similar to: DNS not working, samba not listening on port 53

I need to implement split horizon DNS, as I have just one external IP address (dynamic.lindenberg.one in external DNS) but multiple internal ones. External requests are distributed by port or using sniproxy (in particular 443), and all externally visible names are in a distinct zone then my domain, but with an additional indirection: names like backup.lindenberg.one resolve to CNAME

Following my questions in https://lists.samba.org/archive/samba/2019-July/224115.html and the lack of recent builds of Samba in Ubuntu, I started to build Samba on my own. I installed a new virtual machine with Ubuntu 18.04.2 (LTS) server (+ssh), installed docker and docker-compose, and then tried to build using the following Dockerfile: --- Dockerfile begin --- #

In installed a new DC (Samba 4.12.8 on Ubuntu 20.4) and initially everything appeared to work smoothly. Now I experience issues: DCDIAG /s:cobra.samba.lindenberg.one Directory Server Diagnosis Performing initial setup: [cobra.samba.lindenberg.one] LDAP bind failed with error 1326, The user name or password is incorrect.. With the other DC (still samba 4.11.14 on Ubuntu

Hi Rowland, i.e. we probably have to help Jeremy finding a setup that makes this reproducible. Seriously this implies it can be a difference in users, authorizations, linux, samba, or windows installation or configuration. I was testing with a user that is a domain administrator. I just tested with a non-admin-user, also crashes. My samba is 4.10.6 from Louis running on Ubuntu 18.04.2 running

Hi Tim, then I believe there is a bug. I did not specify the option and it used /etc/smb.conf rather than the correct /etc/samba/smb.conf. I was running a local backup on DC with Louis build 4.10.6 on ubuntu 18.04.2. Shall I open a ticket? Best Regards, Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Tim Beale via samba Gesendet:

On https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC#Online_DC_backup there is a comment ?you may want to specify a --configfile option so that the correct smb.conf settings get included in the backup.? Why does samba-tool not pick up the one it (or other parts of Samba) is compiled with automatically? Like `smbd -b | grep "CONFIGFILE" | sed -n -E

I set up a new windows machine and joined it to my existing domain (two Samba DCs). Now it turns out there is a computer in AD, but the associated DNS A/AAAA records of the new machine are missing. I already tried to leave and rejoin, but that didn?t fix the issue. Due to the long ACL I don?t really like the idea of creating the records manually. How can I fix or diagnose that situation?

You copied the certificate file?? Am 22. Juli 2019 12:46:34 MESZ schrieb Joachim Lindenberg <samba at lindenberg.one>: >Hi Stefan, >> pls show how you fixed it >See >https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory#Kerberos >for the test. My fix was to take the one generated on the newer DC also >to the older one. >Joachim --

I just upgraded one of my DCs ununtu 20.04 -> 22.04 and samba 4.18 -> 4.19, but the Dc is not yet working again. systemctl status samba-ad-dc shows: Dec 05 12:48:39 cobra samba[749]: [2023/12/05 12:48:39.562920, 0] ../../source4/samba/service_task.c:36(task_server_terminate) Dec 05 12:48:39 cobra samba[749]: task_server_terminate: task_server_terminate: [winbindd child process

Hi Joachim, > Op 15 feb 2024 om 23:09 heeft Joachim Lindenberg via samba <samba at lists.samba.org> het volgende geschreven: > > ?Hi Rowland, > No, I don?t have so many devices yet. Rowland believes that one should not use IPv6 internally. Many disagree. > But I know some organizations that want to switch to IPv6 consistently and you can rephrase my question to whether

On 26/10/2020 14:43, Joachim Lindenberg wrote: > > Hi Rowland, > > can I reset the machine password of the DC somehow? > > Thanks, Joachim > yes, see here: https://wiki.samba.org/index.php/Samba_Security_Documentation#Manual_roll-over Also, please do not send posts directly to me, only to the list. Rowland

I figured it out myself. The kerberos configuration on the old dc cobra was bad ? no clue why it worked at all until yesterday. After fixing it, testing with kinit, and restarting the dc processes it resumed replication. Joachim Von: Joachim Lindenberg <samba at lindenberg.one> Gesendet: Friday, 19 July 2019 16:54 An: samba at lists.samba.org Betreff: replication stuck? Until

Hello Rowland, If someone wants full_audit, will adding 'vfs objects = full_audit' on a DC also have dfs_samba4 and acl_xattr enabled just because running on a DC, or would this cause both defaults to be turned off? Thanks, Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland Penny via samba Gesendet: Montag, 21. August 2023

Hi Marco, anybody, > + must be 'privileged' container (no unprivileged ones) I have seen containers with and without calling for being privileged, but you never know without trying and testing carefully... Googling I found https://github.com/lxc/lxd/issues/3442#issuecomment-312560949 but I am not really clear about the conclusion. Does it really have to be privileged? Thanks & Best

Hi Kees, Thanks once more. To be precise: - you are running this on DCs? - no links required as on the wiki page? - "vfs objects = dfs_samba4, acl_xattr, full_audit" - I don?t have that in my smb.conf. What part(s) of this are default, required, or special? Thanks, Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Kees van

Ok, with the smb.conf change and then samba_dnsupdate --rpc-server-ip=192.168.177.19 --use-samba-tool --verbose I got no error messages. Shall I now revert the change? Monitor? At present samba_dnsupdate has nothing to do.. Thanks, Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland penny via samba Gesendet: Monday, 12 August

Hi Jeremy, this is what I do to get windows explorer (mine was a virtual machine windows 10 pro upgraded recently to 1903) to crash: - on samba DC, obtain your sysvol directory from /etc/samba/smb.conf and do a sudo mkdir <sysvoldir>/<domain>/test validate the directory has permissions like drwxrwx---+ 2 root root 4096 Jul 19 12:58 test. - on windows PC navigate to

On 7/4/19 12:49 PM, Joachim Lindenberg wrote: > * I am not (yet) familiar with LXD or nspawn. Do you have any pointer on how Samba DC works with LXD? > I've only used LXD for containerizing web applications so far.

Its fixed now. I'll add an extra test so this wont happen again. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > L.P.H. van Belle via samba > Verzonden: maandag 16 november 2020 8:57 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] Samba broken after dist-upgrade in > Ubuntu 20.04? >

Not sure what Bitlocker integration you are referring to. Saving bitlocker recovery keys does work for me with schema version 47. Regards, Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Paul Littlefield via samba Gesendet: Mittwoch, 20. M?rz 2024 18:14 An: samba at lists.samba.org Betreff: Re: [Samba] Raise Domain Level, Forest Level