similar to: Problem joining domain [SEC=UNOFFICIAL]

UNCLASSIFIED Hi Andrew and Roland, I originally installed samba-4.1.7 on CentOS 6.5. I successfully joined the domain. I intended to take over from the 2003 server but because the domain was being heavily used, I delayed seizing the roles. Now I really, really want to replace the 2003 server. The network is currently not in use and I want to complete the job while I have an opportunity. If I

UNOFFICIAL Hi, I currently have two DCs, one temporary and one permanent. Both running Samba 4.10.4 on Centos 7 I tried to transfer the roles from the temporary (julius) to the permanent (titus). rid, schema, pdc, naming & infrastructure transferred without error. However when I tried to transfer the domaindns role (-U administrator), I got the old Module 'samba' has no attribute

UNCLASSIFIED Hi Louis, I will make the change. This is what SAMBA gave me when I joined the domain. Cheers Russell -----Original Message----- From: samba [mailto:samba-bounces at lists.samba.org] On Behalf Of L.P.H. van Belle via samba Sent: Wednesday, 12 June, 2019 6:33 p.m. To: samba at lists.samba.org Subject: Re: [Samba] Problem joining domain [SEC=UNCLASSIFIED] I migth be picky in

UNCLASSIFIED Sorry to be a bloody pest, but I've hit a new problem. I shutdown the 2003 server & seized the roles. I then upgraded to samba 4.7.12. and demoted the 2003 server. Everything seemed to be working OK for several days, so I upgraded to 4.8.12. All seems OK except samba-tool dbcheck gives an error [root at julius samba-4.8.12]# samba-tool dbcheck -v --cross-ncs

Hello everybody, ? I have a new AD which is installed on a Windows Server 2019. Now I want to add a Samba DC to this AD. The Samba DC is in the same subnet. Samba Server: Ubuntu 18.04 Samba 4.10.6 ? The Windows AD has the following settings: PS C: \ Users \ Administrator> Get-ADForest ApplicationPartitions: {DC = DomainDnsZones, DC = mydom, DC = local, DC = ForestDnsZones, DC = mydom,

On 21/07/19 2:59 AM, Ren? Schmidt via samba wrote: > Adding CN = SAD, CN = Servers, CN = Default First Site Name, CN = Sites, CN = Configuration, DC = mydom, DC = local > Adding CN = NTDS Settings, CN = SAD, CN = Servers, CN = Default First Site Name, CN = Sites, CN = Configuration, DC = mydom, DC = local > DsAddEntry failed with status WERR_ACCESS_DENIED info (8363,

UNCLASSIFIED Hi Rowland No tombstonelifetime. Do I need to upgrade the schema? The current schema is 30 (Windows 2003). When I try to update the schema, I get the following error: Applying Sch31.ldf updates... Exception [Errno 2] No such file or directory I downloaded sch31.ldf and tried to apply that. samba-tool domain schemaupgrade --ldf-file=sch31.ldf --base-dir=/home/user/work/ldif

UNOFFICIAL Hi, I'm trying to build samba-latest on CentOS 7. The PC is not online, so I have to download everything manually. Most of the prerequisites are on the CentOS Everything ISO so I don't have to download a lot. I installed all the documented dependencies and configure complained about python3. So I downloaded and installed python36-libs-3.6.8-1.el7.x86_64.rpm

Hai Marcio, Please keep mailing to the list, that helps everybody. ;-) Question, does the Windows AD domain contain MS Exchange also? Ow and my bad.. This : samba-tool domain tombstones expunge You need to purge the tombstones on the windows server, but forget that all. I had a new look and noticed: root at samba4dc:/etc/init.d# samba-tool domain join empresa.com.br DC

UNOFFICIAL Hi Today I demoted the temporary DC (Julius) on my network. The demotion failed. Failed to confirm we are not an RODC ... cannot find attribute msDS-isRODC So I shutdown Julius and forced the demotion. The domain seems stable until I tried LDAP authentication which fails. The samba log says: Error 32 determining PSOs in system. I can't seem to find anything on this error.

