:\Users\gaio>sc query w32time NOME_SERVIZIO: w32time TIPO

Good morning Marco and others. > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Marco Gaiarin via samba > Verzonden: dinsdag 23 oktober 2018 18:58 > Aan: samba at lists.samba.org > Onderwerp: [Samba] Again NFSv4 and Kerberos at the 'samba way'... > > > Sorry, i come back to this topic in a different thread,

Sorry, i come back to this topic in a different thread, because i'm still totally puzzled with the previuous one. Louis, sorry me. ;( I've tried to start with this, that seems very simple: https://wiki.debian.org/NFS/Kerberos And so i've done: a) installed 'nfs-kernel-server' on server, 'nfs-common' on client. Ok, this is easy. b) AFAI've understood i need

On Fri, 8 Jun 2018 12:04:30 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > > You are meaning here, literally: windows client try to > > register/update DNS using ONLY the dns provided by DHCP? > > Or, speaking differently the same thing, windows client suppose > > blindly that DNS got by DHCP ARE AD DCs? > > Ok, DNS registration seems

Mandi! Rowland Penny via samba In chel di` si favelave... > Whilst there are attributes that do not get replicated between DC's, > the majority are, so each DC should allow the same access. > Do you have access to the DC ? > Can you run the search locally ? Sure! As just stated, local access (via ldbsearch against the local SAM) works as expected: root at vdcpp1:~# ldbsearch

Hai Marco, Maybe the winbind cache time is set to low for this. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Marco Gaiarin via samba > Verzonden: donderdag 17 januari 2019 15:55 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Winbind, cached logons and 'user > persistency'... >

On Thu, 2017-12-07 at 10:48 +0100, Marco Gaiarin via samba wrote: > Mandi! Andrew Bartlett via samba > In chel di` si favelave... > > > > This lead me to another question: in this way, aliases are ''domain > > > wide'' right? Eg, i cannot have a DM aliased 'file' in a LAN and > > > another DM aliased 'file' in another LAN, as

Hai Marco, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Marco Gaiarin via samba > Verzonden: vrijdag 26 oktober 2018 11:23 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Again NFSv4 and Kerberos at the 'samba way'... > > Mandi! L.P.H. van Belle via samba > In chel di` si favelave... > >

On Wed, 2017-12-06 at 11:19 +0100, Marco Gaiarin via samba wrote: > Mandi! Andrew Bartlett via samba > In chel di` si favelave... > > > > We haved used it on a domain member server, yes. > > > Only one thing: when you have a compteraccount memberserver$ in your AD, > > > you cannot use "memberserver" as an alias on another machine) > > >

Sorry, i'm getting a bit confused about my new Samba/AD domain, related to the 'short' name resolving. I was clearly (ab)used to Samba/NT, where WINS make, on LAN, ''flat'' resolving very simple. I'm moving now from my old NT domains to my new AD domain, and to prevent massive change i've decided to keep name resolution and DHCP address assigment out of the