similar to: maximum ad domain controller unavialability time

I speak about working controller, not about powered off, but network segment doesn't available to other controllers, for pdc emulator, and controller is available for workstations at this network segment. 14.04.2020 13:00, L.P.H. van Belle via samba ?????: > Why would you have a server (DC) that long powered off, it for sure will give delays and less response of the network. > But you

Why would you have a server (DC) that long powered off, it for sure will give delays and less response of the network. But you could turn it off as long as you want, once it powers up it will sync the AD again. So no, the controller is not removed from you domain. You need todo that manualy. I suggest you read: https://wiki.samba.org/index.php/Demoting_a_Samba_AD_DC And not, dont forget if

HI Valery A DC is never "removed" automatically from AD, but, at least from the Windows perspective, the longest period would be the tombstone lifetime. After this has passed, the DC would have objects "lingering", as the deletion of an object could have already occurred at other DCs and then the marker of the deletion itself removed, which of course means there is no way

27.06.2016 18:45, mathias dufresne: > Perhaps you don't have yet duplicate objectSid as that's not supposed to be > possible. > Rather than scripting something to look for objectSid used twice I would > start with dbcheck and other tools to verify that your database is > consistent and identical on all servers. [root at pdc ~]# samba-tool dbcheck Checking 3346 objects

Hi Valery, First thank you for this detailed information about your searches. I find them very interesting. Here I'm thinking of two workarounds. The first one would be to list deleted objects RIDs, to verify RID=2002 is really the last one used, being sure there is no deleted object with RID=2003 and so on. Then once you get the last RID used, you could change RidNextRid to match this

Hi, all! When I launch (again and again) smbcacls "//myfileserver/share" "" -U user -W domain or smbclient "//myfileserver/share" -U user -W domain -c "ls", in tcpdump output at myfileserver I see multiple calls to controller via ldap, therefore these commands are executed slowly. When I run getent groups at myfileserver, all worked fine, and tcpdump

Hi all! Today, after two years of production, I get this error: samba-tool user create test20160627 testpassword ERROR(ldb): Failed to add user 'test20160627': - ../lib/ldb/ldb_tdb/ldb_index.c:1216: Failed to re-index objectSid in CN=test20160627,CN=Users,DC=ad... - ../lib/ldb/ldb_tdb/ldb_index.c:1148: unique index violation on objectSid in CN=test20160627,CN=Users,DC=ad... Help me

Hello guys. Continuing Zhuchenko Valery question,I would like to know if someone from the list has deployed a child domain in samba 4. I have a samba 4 domain controller running on gentoo.My goal is to set up a domain and authentication domain only. But I need a root domain forest and a child domain.I am using verion 4.2.11I would like to know if someone has accomplished this either using dcpromo

Hi, all! There is no check of NS records in this document https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record For example, with two DCs at myzone $ host -t NS myzone dc1 (or dc2, or myzone) must return two records: myzone name server dc1.myzone. myzone name server dc2.myzone. $ host -t NS _msdcs.myzone dc1 (or dc2, or myzone) must return two records: _msdcs.myzone name

Hi samba-tool dbcheck ERROR(<class 'KeyError'>): uncaught exception - 'No such element' ? File "/opt/samba/lib/python3.6/site-packages/samba/netcmd/__init__.py", line 185, in _run ??? return self.run(*args, **kwargs) ? File "/opt/samba/lib/python3.6/site-packages/samba/netcmd/dbcheck.py", line 141, in run ???

On 24/07/2019 17:05, Rowland penny via samba wrote: > On 24/07/2019 16:01, Carlos via samba wrote: >> Hi >> >> samba-tool dbcheck >> ERROR(<class 'KeyError'>): uncaught exception - 'No such element' >> ? File >> "/opt/samba/lib/python3.6/site-packages/samba/netcmd/__init__.py", >> line 185, in _run >> ??? return

I need to close a site. No, no people fired, i've defined sites and DC because i hope that get (re)opened, but... There's some care i need to have to remove a DC (clearly, without FSMO roles)? I've looked on wiki to 'remove a DC' but i was not able to find something... Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra

Dear list, Does anybody know how to lower the tombstone lifetime in samba 4.5 or later? There used to be a wiki entry, but this has been deleted as it is probably not adequate anymore: https://wiki.samba.org/index.php/Restoring_deleted_AD_objects#Changing_the_defaults_for_msDS-deletedObjectLifetime_and_tombstoneLifetime I used to change the attribute tombstoneLifetime in CN=Directory

Hello, I am in the process of upgrading one single DC (internal DNS) to 4.8.12. I have followed the procedure of adding a new DC, transfert FSMO roles and demote the old DC. Everything gone right (except at the tranfert FSMO step where I faced the problem described here https://lists.samba.org/archive/samba/2017-August/210140.html , this bug subsists in 4.8.12 , maybe it has been fixed in later

On 28/06/16 12:05, Zhuchenko Valery wrote: > I'm understand, why I get error about unique index violation on objectSid: > > samba-tool fsmo show > RidAllocationMasterRole owner: CN=NTDS > Settings,CN=PDC,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=ad,... > > Last created object have objectSid > S-1-5-21-763247336-2482037999-3416227170-2001 (it is

On Tue, 2017-10-31 at 17:37 -0500, Matthew Delfino via samba wrote: > > > > I’m having a similar problem. I just fixed a bad member of my samba > domain - an samba AD DC that wasn’t working. I demoted it, > uninstalled Samba and reinstalled, then rejoined the domain. > > Everything's replicating nicely. All my users can authenticate. But > my samba AD DCs are all

Hi, ok, now join(with samba 4.10.6) was ok, but same original error :-/ smbclient //localhost/netlogon -UAdministrator -c 'ls' Enter XXXXXXX\Administrator's password: session setup failed: NT_STATUS_INTERNAL_DB_CORRUPTION Regards; On 24/07/2019 10:17, Rowland penny via samba wrote: > On 24/07/2019 12:53, Carlos via samba wrote: >> HI >> >> As the reported

UNCLASSIFIED Hi Rowland No tombstonelifetime. Do I need to upgrade the schema? The current schema is 30 (Windows 2003). When I try to update the schema, I get the following error: Applying Sch31.ldf updates... Exception [Errno 2] No such file or directory I downloaded sch31.ldf and tried to apply that. samba-tool domain schemaupgrade --ldf-file=sch31.ldf --base-dir=/home/user/work/ldif

Hi list, I have a domain in production on two sites (subnets, via "Sites and Services") with originally two DCs. One went down due to HDD (-> old hardware) error. Now, occasionally, clients cant access/find the file server (domain member). This does not occur on all clients at the same time, however, so I am rather sure it is not the file server itself, but a DNS problem. I

Hi, I have jointed 2 Samba 4 servers in my domain and transferred FSMO roles to the primary Samba 4 server. I have verified that the Samba 4 servers are OK, but I am having trouble removing the latest DC Windows Server 2008. It reports that there is no other DC to transfer data from the directory DC = DomainDNSZones, DC = Enterprise, DC = com, DC = br However the functions are all on my DC