similar to: Can't find machine account

On 07/17/2019 02:12 PM, Rowland penny via samba wrote: > On 17/07/2019 19:31, Robert A Wooldridge via samba wrote: >> Active Directory domain, the only DC is a Server 2003 machine. > Is the function level set to its highest level ? Apparently not.? It is set to Windows 2000 level.? It could be set to Server2003 level but it thinks that one of my file servers is a domain controller

On 07/17/2019 12:48 PM, Rowland penny via samba wrote: > > What are you trying to join to ? Active Directory domain, the only DC is a Server 2003 machine. > > Have you removed any existing smb.conf file ? Yes > > Can you post the contents of the following files: > > /etc/hostname athena > > /etc/hosts 127.0.0.1?????? localhost?????? localhost.localdomain

On 07/18/2019 10:20 AM, Rowland penny via samba wrote: > I think this could be one of your problems, not entirely sure, but I > think the minimum function level reliably required is 2003, you may > have to remove that fileserver. No joy.? I was able to demote that file server using: samba-tool domain demote -Uadministrator And then I promoted the DC to Server 2003 level.? But

After a quick look at this thread, yes, i suggest you add a new DC. I also suggest you read : First this one. https://github.com/thctlo/samba4/blob/master/howtos/stretch-base-1.1-checkup.txt Now you are joining a existing domain. Line 20, the resolv.conf, set the first name server to you windows DC, the second to the internet. Besides that, before you install samba do these checks. Next is

Guys, > On 10/02/2020 14:40, L.P.H. van Belle via samba wrote: >> @Rowland. >> >> I now see he only mailed me. >> Here you go.. > No, he emailed me as well, but I missed this: > samba-tool domain join domain.com DC -k yes --dns-backend NONE > --server=vm-dc1.domain.com > Why did he do that ? why no dns server ????? This is b/c we used to host AD zone on

On 18/07/19 7:12 AM, Rowland penny via samba wrote: > On 17/07/2019 19:31, Robert A Wooldridge via samba wrote: >> >> Here's the full error: >> >> Could not find machine account in secrets database: Failed to fetch >> machine account password for EDM from both secrets.ldb (Could not >> find entry to match filter: >>

On 07/18/2019 10:41 AM, Rowland penny via samba wrote: > > Anything from here on is nothing to do with your problem, it? is just > artefacts of the clean up. > > It seems to be failing whilst trying to add the 'A' record for your > new DC. > > Lets backtrack a little, I asked if the Windows DC was running a dns > server and you answered 'yes'. Lets

On 07/25/2019 02:33 AM, Rowland penny via samba wrote: > On 24/07/2019 22:21, Robert A Wooldridge via samba wrote: >> I'm still trying to figure out of my samba DC which has received by >> transfer all 7 FSMO roles is actually doing DNS.? When I do this >> serverinfo command it fails: >> >> >> athena:~# samba-tool dns serverinfo athena > > Do you

I'm trying to add an entry to dns.? The IP is external to the domain's IP's.? Here's the error: athena:~# samba-tool dns add athena.edm-inc.com smtp2.edm-inc.com smtp2 A 134.209.164.116 Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

On 07/30/2019 03:08 AM, Rowland penny via samba wrote: > I have been thinking about this and reading the code that didn't get > run and I know think that the OP is at the point that existed before > 4.6.0, He possibly has missing records in AD, can I suggest he reads > this: > > https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record athena:~# host -t A

Hai, Ok, below looks ok, as Rowland also said. But i have one more thing. > > ?????? Checking file: /etc/krb5.conf > > > > [libdefaults] > > ??? dns_lookup_realm = false > > ??? dns_lookup_kdc = true > > ??? default_realm = EDM-INC.COM > > ??? default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5 > > ??? default_tkt_enctypes =

I put samba on my network last week as a DC and then I transfered all 5 FSMO roles which I thought made it the PDC.? But now I'm not sure because trying to do a backup fails.? Is there a way to determine which machine is the PDC of a domain? -- Bob Wooldridge EDM Incorporated

On 07/25/2019 11:12 AM, L. van Belle via samba wrote: > Hai, > > I've had look at you posts. > Im missing a lot of info, might be me.. > But can you get this file and run it. > https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-i > nfo.sh I'm getting a 404 error on this link. -- Bob Wooldridge EDM Incorporated

I'm still trying to figure out of my samba DC which has received by transfer all 7 FSMO roles is actually doing DNS.? When I do this serverinfo command it fails: athena:~# samba-tool dns serverinfo athena Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

I've just provisioned the new AD DC domain following the steps on the wiki.? Using Debian Buster but with samba and kerberos packages from unstable.? Everything seems fine but when I do (entering the password): smbclient //localhost/netlogon -UAdministrator -c 'ls'? I get: tree connect failed: NT_STATUS_BAD_NETWORK_NAME What could be the problem here? -- Bob Wooldridge EDM

On 07/23/2019 03:16 PM, Rowland penny via samba wrote: > Did you actually read my last post ???? > > If you only transferred 5 of the roles, which of the SEVEN roles did > you not transfer ? My bad, I transferred all 7 roles: SchemaMasterRole owner: CN=NTDS Settings,CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com InfrastructureMasterRole

On 07/25/2019 10:36 AM, Rowland penny via samba wrote: > This probably means that you do not have the libnss-winbind links > and/or /etc/nsswitch.conf set up to return AD users (this is not > required on a DC, only if you want to use the DC as a fileserver). Not using it as a file server.? So back to the original question which is why am I getting a serverinfo error: athena:~#

Hai, I had a quick look. Barry, can you get this script and run it. https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-info.sh Then post the results to the list. It collects all info i need to have a better look. I have a few ideas, this might be a resolving order problem, i've based on the errors below. Can you also post the output of bind from the point its

On 07/18/2019 11:04 AM, Rowland penny via samba wrote: > I have never had to deal with a W2K AD server, but from my > understanding W2K didn't have the DNS records in AD, so I wondered if > yours didn't either. I am running out of ideas now. > > Have you tried Tim's patch ? > > Just in case you don't know how to apply the patch, it is pretty > simple, it

Ok, I successfully added a couple of machines to DNS using samba-tool but when I query with host they are not there. Here's the command line that I used: samba-tool dns add ads1.edm-inc.com edm-inc.com smtp A 10.10.1.215 It asks for the domain admin password and returns successfully. But doing a host smtp returns nothing. Any ideas? -- Bob Wooldridge EDM Incorporated