similar to: Join new DC to domain - advice to upgrade Samba 4.

OK, we're getting closer here I think. I repeated with -d 2 without much help. Here is -d 3, which may point us in the right direction. As I suspected, it seems to point to some corruption in the DNS still, perhaps? The key line seems to be here: Missing parent while attempting to apply records: No parent with GUID 60e25dda-6d35-4aab-bfa5-6137cb271e27 found for object remotely known as

Yes, I am running 4.7.3 on both servers. One has been upgraded (many times). The new one, obviously, is freshly installed. I am running DNS on the domain controller. In fact, I'm running all the default "server services". As I said, I have had some problems in the past, and for a while the DNS was not working (perhaps due to some database corruption) and I had to switch it off in

Hi Rowland, thanks for your email. The working DC was installed around 2 years ago. It is the reason to stick in Stretch. But if I can upgrade the working DC to Buster and Samba 4.9.5 without any problem, it is OK to me. I'm not a Samba expert. How can I verify my database? Can you point me to some link, tutorial, etc? I have used the samba-tool dbcheck (with and without --cross-ncs), is

Dears, I have a problem to join a Version 4.7.6-Ubuntu to a Domain 2008 R2 how Domain Controller. if i add a Windows server how domain controller i wasn't a problem. but is not de samba case. the samba join output : samba-tool domain join example.local DC -U example\\administrator Finding a writeable DC for domain 'example.local' Found DC AD01.example.local Password for

Thanks for your help. > On the Windows DC can you check that the A record is actually created? Yes, it is, and it persists after join failure. Another sign of presence of SRVAD-NEW on the old DC is the new computer account, created in "Domain controllers" folder in "Active Directory Users and Computers" at the beginning of join procedure then automatically removed just

Hi, I have 2 DC in my network. DC master is a Samba 4 and the secondary is Windows Server 2008. I want to put another Samba 4 as DC to replace Windows Server, however the following errors are emerging: root at samba4-dc2:~# samba-tool domain join empresa.com.br DC -k yes -d 3 lpcfg_load: refreshing parameters from /etc/samba/smb.conf GENSEC backend 'gssapi_spnego' registered GENSEC

Hi The DRS sync between two Domain Controllers connected on one network is failing. I have enabled the log level 9. samba-tool drs replicate 172.16.10.5 iumsvrpdc DC=iumnet,DC=edu,DC=na --full-sync -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9

Hi I have tried using FQDN for DC1 and DC2 but still it is failing.Please assist to fix samba-tool drs replicate iumdcdp01.iumnet.edu.na iumsvrpdc DC=iumnet,DC=edu,DC=na --sync-forced -UAdministrator INFO: Current debug levels: all: 9 tdb: 9 printdrivers: 9 lanman: 9 smb: 9 rpc_parse: 9 rpc_srv: 9 rpc_cli: 9 passdb: 9 sam: 9 auth: 9 winbind: 9 vfs: 9 idmap: 9

On Wed, 12 Apr 2017 17:28:39 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > Correct you need a smb.conf. No he doesn't, he is trying to join another DC. > And please do correct your hosts file before you join. > >   > > >>  127.0.0.1   localhost localhost.localdomain localhost4 > >>localhost4.localdomain4

Hi Rowland, thanks for your reply. I tried the command as suggested, and this is what I get: [root at dc-02 ~]# samba-tool domain join EXAMPLE.COM DC -UAdministrator --realm=EXAMPLE.COM --dns-backend=SAMBA_INTERNAL Finding a writeable DC for domain 'EXAMPLE.COM' Found DC dc-01.example.com Password for [WORKGROUP\Administrator]: workgroup is EXAMPLE realm is example.com Adding

Good afternoon, tell me, this error occurs on the domain controller samba v 4.19.0, I paired the domain controller with sssd so that authentication occurs under domain accounts on the domain controller, but as you know, sssd changes the machine password every 30 days if this option is not disabled ad_maximum_machine_account_password_age = 0 I haven?t disabled it for 30 days and as I understand it,

Hi, After reading wiki documentation about join I have tested to join a second dc, but with problems. I need to add a second controller to our AD, and then upgrade existing server (4.4.5) and I have tried to join a new DC 4.10.7 to 4.4.5 server but I receive join errors, attached output wit and without debug: I have executed samba-tool dbcheck --cross-ncs all seems OK I have made a test

Hello, I inherited an Active directory in Windows in Spanish, after a lot of work I was able to do the first synchronization to a DC in Samba. Now I am at the stage that I want to remove Windows, but previously I want to remove Windows. I am trying to add another DC in Samba to advance and I am presented with the following problem. I feel lost with these errors. root at DC01:~# samba-tool fsmo

Hi, I tried with the latest stable 4.5.x, but with no success. Do you think you could share your smb.conf ? and also how you built from source? I suspect there's something missing in the KRB5 for Samba (due to KDC error messages). Thanks in advance! On 7 April 2017 at 02:26, mj via samba <samba at lists.samba.org> wrote: > Hi Erick, > > We were unable recently to join a

im not at a computer ti look some things up but im thinking.. dbdir=/usr/local/samba.PDC/dbdirwhat is the size of this dir. what is the size of the ad db dir on every server now. i think, something in the old db import causes a resyncwhen you modify something in the db  so i suggest try monitoring, disk io and cpu, look for buzzy files.  if we know the files, we know the processes using it.

It seems I'm talking to myself... anyway another test here: Added the existing DC IP config to /etc/hosts and the join now shows a more explicit LDAP error: --- Wrong username or password: kinit for SRVAD-NEW$@SAMDOM.LOCAL failed (Preauthentication failed) SPNEGO(gssapi_krb5) creating NEG_TOKEN_INIT for ldap/SRVAD-OLD.SAMDOM.LOCAL failed (next[ntlmssp]): NT_STATUS_LOGON_FAILURE Got

I need to delete the DNS record and I could not have any idea something that is going bad root at zdtoe-02:~# dig axfr dtoe.etecsa.cu |grep zdtoe-01 *_msdcs\010CNF:946b89d3-b07b-4f43-a6b9-0de3bf3f3a10.dtoe.etecsa.cu. 900 IN NS zdtoe-01.dtoe.etecsa.cu.* *_msdcs\010CNF:4b642bd5-765f-4b16-93ce-3921b46ce220.dtoe.etecsa.cu. 900 IN NS zdtoe-01.dtoe.etecsa.cu. *root at zdtoe-02:~#*samba-tool dns

No, there is no firewall... They are on the same network without any blocking... Let me tell you a little about my scenario... When I installed Samba4 as my main AD (2018), I had ADC01 that was my primary DC and after I joined the ADC02 without any problem. And in the beginning of 2019, I joined a Windows Server 2008 R2 as my ADC03. All of them worked well until (around a year) I had a hardware

Hi Epsilon, I think the issue here is with localization support in Samba. You "Default-First-Site" in Spanish MS-AD is translated (as it is in French AD), and it seems that it looks for the following site name during the join: CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=conylec,DC=local while it should be trying to create the entry in the following site name:

Ah, so the error changed.. ? Can you try ? samba-tool domain join empresa.com.br DC -k yes -d 3 --server=samba4-dc01.empresa.com.br? so we try to join through samba4-dc1 and not the windows DC. ? Looking at below again. (objectclass=primaryDomain))' base: 'cn=Primary Domains': No such object: dsdb_search at ../source4/dsdb/common/util.c:4691) and from