similar to: Cloning from a backup: unable to reach any KDC in realm

Andrew Bartlett wrote: > Don Kuenz wrote: >> >> Greetings, >> >> This post pertains to a Disaster Recovery (DR) scenario on a Samba 4.8 >> server. The DR server was provisioned as a standalone host, on a >> network isolated from the Production Server (PS). >> The DR's /var/db/samba4 directory, which contains the private >> directory,

On 15/11/2019 20:16, Don Kuenz via samba wrote: > > Greetings, > > This post pertains to a Disaster Recovery (DR) scenario on a Samba 4.8 > server. The DR server was provisioned as a standalone host, on a Just what do you mean by 'provisioned as a standalone host' ? Do you mean 'samba-tool domain provision --server-role=standalone' ? Rowland

UNCLASSIFIED I built another PC using Centos7 and samba 4.1.7. This got further but gave a segmentation fault. On successive runs, I got: Your filesystem or build does not support posix ACLs, which s3f3 requires. (This is BS) So I tried the next version that I had downloaded 4.3.3. With this I was able to successfully join the domain. I am thinking to: 1) seize roles with samba 3.3 server 2)

Greetings, The process to join a new samba 4.6 DC to an existing samba 4.1 DC repeatedly caused: samba_dnsupdate --verbose --all-names to fail on the new DC with: Failed to connect host x.x.x.x on port 49152 - NT_STATUS_CONNECTION_REFUSED Noted: both samba versions are obsolete and will be updated post haste. Regardless, samba_dnsupdate was accidentally invoked on the new DC while the

On Fri, 2019-05-31 at 06:21 +0000, Thamm, Russell via samba wrote: > UNCLASSIFIED > > Hi Andrew and Roland, > > I originally installed samba-4.1.7 on CentOS 6.5. I successfully joined the domain. I intended to take over from the 2003 server but because the domain was being heavily used, I delayed seizing the roles. > > Now I really, really want to replace the 2003 server.

Rowland Penny via samba <samba at lists.samba.org> wrote: > On 09 Dec 2016 21:52:39 UTC > Don via samba <samba at lists.samba.org> wrote: > >> Greetings, >> >> The backup and restore Samba AD DC section of SambaWiki [1] refers to >> ./source4/scripting/bin/samba_backup . Although my recent version of >> samba_backup uses tdbbackup on ldb files, it

im betting here on a smb.conf that was not 4.6 compliant. port 49152 is not related i my opinion. is there a firewall running? the dynamic port range changed from a low range to high. Greetz Louis Op 17 mrt. 2019, om 22:36, Rowland Penny via samba <samba at lists.samba.org> schreef: On 17 Mar 2019 20:44:12 UTC Don Kuenz via samba <samba at lists.samba.org> wrote:

On https://wiki.samba.org/index.php/Back_up_and_Restoring_a_Samba_AD_DC#Online_DC_backup there is a comment ?you may want to specify a --configfile option so that the correct smb.conf settings get included in the backup.? Why does samba-tool not pick up the one it (or other parts of Samba) is compiled with automatically? Like `smbd -b | grep "CONFIGFILE" | sed -n -E

Hi, I have an issues that involves KDC, it is quite complex so I'll try to be really specific. I was running Samba42 with a secondary server replicating all was working fine. After we upgrade to Samba43 we start with the issues: 1. Replication wasn't working anymore error (WERR_LOGON_FAILURE) 2. Kerberos is also broken. On the Primary DC wouldn't allow me to to a kinit

I had freshly installed an Ubuntu Server 12.04lts and Samba 4.0.1 using the internal DNS. I followed the official HowTo until "kinit administrator at DOMAIN.LOCAL" It didn't work (cannot contact any kdc...) A "netstat" showed that "avahi-daemon" was running at: 807/avahi-daemon: r udp 0 0 10.0.0.20:389 0.0.0.0:* After removing that package