UNOFFICIAL Thanks Tim, I was just wondering if my mistake was raising the functional-level. This confirms it. This apparently also broke backup. I cannot create the container, because the current schema (2003) doesn't support msDS-PasswordSettingsContainer. It seems impossible (and dangerous) to update the schema. I was given a reference to a thread about updating the schema but - the

Hm really. Then you should have a look also at your krb5.conf file. Section : [libdefaults] default_realm = Best regards, Louis > -----Oorspronkelijk bericht----- > Van: Thamm, Russell [mailto:Russell.Thamm at dst.defence.gov.au] > Verzonden: donderdag 13 juni 2019 9:35 > Aan: samba at lists.samba.org > CC: L.P.H. van Belle > Onderwerp: RE: [Samba] Problem

UNOFFICIAL Hi, I am running an old SAMBA DC (Bilbo) that I want to upgrade. I installed the latest version of SAMBA 4 on an old PC (jimbo) and joined the domain. I intend to transfer the FSMO roles, upgrade Bilbo and transfer the roles back. I have transferred all roles except domaindns and forestdns. Jimbo says that these roles have no owner but Bilbo thinks it is the owner. Is there some way

UNOFFICIAL Hi, I have a SAMBA4 box (CentOS 6.5, SAMBA 4.1.7) that joined a 2003 domain and I have transferred (not seized) all FSMO roles to the samba box. I demoted the 2003 DC (had to forceremoval). The Samba box now is the sole DC and DNS server on the network. I followed the instructions in https://lists.samba.org/archive/samba-technical/2014-February/097703.html for repairing the domain

Hai Marcio, ? I've checked the script output, that looks good. ? Just two small comments, - The hosts file, if your resolving is correctly working then you could remove the other DC's and FS from it, but it does not hurt is you keep it as is. - As long your are sure the DNS servers are ok and all needed zones are in these "proxy?dns" server. that should be fine also. ??? (

UNOFFICIAL I am running several small networks with Samba 4 acting as AD/DC. I want to upgrade the OS and Samba on the older servers. But I understand that to upgrade the OS, I need to do a new install (at least to get from Centos 6 to 7). I don't have the luxury of new hardware, so creating a secondary DC and taking over from PDC is not an option. These are small networks so recreating the

Hello Rowland, I also tried that again. Even now I get exactly the same mistake again: DsAddEntry failed with status WERR_ACCESS_DENIED info (8363, 'WERR_DS_NO_CROSSREF_FOR_NC') To your question: I look after a number of clubs, e.g. to use a web application for time recording, to work partly on a terminal server, or to have an Exchange mailbox in the future. However, the Exchange

UNOFFICIAL Hi Rowland, How can I get these ldf files? I have now setup a lab-domain so I can try this out without fear of stuffing anything up. I believe that I now have finally completed upgrading from 2003 server to Samba 4 (fingers crossed). Thanks so much to everyone for your help and patience. Cheers Russell -----Original Message----- From: Rowland penny [mailto:rpenny at samba.org]

Hello Rowland, I have started again: - new Window Server 2012 R2 installed - DNS server set up - once again the Ubunut 18.04 freshly installed - entered the IP of the Windows server as DNS server - Installed the Samba Packet from the official Ubunut source: dpkg -l | grep samba ii python-samba 2:4.7.6+dfsg~ubuntu-0ubuntu2.11 amd64 Python bindings for Samba ii

Hi Russell, Ah, right, of course you can't create the msDS-PasswordSettingsContainer object on a 2003 schema. The code doesn't actually care what type of object the Password Settings Container is as long as it exists. So the simplest short-term kludge to get back to a working AD would be to create the PSO container as an object that does exist in your schema, e.g. ldbadd -H