similar to: SPN on Member Server

Hello you all, I did some more tests used Samba 4.10.4 and still the same Problem. I also upgraded all the DCs and the problem is the same on all of them. Downgraded all of the an problem is gone. I went up to loglevel 5 an saw nothing that was related. How do I debug further? @rowland: I wrote to bugzilla-maintenance at samba.org to get an bugzilla account but haven't gotten any feedback.

Hello Cristian, Well, nothing to say about your steps, these looks good. And lmdb could be disable in the sernet packages, cant say, i dont know. And only one DC has these problems or all? If only one DC crashed. Which DC crashes. Last added? Oldest? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian

Am 16.04.20 um 14:18 schrieb Rowland penny via samba: > On 16/04/2020 12:45, Christian Naumer via samba wrote: >> Hello alAl, >> after update of our test server to 4.12.1 from 4.11 it crashes. If the >> vfs module is removed from the config everthing works as before. > > The only change was to upgrade to 4.12.1 ? > > If there were no other changes, then Samba

Am 20.05.19 um 15:34 schrieb Rowland penny via samba: > On 20/05/2019 14:02, Christian Naumer via samba wrote: >> Am 20.05.19 um 14:31 schrieb Rowland penny via samba: >>> Samba 4.10.0 was the first version that works with python3 and whilst >>> this may not have a bearing on your problem, is python3 installed. >> No python3 is installed. I would also saume that

Am 18.03.20 um 22:26 schrieb Andrew Bartlett: >> Also "samba-tool domain tombstones expunge --tombstone-lifetime=0" >> does >> not delete the records with "dNSTombstoned: TRUE". Is this a >> different >> tombstone? > > That would be a different tombstone, yes. Can someone help me out with the ldap/ldb syntax to delte those by cron? >

Am 06.05.19 um 16:06 schrieb Rowland Penny via samba: > Yes, user 'vincent' has uidNumber 10010, gidNumber 13010 and > primaryGroupID 513. > > 513 corresponds to the group "Domain Users", which have gidNumber > 13010 > > Vincent Might this be the problem? He has primaryGroupID set to 513 (hello calssicupgrade?) but "Domain Users" hast a gid of

Hello all, we have upgraded our 4 DCs from samba 4.4.12 to 4.6.3. The setup is working fine and no errors were displayed during the upgrade. After a day I noticed that the DC (dc1) holding the fsmo roles is missing one kcc connection (to dc3) in the output of samba-tool drs showrpl. Otherwise there are no errors displayed. On windows in the ADSites tool I see that the connection is missing and I

Hello Christian, Ive had a quick look at you output, that looks pretty normal. I'll have a good look Friday, tomorrow day off. So my suggestion is post the output to the list but -d10 is not needed. The regular output should be sufficiant. Im wondering why there is no dc3 in kcc also but why i see over 15 RPC sessions. Maybe normal maybe not, this i dont know. Greetz, Louis >

Am 20.05.19 um 14:31 schrieb Rowland penny via samba: > Samba 4.10.0 was the first version that works with python3 and whilst > this may not have a bearing on your problem, is python3 installed. No python3 is installed. I would also saume that sernet would pull in python3 if needed (this did not happen). > > Of course this may not be a problem if the Sernet packages have been >

Am 20.05.19 um 11:59 schrieb Rowland penny via samba: >>          logging =syslog only > > Why do you have a parameter with another parameter as its value ? > > both 'logging' and 'syslog only' are both parameters, did you mean > 'logging = syslog' ? Yes I meant this "logging = syslog" > >>          server role = active

Hello Christian, Can you post me the message you got from the samba-check-db-repl.sh, Then i'll add something for it. And can you tell with version nummer of the script your using. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian Naumer via samba > Verzonden: woensdag 10 mei 2017 9:30 > Aan:

Hi, I am trying to implement bitlocker key management in samba4 ad. This has been posted a view times before: https://lists.samba.org/archive/samba/2015-December/196771.html https://lists.samba.org/archive/samba/2018-July/217168.html According to Andrew and this: https://docs.microsoft.com/en-us/previous-versions/orphan-topics/ws.10/cc722309(v=ws.10) the Schema should be ready for this.

Hello you all, I have a general question. How do you guys handle the PTR record in AD if the workstations update their own records? The A record is no problem as this contains the name and is onyl updated by the corresponding machine. However, the PTR record could be tried to update by a different machine if that IP has been passed to a different machine by DHCP. With windows AD with scavenging of

Am 20.05.19 um 12:28 schrieb Rowland penny via samba: > On 20/05/2019 11:19, Christian Naumer via samba wrote: >> Am 20.05.19 um 11:59 schrieb Rowland penny via samba: >> >>>>           logging =syslog only >>> Why do you have a parameter with another parameter as its value ? >>> >>> both 'logging' and 'syslog only' are both

Hello you all, this is a bit OT but I think I'll find some people here that can help. We have 4 DCs all on the same site. This is working fine. 3 Are VMs one is a physical server. They are the only DNS servers in that network. On a member server running our icinga2 installation I have this in the resolv.conf: options rotate timeout:2 retries:1 search example.com nameserver x.x.x.x (ip dc1)

Hello all, I have a weird problem. We have several Windows 10 machines on our Network. All but one run older releases than 1709. We are using roaming profiles on those machines. The share is setup up as to allow different profiles depending on the machine used (see below). The %a is used as a legacy from times where WinXP and Win7 were used in parallel. The path then looks like this:

Am 30.08.19 um 13:09 schrieb L.P.H. van Belle via samba: > Now Christian, this failes for me. > radtest -t mschap 'NTDOM\username" 'passwd' localhost 0 testing > ( MS-CHAP-Error = "\000E=691 R=1 C=58f41f1a946ac94a V=2") > > So my question here is, are the username at REALM logins also working for you. > And are you using in smb.conf : winbind use

Hello all, as the "profile acls = Yes" option has become deprecated in Samba 4.7 I wanted to ask what the preferred way is of doing this? The Wiki (https://wiki.samba.org/index.php/Roaming_Windows_User_Profiles) still uses "profile acls = Yes" when using posix acls. At the moment our share looks like this: [profiles] profile acls = Yes csc policy = disable

So strange.. I copied your commando's only change the arpa and servername / domainnames All worked. So far nobody told how there ad-dc and DNS is setup.. Which i why i added : > > Debian 10, my own packages. > > Samba 4.11.6 + BIND9_DLZ is used . Now are you using samba DNS or BIND_DLZ dns ? That might help here. Greetz, Louis > -----Oorspronkelijk

Hello you all, with the new samba version out that fixes some problems with dns scavenging I have decided to try this feature. I was specifically interested for our reverse zone (PTR records) We have one zone for VPN clients 8.0.10.in-addr.arpa. I activated the feature in the smb.conf as well as in the Windows DNS manager. Entries are deleted (not visible in DNS manager) after a while. You can