similar to: New Domain can't connect to localhost

On 07/25/2019 11:12 AM, L. van Belle via samba wrote: > Hai, > > I've had look at you posts. > Im missing a lot of info, might be me.. > But can you get this file and run it. > https://raw.githubusercontent.com/thctlo/samba4/master/samba-collect-debug-i > nfo.sh I'm getting a 404 error on this link. -- Bob Wooldridge EDM Incorporated

Hai, Ok, below looks ok, as Rowland also said. But i have one more thing. > > ?????? Checking file: /etc/krb5.conf > > > > [libdefaults] > > ??? dns_lookup_realm = false > > ??? dns_lookup_kdc = true > > ??? default_realm = EDM-INC.COM > > ??? default_tgs_enctypes = arcfour-hmac-md5 des-cbc-crc des-cbc-md5 > > ??? default_tkt_enctypes =

Hai, A quick reply, i was almost out of the office here.. Your config looks ok except one thing. You can try switching the hosts, like this. /etc/nsswitch.conf hosts:????????? files dns mdns4_minimal [NOTFOUND=return] I suggest you verify the dns A PTR NS records of the servers. https://wiki.samba.org/index.php/DNS_Administration

Hai, Ok, below looks ok, except in dont see the search domain in the networkctl output. Which is possible, if you configured your interfaces through /etc/network/interfaces Im still amazed its not working.. Everything looks good. We are missing a bit info why/how/what/where. Short resume. Your on debian Buster official samba correct? ( samba 4.9.5 ) and your using internal DNS. Configs

I'm trying to join as a DC using Debian Buster and samba package (v4.9.5) and I'm getting this error when I attempt to join: > Could not find machine account in secrets database: Failed to fetch > machine account password for DOM from both secrets.ldb (Could not find > entry to match filter: '(&(flatname=DOM)(objectclass=primaryDomain))' > base: 'cn=Primary

On 07/30/2019 03:08 AM, Rowland penny via samba wrote: > I have been thinking about this and reading the code that didn't get > run and I know think that the OP is at the point that existed before > 4.6.0, He possibly has missing records in AD, can I suggest he reads > this: > > https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record athena:~# host -t A

On 07/25/2019 10:36 AM, Rowland penny via samba wrote: > This probably means that you do not have the libnss-winbind links > and/or /etc/nsswitch.conf set up to return AD users (this is not > required on a DC, only if you want to use the DC as a fileserver). Not using it as a file server.? So back to the original question which is why am I getting a serverinfo error: athena:~#

On 07/17/2019 02:12 PM, Rowland penny via samba wrote: > On 17/07/2019 19:31, Robert A Wooldridge via samba wrote: >> Active Directory domain, the only DC is a Server 2003 machine. > Is the function level set to its highest level ? Apparently not.? It is set to Windows 2000 level.? It could be set to Server2003 level but it thinks that one of my file servers is a domain controller

On 07/25/2019 02:33 AM, Rowland penny via samba wrote: > On 24/07/2019 22:21, Robert A Wooldridge via samba wrote: >> I'm still trying to figure out of my samba DC which has received by >> transfer all 7 FSMO roles is actually doing DNS.? When I do this >> serverinfo command it fails: >> >> >> athena:~# samba-tool dns serverinfo athena > > Do you

I'm trying to add an entry to dns.? The IP is external to the domain's IP's.? Here's the error: athena:~# samba-tool dns add athena.edm-inc.com smtp2.edm-inc.com smtp2 A 134.209.164.116 Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

On 07/18/2019 10:20 AM, Rowland penny via samba wrote: > I think this could be one of your problems, not entirely sure, but I > think the minimum function level reliably required is 2003, you may > have to remove that fileserver. No joy.? I was able to demote that file server using: samba-tool domain demote -Uadministrator And then I promoted the DC to Server 2003 level.? But

On 07/25/2019 11:35 AM, Rowland penny via samba wrote: > Well, 'WERR' is short for 'Windows Error' (I think) and > 'DNS_ERROR_DS_UNAVAILABLE' is supposed to mean that the Directory > Service is unavailable. Is something getting in the way (Apparmor, > Selinux, a firewall etc). Is Samba actually running ? Are you using > Bind9, if so, is it running and set

I put samba on my network last week as a DC and then I transfered all 5 FSMO roles which I thought made it the PDC.? But now I'm not sure because trying to do a backup fails.? Is there a way to determine which machine is the PDC of a domain? -- Bob Wooldridge EDM Incorporated

I'm still trying to figure out of my samba DC which has received by transfer all 7 FSMO roles is actually doing DNS.? When I do this serverinfo command it fails: athena:~# samba-tool dns serverinfo athena Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File

On 07/23/2019 03:16 PM, Rowland penny via samba wrote: > Did you actually read my last post ???? > > If you only transferred 5 of the roles, which of the SEVEN roles did > you not transfer ? My bad, I transferred all 7 roles: SchemaMasterRole owner: CN=NTDS Settings,CN=ATHENA,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=edm-inc,DC=com InfrastructureMasterRole

I got it. Thanks. The share is working. Only problem, I need some files to be only readable for the end user (templates) the problem is windows doesn't for some reason allow me to change the rights. I am using dutch windows so the error is dutch but translated it say. Can't connect/find active directory to verify or open claimtypes. Philip "Rowland penny via samba" <samba at

Ok, I successfully added a couple of machines to DNS using samba-tool but when I query with host they are not there. Here's the command line that I used: samba-tool dns add ads1.edm-inc.com edm-inc.com smtp A 10.10.1.215 It asks for the domain admin password and returns successfully. But doing a host smtp returns nothing. Any ideas? -- Bob Wooldridge EDM Incorporated

I'm setting up a domain member with Debian bust ADC and a Debian bust domain member.? I've got a windows machine that has joined the domain and I can login to it. The Debian domain member is throwing a DNS error when I do net ads join -Uadministrator: net ads join -Uadministrator Enter administrator's password: kinit succeeded but ads_sasl_spnego_gensec_bind(KRB5) failed for

On 07/25/2019 10:10 AM, Rowland penny via samba wrote: > How are you logging in to the DC and who as ? > > If I login as the user 'rowland' to one of my DCs I get this prompt: > > SAMDOM\rowland at dc4:~$ > > If I login as root, I get this: > > root at dc4:~# > > Your prompt is: > > athena:~# > > Which I think means you are doing this as

On 07/30/2019 09:15 AM, Rowland penny via samba wrote: > This is getting weird, anything and everything seems to be working > except for Serverinfo ??????? The other DC is Windows Server 2003, does that make any difference? Adding a DNS entry also fails: athena:~# samba-tool dns add athena edm-inc.com smtp A 10.10.1.9 ERROR(runtime): uncaught exception - (9717,