On Wed, 18 Jul 2018 23:21:41 +0200 Anton Blau via samba <samba at lists.samba.org> wrote: > Am 18.07.2018 um 14:17 schrieb Rowland Penny via samba: > > On Wed, 18 Jul 2018 13:49:39 +0200 > > Anton Blau via samba <samba at lists.samba.org> wrote: > > > > Hmm, your REALM is 'SMBDOMAIN.FILE.DUCK' but your dnsdomain appears > > to be just

On Thu, 19 Jul 2018 17:33:46 +0200 Anton Blau via samba <samba at lists.samba.org> wrote: > Am 19.07.2018 um 10:03 schrieb Rowland Penny via samba: > > On Wed, 18 Jul 2018 23:21:41 +0200 > > Anton Blau via samba <samba at lists.samba.org> wrote: > > > >> Am 18.07.2018 um 14:17 schrieb Rowland Penny via samba: > >> > > It is touched on here:

On 12/08/2020 02:28, Alfonso Conner via samba wrote: > Hello Samba Community, > > I would like to seek advice as my Samba AD tends to consume high memory > usage caused by KDC service. > This issue will always come back within a couple of days after I restart > samba-ad-dc service. > It does not help by increasing memory. > > From message log: > kernel: Out of

Hi list: I joined Samba4.1.7 to Windows2k3 R2 domain, when I run: *samba_dnsupdate --verbose --all-names* IPs: ['192.168.186.137'] Skipping PDC entry (SRV _ldap._tcp.pdc._msdcs.${DNSDOMAIN} ${HOSTNAME} 389) as we are not a PDC Skipping PDC entry (SRV _ldap._tcp.pdc._msdcs.${DNSFOREST} ${HOSTNAME} 389) as we are not a PDC Traceback (most recent call

Version 4.0.0alpha18-GIT-957ec28 After starting samba -i -d3, wbinfo -i someuser gives this: ldb_wrap open of secrets.ldb using SPNEGO Selected protocol [8][NT LANMAN 1.0] Cannot reach a KDC we require to contact cifs/hh3.site at SITE : kinit for HH3$@SITE failed (Cannot contact any KDC for requested realm) SPNEGO(gssapi_krb5) NEG_TOKEN_INIT failed: NT_STATUS_NO_LOGON_SERVERS ldb_wrap open of

> It looks like you have built Samba yourself, Yes. I followed the guide and built Samba myself. > so did you run this script: https://git.samba.org/?p=samba.git;a=blob_plain;f=bootstrap/generated-dists/centos7/bootstrap.sh;hb=master >Before you built Samba ? No. I was not aware of this step. >Have you installed and started 'krb5-server' ? No. I have checked and only

Hai, I dont think its over functional, it includes everything you need for a good AD DC backup. This is about the minimal you should backup for an AD DC. If you want to backup samba when turned off. You need at least: /etc/samba /var/lib/samba /var/cache/samba /etc/krb* Check if sysvol is included in you backup and i also suggest an extra ACL backup of sysvol. !! Dont copy the

On 1/03/19 1:46 AM, Stefan Kania via samba wrote: > > .... > Committing SAM database > Setting isSynchronized and dsServiceName > Cloned domain LF (SID S-1-5-21-2842440679-1648109622-3732055899) > ERROR(<type 'exceptions.IndexError'>): uncaught exception - list index > out of range >   File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py",

Try change your resolv.conf from : >nameserver 127.0.0.1 >domain intranet.mayweg.net to nameserver 192.168.11.250 search intranet.mayweg.net >The only thing I was unsure about, was which hostname to enter >for Kerberos >Server and Kerberos admin server when asked during the >installation of the >packages.. Try these defealt settings for kerberos.. You didnt have to

Roland hi there I believe you are right. Yes I'm sure something not configured correctly? The old smb.conf below... Untitled Document Many thanx Best regards Ashley On 2019/02/15 11:30, Rowland Penny via samba wrote: > On Fri, 15 Feb 2019 00:50:13 +0200 > Ashley via samba <samba at lists.samba.org> wrote: > >>> Ah, 'classicupgrade' ???? >>>