similar to: New PTR records not visible

So strange.. I copied your commando's only change the arpa and servername / domainnames All worked. So far nobody told how there ad-dc and DNS is setup.. Which i why i added : > > Debian 10, my own packages. > > Samba 4.11.6 + BIND9_DLZ is used . Now are you using samba DNS or BIND_DLZ dns ? That might help here. Greetz, Louis > -----Oorspronkelijk

Ok, new test. Besides that i dont like the python errors shown, this still looks good. So i dont know.. See below, i can not make it error. for x in 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 ; do samba-tool dns add dc1.internal.dom.tld $x.249.10.in-addr.arpa 158 PTR host-test.extrazone.dom.tld ; done Record added successfully Record added successfully Record added successfully Record added

The DC is a Windows AD DC. Could you please clarify why i should change setting in the Windows DC instead of the Samba server, which is the one that does the insecure ldap bind? Regards Andrea Cucciarre' On 11/9/2020 3:13 PM, Rowland penny via samba wrote: > On 09/11/2020 13:28, Andrea Cucciarre' wrote: >> My customer complain that in the AD DC they see the following

Must be something with/or in combination with Centos and/or sernet packages. I just tested : samba-tool dns add dc1.internal.dom.tld 2.249.10.in-addr.arpa 157 PTR host.extrazone.dom.tld samba-tool dns add dc1.internal.dom.tld 0.249.10.in-addr.arpa 157 PTR host.extrazone.dom.tld samba-tool dns add dc1.internal.dom.tld 1.249.10.in-addr.arpa 157 PTR host.extrazone.dom.tld All checks are fine

I have a domain with two Samba DC's I don't want to use either of them as a fileserver, so I want to build a separate file server which is not a DC, which will deliver all the files to the lovely little windows users (including their roaming profiles). I've been looking online and there seems to be a thousand different ways to "join" my fileserver to the domain, but most of

Am 18.03.20 um 22:26 schrieb Andrew Bartlett: >> Also "samba-tool domain tombstones expunge --tombstone-lifetime=0" >> does >> not delete the records with "dNSTombstoned: TRUE". Is this a >> different >> tombstone? > > That would be a different tombstone, yes. Can someone help me out with the ldap/ldb syntax to delte those by cron? >

Am 16.04.20 um 14:18 schrieb Rowland penny via samba: > On 16/04/2020 12:45, Christian Naumer via samba wrote: >> Hello alAl, >> after update of our test server to 4.12.1 from 4.11 it crashes. If the >> vfs module is removed from the config everthing works as before. > > The only change was to upgrade to 4.12.1 ? > > If there were no other changes, then Samba

On 16/04/2020 13:15, Christian Naumer via samba wrote: > Forgot to mention that this is on Centos 8. So maybe something different > than this: > https://www.spinics.net/lists/samba/msg163085.html > Is python3 standard or available for Centos 8 ? Not sure if python is used here though. Rowland

Hello you all, with the new samba version out that fixes some problems with dns scavenging I have decided to try this feature. I was specifically interested for our reverse zone (PTR records) We have one zone for VPN clients 8.0.10.in-addr.arpa. I activated the feature in the smb.conf as well as in the Windows DNS manager. Entries are deleted (not visible in DNS manager) after a while. You can

Hello Christian, Can you post me the message you got from the samba-check-db-repl.sh, Then i'll add something for it. And can you tell with version nummer of the script your using. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian Naumer via samba > Verzonden: woensdag 10 mei 2017 9:30 > Aan:

On 20/10/2020 17:46, Stefano Vargiu wrote: > Sorry, I don't get it. > > You?mean a domain member as opposed to a domain controller? > In which way is it?going?to help? > You should really only use a Samba AD DC for authentication, so the best idea would be to add a Unix domain member to the domain and install openvpn or freeradius or some other program that will do what you

Pretty close to what i have that : [global] workgroup = PRIVATE server string = %h server log file = /var/log/samba/log.%m max log size = 1000 log level = 0 ####### Authentication ####### ## stand alone everything open. security = user guest ok = yes map to guest = bad password ## map id's outside to domain to tdb files. idmap config * : backend = tdb idmap

On 17/11/2020 11:54, mj via samba wrote: > Hi, > > Checking a bit more today, as the two changes on DC4 have *still* not > propagated? to DC2/DC3, I discovered the > ?samba-tool drs uptodateness > command. > > I gives the following output, not sure what "unknown invocation ID" > means. I hope someone here is able to explain..? > > It's output: >

On 24/07/2020 12:35, Christian Naumer via samba wrote: > I can't say much about the NFS part here. However, my laptop uses SSSD > as client software and I mount our Samba shares via pam_mount and > kerberos. This all works fine. So I suspect that this should also work > with NFS. The IDs of your users need to be the same as on the server > otherwise I haven't found a

In addition to Rowland comment. if you still able to test it. Remove 1 setting at a time, restart and test it. Start with these, in this order. logging = syslog only prefork children = 8 I think if the logging line is removed your problem is solved. man smb.conf /logging should explain more. Because I cant/find the setting : logging = syslog only Greetz, Louis

Hello Cristian, Well, nothing to say about your steps, these looks good. And lmdb could be disable in the sernet packages, cant say, i dont know. And only one DC has these problems or all? If only one DC crashed. Which DC crashes. Last added? Oldest? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian

..and also, kinit fails if I don't have 192.168.4.5 as the first nameserver in resolv.conf On Sat, Sep 5, 2020 at 10:26 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 05/09/2020 17:54, Peter Pollock via samba wrote: > > Please forgive me, I'm not sure what terminology to use here so this > > question may sound wrong. > > > > I have

On 02/02/2020 14:39, Christian Naumer via samba wrote: > Hello all, > I just tried this on our setup and it ist the same there. I get results > from other OUs. Using sub instead of one I get the "right" results. > > Problem is, I have tried the OP's search command against Samba 4.7.12, 4.10.6 and 4.11.6 Created two OU's: OU=testou1 and OU=testou2 Created a user

Hello Christian, Ive had a quick look at you output, that looks pretty normal. I'll have a good look Friday, tomorrow day off. So my suggestion is post the output to the list but -d10 is not needed. The regular output should be sufficiant. Im wondering why there is no dc3 in kcc also but why i see over 15 RPC sessions. Maybe normal maybe not, this i dont know. Greetz, Louis >

I have some (for testing) Debian based client/workstation connected to my AD. Signing to the AD works as a domain/user should. These clients can, via Nautilus file manager, access shares on the file server manually that the *signed in domain user* is permitted to "see". I would prefer to connect these files and the domain user home directory automatically at sign in without manual