similar to: Determine PDC

On 07/23/2019 03:16 PM, Rowland penny via samba wrote: > Did you actually read my last post ???? > > If you only transferred 5 of the roles, which of the SEVEN roles did > you not transfer ? My bad, I transferred all 7 roles: SchemaMasterRole owner: CN=NTDS Settings,CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com InfrastructureMasterRole

On 23/07/2019 21:11, Robert A Wooldridge wrote: > > > On 07/23/2019 03:09 PM, Rowland penny via samba wrote: >> A PDC doesn't have any FSMO roles, only an AD DC can hold FSMO roles >> and there are 7 of those: >> >> SchemaMaster >> InfrastructureMaster >> RidAllocationMaster >> PdcEmulationMaster >> DomainNamingMaster >>

I'm trying to do a backup of my DC and I get this error: samba-tool domain backup online --server=athena --targetdir=/opt ERROR(<type 'exceptions.IndexError'>): uncaught exception - list index out of range ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177, in _run ??? return self.run(*args, **kwargs) ? File

On my primary Samba AD DC server all work ok when doing online backup, but on my secudary server I have error: ERROR(<type 'exceptions.IndexError'>): uncaught exception - list index out of range ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177, in _run ??? return self.run(*args, **kwargs) ? File

In another thread on this list (https://lists.samba.org/archive/samba/2019-August/225607.html), Rowland suggested that the following command doesn't work ie it still requests the password: samba-tool domain backup online --targetdir=<output-dir> --server=<DC-server> -k yes However, I tried it out on one of my DCs and found it created the backup but failed at the end as this

Hi On a samba 4.10.7 executing a samba backup online I recieve this error: Partition[DC=ForestDnsZones,DC=domain,DC=com] objects[19/19] linked_values[0/0] Committing SAM database INFO 2019-09-23 00:14:25,262 pid:11552 /usr/local/samba/lib/python3.4/site-packages/samba/join.py #1652: Setting isSynchronized and dsServiceName INFO 2019-09-23 00:14:25,268 pid:11552

Hello, we want to backup the AD-database with the samba-tool backup-option. We use Sernet-packages 4.9.4 we have two DCs if I do the backup on the same DC I got the following messages: ----------------- root at dc-ste-01:~# samba-tool domain backup online --server=dc-ste-01 --targetdir=. -U administrator Password for [LF\administrator]: .... Committing SAM database Setting isSynchronized and

Hi, Just to reiterate an important point, the 'domain backup' command is there to backup your domain information, not your DC. If you still have a working domain, then you can recover any DC by simply rejoining it to the domain. Do not use backup/restore to recover an individual DC. If you want to recover your entire domain (i.e. power off all your DCs and start again from scratch),

Hai Tim, > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Tim > Beale via samba > Verzonden: donderdag 28 februari 2019 21:53 > Aan: Stefan Kania; samba at lists.samba.org > Onderwerp: Re: [Samba] samba-tool domain backup ERROR > > On 1/03/19 1:46 AM, Stefan Kania via samba wrote: > > > > .... > >

On 30.08.19 11:01, Andrew Bartlett wrote: > I'm very sorry to advise that this script is not race-free in the > locking done on the AD databases, which is why we have written the > 'samba-tool domain backup offline' tool which holds the correct locks. > > You should only need to back up the domain on one DC as long as you are > confident the DC is correctly

> 13 April 2016 at 16:49 > > Well, it sounds like you don't have a schema master, what does > 'samba-tool fsmo show' give as the owner for the SchemaMasterRole ? > > It might also help if you can give us an instance of what you are > trying to add to the schema. > > Rowland I had a SchemaMaster, it was the first DC and it showed it is the Master - but via

On 23/07/2019 21:21, Robert A Wooldridge via samba wrote: > On 07/23/2019 03:16 PM, Rowland penny via samba wrote: >> Did you actually read my last post ???? >> >> If you only transferred 5 of the roles, which of the SEVEN roles did >> you not transfer ? > My bad, I transferred all 7 roles: > SchemaMasterRole owner: CN=NTDS >

On 07/30/2019 03:08 AM, Rowland penny via samba wrote: > I have been thinking about this and reading the code that didn't get > run and I know think that the OP is at the point that existed before > 4.6.0, He possibly has missing records in AD, can I suggest he reads > this: > > https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record athena:~# host -t A

I'm trying to add an entry to dns.? The IP is external to the domain's IP's.? Here's the error: athena:~# samba-tool dns add athena.edm-inc.com smtp2.edm-inc.com smtp2 A 134.209.164.116 Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

I'm trying to join as a DC using Debian Buster and samba package (v4.9.5) and I'm getting this error when I attempt to join: > Could not find machine account in secrets database: Failed to fetch > machine account password for DOM from both secrets.ldb (Could not find > entry to match filter: '(&(flatname=DOM)(objectclass=primaryDomain))' > base: 'cn=Primary

On 07/25/2019 02:33 AM, Rowland penny via samba wrote: > On 24/07/2019 22:21, Robert A Wooldridge via samba wrote: >> I'm still trying to figure out of my samba DC which has received by >> transfer all 7 FSMO roles is actually doing DNS.? When I do this >> serverinfo command it fails: >> >> >> athena:~# samba-tool dns serverinfo athena > > Do you

On 07/25/2019 11:12 AM, L. van Belle via samba wrote: > Hai, > > I've had look at you posts. > Im missing a lot of info, might be me.. > But can you get this file and run it. > https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-i > nfo.sh I'm getting a 404 error on this link. -- Bob Wooldridge EDM Incorporated

I've just provisioned the new AD DC domain following the steps on the wiki.? Using Debian Buster but with samba and kerberos packages from unstable.? Everything seems fine but when I do (entering the password): smbclient //localhost/netlogon -UAdministrator -c 'ls'? I get: tree connect failed: NT_STATUS_BAD_NETWORK_NAME What could be the problem here? -- Bob Wooldridge EDM

Hai, Ok, below looks ok, as Rowland also said. But i have one more thing. > > ?????? Checking file: /etc/krb5.conf > > > > [libdefaults] > > ??? dns_lookup_realm = false > > ??? dns_lookup_kdc = true > > ??? default_realm = EDM-INC.COM > > ??? default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5 > > ??? default_tkt_enctypes =

On 07/17/2019 02:12 PM, Rowland penny via samba wrote: > On 17/07/2019 19:31, Robert A Wooldridge via samba wrote: >> Active Directory domain, the only DC is a Server 2003 machine. > Is the function level set to its highest level ? Apparently not.? It is set to Windows 2000 level.? It could be set to Server2003 level but it thinks that one of my file servers is a domain controller