similar to: Fileserver advice needed

Dear all, somehow, new PTR records are not visible. This is on 4.11.6 DC with BIND9 ... Here is what happens: root at dc1:~# cat /etc/samba/smb.conf # Global parameters [global] bind interfaces only = Yes interfaces = 127.0.0.1 XXX.YYY.103.1 netbios name = DC1 realm = SAMDOM.REST_OF_FQDN server role = active directory domain controller server

So strange.. I copied your commando's only change the arpa and servername / domainnames All worked. So far nobody told how there ad-dc and DNS is setup.. Which i why i added : > > Debian 10, my own packages. > > Samba 4.11.6 + BIND9_DLZ is used . Now are you using samba DNS or BIND_DLZ dns ? That might help here. Greetz, Louis > -----Oorspronkelijk

The DC is a Windows AD DC. Could you please clarify why i should change setting in the Windows DC instead of the Samba server, which is the one that does the insecure ldap bind? Regards Andrea Cucciarre' On 11/9/2020 3:13 PM, Rowland penny via samba wrote: > On 09/11/2020 13:28, Andrea Cucciarre' wrote: >> My customer complain that in the AD DC they see the following

..and also, kinit fails if I don't have 192.168.4.5 as the first nameserver in resolv.conf On Sat, Sep 5, 2020 at 10:26 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 05/09/2020 17:54, Peter Pollock via samba wrote: > > Please forgive me, I'm not sure what terminology to use here so this > > question may sound wrong. > > > > I have

On 01/09/2020 20:17, Peter Pollock wrote: > Thanks Rowland. > > I'll try out those changes tonight. > > The two cards are necessary because I this is my gateway machine. One > card connects to the internet router on 10.1.10.80 and the other > connect to the local lan. I personally do not think that is a good idea, we do not recommend using a DC as a fileserver, never

Am 18.03.20 um 22:26 schrieb Andrew Bartlett: >> Also "samba-tool domain tombstones expunge --tombstone-lifetime=0" >> does >> not delete the records with "dNSTombstoned: TRUE". Is this a >> different >> tombstone? > > That would be a different tombstone, yes. Can someone help me out with the ldap/ldb syntax to delte those by cron? >

Am 16.04.20 um 14:18 schrieb Rowland penny via samba: > On 16/04/2020 12:45, Christian Naumer via samba wrote: >> Hello alAl, >> after update of our test server to 4.12.1 from 4.11 it crashes. If the >> vfs module is removed from the config everthing works as before. > > The only change was to upgrade to 4.12.1 ? > > If there were no other changes, then Samba

On 16/04/2020 13:15, Christian Naumer via samba wrote: > Forgot to mention that this is on Centos 8. So maybe something different > than this: > https://www.spinics.net/lists/samba/msg163085.html > Is python3 standard or available for Centos 8 ? Not sure if python is used here though. Rowland

Hello you all, with the new samba version out that fixes some problems with dns scavenging I have decided to try this feature. I was specifically interested for our reverse zone (PTR records) We have one zone for VPN clients 8.0.10.in-addr.arpa. I activated the feature in the smb.conf as well as in the Windows DNS manager. Entries are deleted (not visible in DNS manager) after a while. You can

Hello Christian, Can you post me the message you got from the samba-check-db-repl.sh, Then i'll add something for it. And can you tell with version nummer of the script your using. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian Naumer via samba > Verzonden: woensdag 10 mei 2017 9:30 > Aan:

On 20/10/2020 17:46, Stefano Vargiu wrote: > Sorry, I don't get it. > > You?mean a domain member as opposed to a domain controller? > In which way is it?going?to help? > You should really only use a Samba AD DC for authentication, so the best idea would be to add a Unix domain member to the domain and install openvpn or freeradius or some other program that will do what you

On 24/07/2020 12:35, Christian Naumer via samba wrote: > I can't say much about the NFS part here. However, my laptop uses SSSD > as client software and I mount our Samba shares via pam_mount and > kerberos. This all works fine. So I suspect that this should also work > with NFS. The IDs of your users need to be the same as on the server > otherwise I haven't found a

In addition to Rowland comment. if you still able to test it. Remove 1 setting at a time, restart and test it. Start with these, in this order. logging = syslog only prefork children = 8 I think if the logging line is removed your problem is solved. man smb.conf /logging should explain more. Because I cant/find the setting : logging = syslog only Greetz, Louis

Hello Cristian, Well, nothing to say about your steps, these looks good. And lmdb could be disable in the sernet packages, cant say, i dont know. And only one DC has these problems or all? If only one DC crashed. Which DC crashes. Last added? Oldest? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Christian

On 17/11/2020 11:54, mj via samba wrote: > Hi, > > Checking a bit more today, as the two changes on DC4 have *still* not > propagated? to DC2/DC3, I discovered the > ?samba-tool drs uptodateness > command. > > I gives the following output, not sure what "unknown invocation ID" > means. I hope someone here is able to explain..? > > It's output: >

Hello Christian, Ive had a quick look at you output, that looks pretty normal. I'll have a good look Friday, tomorrow day off. So my suggestion is post the output to the list but -d10 is not needed. The regular output should be sufficiant. Im wondering why there is no dc3 in kcc also but why i see over 15 RPC sessions. Maybe normal maybe not, this i dont know. Greetz, Louis >

Pretty close to what i have that : [global] workgroup = PRIVATE server string = %h server log file = /var/log/samba/log.%m max log size = 1000 log level = 0 ####### Authentication ####### ## stand alone everything open. security = user guest ok = yes map to guest = bad password ## map id's outside to domain to tdb files. idmap config * : backend = tdb idmap

On 02/02/2020 14:39, Christian Naumer via samba wrote: > Hello all, > I just tried this on our setup and it ist the same there. I get results > from other OUs. Using sub instead of one I get the "right" results. > > Problem is, I have tried the OP's search command against Samba 4.7.12, 4.10.6 and 4.11.6 Created two OU's: OU=testou1 and OU=testou2 Created a user

Hello everybody, last weeks I started upgrading our DC from Centos 7 to Centos 8. After having read this (https://wiki.samba.org/index.php/Upgrading_a_Samba_AD_DC#Updating_Multiple_Samba_Domain_Controllers) and especially this "Joining a DC to domain can be a troublesome process for some users, and it can be difficult to recover your DC if something goes wrong". I really looked forward

Hello you all, this is a bit OT but I think I'll find some people here that can help. We have 4 DCs all on the same site. This is working fine. 3 Are VMs one is a physical server. They are the only DNS servers in that network. On a member server running our icinga2 installation I have this in the resolv.conf: options rotate timeout:2 retries:1 search example.com nameserver x.x.x.x (ip dc1)