similar to: DNS entry added but not there

On 07/30/2019 03:08 AM, Rowland penny via samba wrote: > I have been thinking about this and reading the code that didn't get > run and I know think that the OP is at the point that existed before > 4.6.0, He possibly has missing records in AD, can I suggest he reads > this: > > https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record athena:~# host -t A

I'm trying to join as a DC using Debian Buster and samba package (v4.9.5) and I'm getting this error when I attempt to join: > Could not find machine account in secrets database: Failed to fetch > machine account password for DOM from both secrets.ldb (Could not find > entry to match filter: '(&(flatname=DOM)(objectclass=primaryDomain))' > base: 'cn=Primary

I'm trying to add an entry to dns.? The IP is external to the domain's IP's.? Here's the error: athena:~# samba-tool dns add athena.edm-inc.com smtp2.edm-inc.com smtp2 A 134.209.164.116 Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

Hai, Ok, below looks ok, except in dont see the search domain in the networkctl output. Which is possible, if you configured your interfaces through /etc/network/interfaces Im still amazed its not working.. Everything looks good. We are missing a bit info why/how/what/where. Short resume. Your on debian Buster official samba correct? ( samba 4.9.5 ) and your using internal DNS. Configs

On 07/25/2019 11:12 AM, L. van Belle via samba wrote: > Hai, > > I've had look at you posts. > Im missing a lot of info, might be me.. > But can you get this file and run it. > https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-i > nfo.sh I'm getting a 404 error on this link. -- Bob Wooldridge EDM Incorporated

On 07/25/2019 02:33 AM, Rowland penny via samba wrote: > On 24/07/2019 22:21, Robert A Wooldridge via samba wrote: >> I'm still trying to figure out of my samba DC which has received by >> transfer all 7 FSMO roles is actually doing DNS.? When I do this >> serverinfo command it fails: >> >> >> athena:~# samba-tool dns serverinfo athena > > Do you

On 07/17/2019 12:48 PM, Rowland penny via samba wrote: > > What are you trying to join to ? Active Directory domain, the only DC is a Server 2003 machine. > > Have you removed any existing smb.conf file ? Yes > > Can you post the contents of the following files: > > /etc/hostname athena > > /etc/hosts 127.0.0.1?????? localhost?????? localhost.localdomain

On 07/17/2019 02:12 PM, Rowland penny via samba wrote: > On 17/07/2019 19:31, Robert A Wooldridge via samba wrote: >> Active Directory domain, the only DC is a Server 2003 machine. > Is the function level set to its highest level ? Apparently not.? It is set to Windows 2000 level.? It could be set to Server2003 level but it thinks that one of my file servers is a domain controller

Hai, Ok, below looks ok, as Rowland also said. But i have one more thing. > > ?????? Checking file: /etc/krb5.conf > > > > [libdefaults] > > ??? dns_lookup_realm = false > > ??? dns_lookup_kdc = true > > ??? default_realm = EDM-INC.COM > > ??? default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5 > > ??? default_tkt_enctypes =

On 07/30/2019 09:15 AM, Rowland penny via samba wrote: > This is getting weird, anything and everything seems to be working > except for Serverinfo ??????? The other DC is Windows Server 2003, does that make any difference? Adding a DNS entry also fails: athena:~# samba-tool dns add athena edm-inc.com smtp A 10.10.1.9 ERROR(runtime): uncaught exception - (9717,

On 07/23/2019 03:16 PM, Rowland penny via samba wrote: > Did you actually read my last post ???? > > If you only transferred 5 of the roles, which of the SEVEN roles did > you not transfer ? My bad, I transferred all 7 roles: SchemaMasterRole owner: CN=NTDS Settings,CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com InfrastructureMasterRole

I'm still trying to figure out of my samba DC which has received by transfer all 7 FSMO roles is actually doing DNS.? When I do this serverinfo command it fails: athena:~# samba-tool dns serverinfo athena Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

I'm setting up a domain member with Debian bust ADC and a Debian bust domain member.? I've got a windows machine that has joined the domain and I can login to it. The Debian domain member is throwing a DNS error when I do net ads join -Uadministrator: net ads join -Uadministrator Enter administrator's password: kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed for

On 07/25/2019 10:10 AM, Rowland penny via samba wrote: > How are you logging in to the DC and who as ? > > If I login as the user 'rowland' to one of my DCs I get this prompt: > > SAMDOM\rowland at dc4:~$ > > If I login as root, I get this: > > root at dc4:~# > > Your prompt is: > > athena:~# > > Which I think means you are doing this as

I put samba on my network last week as a DC and then I transfered all 5 FSMO roles which I thought made it the PDC.? But now I'm not sure because trying to do a backup fails.? Is there a way to determine which machine is the PDC of a domain? -- Bob Wooldridge EDM Incorporated

On 07/18/2019 10:20 AM, Rowland penny via samba wrote: > I think this could be one of your problems, not entirely sure, but I > think the minimum function level reliably required is 2003, you may > have to remove that fileserver. No joy.? I was able to demote that file server using: samba-tool domain demote -Uadministrator And then I promoted the DC to Server 2003 level.? But

On 08/21/2019 02:02 AM, L.P.H. van Belle via samba wrote: > Try this command: > samba-tool domain join edm-inc.com DC \ > --server=server.fqdn.here \ # << AD-DC server with FSMO roles > --realm=EDM-INC.COM > --dns-backend=SAMBA_INTERNAL \ # if your running with bind9, --dns-backend=BIND9_DLZ > --option='idmap_ldb:use rfc2307 = yes' \ >

On 07/25/2019 10:36 AM, Rowland penny via samba wrote: > This probably means that you do not have the libnss-winbind links > and/or /etc/nsswitch.conf set up to return AD users (this is not > required on a DC, only if you want to use the DC as a fileserver). Not using it as a file server.? So back to the original question which is why am I getting a serverinfo error: athena:~#

I've just provisioned the new AD DC domain following the steps on the wiki.? Using Debian Buster but with samba and kerberos packages from unstable.? Everything seems fine but when I do (entering the password): smbclient //localhost/netlogon -UAdministrator -c 'ls'? I get: tree connect failed: NT_STATUS_BAD_NETWORK_NAME What could be the problem here? -- Bob Wooldridge EDM

On 30/07/2019 15:04, Robert A Wooldridge via samba wrote: > On 07/30/2019 03:08 AM, Rowland penny via samba wrote: >> I have been thinking about this and reading the code that didn't get >> run and I know think that the OP is at the point that existed before >> 4.6.0, He possibly has missing records in AD, can I suggest he reads >> this: >> >>