similar to: Trusted for delegation?

I'm trying to add an entry to dns.? The IP is external to the domain's IP's.? Here's the error: athena:~# samba-tool dns add athena.edm-inc.com smtp2.edm-inc.com smtp2 A 134.209.164.116 Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

On 07/25/2019 02:33 AM, Rowland penny via samba wrote: > On 24/07/2019 22:21, Robert A Wooldridge via samba wrote: >> I'm still trying to figure out of my samba DC which has received by >> transfer all 7 FSMO roles is actually doing DNS.? When I do this >> serverinfo command it fails: >> >> >> athena:~# samba-tool dns serverinfo athena > > Do you

On 07/30/2019 03:08 AM, Rowland penny via samba wrote: > I have been thinking about this and reading the code that didn't get > run and I know think that the OP is at the point that existed before > 4.6.0, He possibly has missing records in AD, can I suggest he reads > this: > > https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record athena:~# host -t A

On 07/17/2019 02:12 PM, Rowland penny via samba wrote: > On 17/07/2019 19:31, Robert A Wooldridge via samba wrote: >> Active Directory domain, the only DC is a Server 2003 machine. > Is the function level set to its highest level ? Apparently not.? It is set to Windows 2000 level.? It could be set to Server2003 level but it thinks that one of my file servers is a domain controller

On 07/23/2019 03:16 PM, Rowland penny via samba wrote: > Did you actually read my last post ???? > > If you only transferred 5 of the roles, which of the SEVEN roles did > you not transfer ? My bad, I transferred all 7 roles: SchemaMasterRole owner: CN=NTDS Settings,CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com InfrastructureMasterRole

I'm still trying to figure out of my samba DC which has received by transfer all 7 FSMO roles is actually doing DNS.? When I do this serverinfo command it fails: athena:~# samba-tool dns serverinfo athena Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

Ok, I successfully added a couple of machines to DNS using samba-tool but when I query with host they are not there. Here's the command line that I used: samba-tool dns add ads1.edm-inc.com edm-inc.com smtp A 10.10.1.215 It asks for the domain admin password and returns successfully. But doing a host smtp returns nothing. Any ideas? -- Bob Wooldridge EDM Incorporated

I'm setting up a domain member with Debian bust ADC and a Debian bust domain member.? I've got a windows machine that has joined the domain and I can login to it. The Debian domain member is throwing a DNS error when I do net ads join -Uadministrator: net ads join -Uadministrator Enter administrator's password: kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed for

On 07/25/2019 10:10 AM, Rowland penny via samba wrote: > How are you logging in to the DC and who as ? > > If I login as the user 'rowland' to one of my DCs I get this prompt: > > SAMDOM\rowland at dc4:~$ > > If I login as root, I get this: > > root at dc4:~# > > Your prompt is: > > athena:~# > > Which I think means you are doing this as

On 07/30/2019 09:15 AM, Rowland penny via samba wrote: > This is getting weird, anything and everything seems to be working > except for Serverinfo ??????? The other DC is Windows Server 2003, does that make any difference? Adding a DNS entry also fails: athena:~# samba-tool dns add athena edm-inc.com smtp A 10.10.1.9 ERROR(runtime): uncaught exception - (9717,

I put samba on my network last week as a DC and then I transfered all 5 FSMO roles which I thought made it the PDC.? But now I'm not sure because trying to do a backup fails.? Is there a way to determine which machine is the PDC of a domain? -- Bob Wooldridge EDM Incorporated

I'm trying to join as a DC using Debian Buster and samba package (v4.9.5) and I'm getting this error when I attempt to join: > Could not find machine account in secrets database: Failed to fetch > machine account password for DOM from both secrets.ldb (Could not find > entry to match filter: '(&(flatname=DOM)(objectclass=primaryDomain))' > base: 'cn=Primary

Hai, Ok, below looks ok, as Rowland also said. But i have one more thing. > > ?????? Checking file: /etc/krb5.conf > > > > [libdefaults] > > ??? dns_lookup_realm = false > > ??? dns_lookup_kdc = true > > ??? default_realm = EDM-INC.COM > > ??? default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5 > > ??? default_tkt_enctypes =

On 07/18/2019 10:20 AM, Rowland penny via samba wrote: > I think this could be one of your problems, not entirely sure, but I > think the minimum function level reliably required is 2003, you may > have to remove that fileserver. No joy.? I was able to demote that file server using: samba-tool domain demote -Uadministrator And then I promoted the DC to Server 2003 level.? But

On 07/25/2019 10:36 AM, Rowland penny via samba wrote: > This probably means that you do not have the libnss-winbind links > and/or /etc/nsswitch.conf set up to return AD users (this is not > required on a DC, only if you want to use the DC as a fileserver). Not using it as a file server.? So back to the original question which is why am I getting a serverinfo error: athena:~#

On 07/25/2019 11:12 AM, L. van Belle via samba wrote: > Hai, > > I've had look at you posts. > Im missing a lot of info, might be me.. > But can you get this file and run it. > https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-i > nfo.sh I'm getting a 404 error on this link. -- Bob Wooldridge EDM Incorporated

I've just provisioned the new AD DC domain following the steps on the wiki.? Using Debian Buster but with samba and kerberos packages from unstable.? Everything seems fine but when I do (entering the password): smbclient //localhost/netlogon -UAdministrator -c 'ls'? I get: tree connect failed: NT_STATUS_BAD_NETWORK_NAME What could be the problem here? -- Bob Wooldridge EDM

On 07/18/2019 10:41 AM, Rowland penny via samba wrote: > > Anything from here on is nothing to do with your problem, it? is just > artefacts of the clean up. > > It seems to be failing whilst trying to add the 'A' record for your > new DC. > > Lets backtrack a little, I asked if the Windows DC was running a dns > server and you answered 'yes'. Lets

Hai, Ok, below looks ok, except in dont see the search domain in the networkctl output. Which is possible, if you configured your interfaces through /etc/network/interfaces Im still amazed its not working.. Everything looks good. We are missing a bit info why/how/what/where. Short resume. Your on debian Buster official samba correct? ( samba 4.9.5 ) and your using internal DNS. Configs

On 07/17/2019 12:48 PM, Rowland penny via samba wrote: > > What are you trying to join to ? Active Directory domain, the only DC is a Server 2003 machine. > > Have you removed any existing smb.conf file ? Yes > > Can you post the contents of the following files: > > /etc/hostname athena > > /etc/hosts 127.0.0.1?????? localhost?????? localhost.localdomain