similar to: No Samba NT DOMAIN Name found exitting now...

Seems to relate to kerberos. I cannot "kinit administrator". Returns "kinit cannot contact KDC for realm 'subdom.example.com' while getting initial credentials." "samba-info.sh" script returns 'NT_STATUS_CONNECTION_REFUSED' and that 'ERROR: invalid ip address for dc1.subdom.example.com' (Sorry on my laptop. Difficult to copy & paste

Dear all, i've appended the below to /etc/bashrc it works like a charm with ssh connections though SFTP sessions fail since the below is being sent to the intiator. any way of limiting the below to none sftp sessions? or any other idea for it to work? # If id command returns zero, you?ve root access. if [ $(id -u) -eq 0 ]; then # you are root, set red colour prompt echo

Hello, i have a problem with stored configs since the migration from "sqlite" to "postgresql". dho@appelbaum:~$ sudo puppetd --test --verbose info: Retrieving plugin info: Loading facts in disks info: Loading facts in users info: Loading facts in mountpoints info: Loading facts in disks info: Loading facts in users info: Loading facts in mountpoints err: Could not retrieve

On 03/06/15 23:54, ivenhov wrote: > I've made all changes to 3 files you mentioned, also removed everything > except localhost in hosts file. > SO I have minimal smb.conf and minimal krb5 file > > Unfortunately error is still the same. > > If I try to join with full OU path I get kerberos_kinit_password > testuser at MYNAT.MYCO.BCU failed: Cannot contact any KDC for

Hi! ivenhov skrev den 2015-06-04 10:10: > I'm trying > > sudo net ads join -S dc1001.mynat.myco.bcu -U testuser -d10 > > and also > > sudo net ads join createcomputer="My/Ou/For/Servers" -S > dc1001.mynat.myco.bcu -U testuser -d10 > > > It works for me every time in lab on real hw (same spec) and on virtualbox. > It's just this particular site

> > You are missing the point as well, I joined the second DC and the New > DCs A record was *not* created. I tried to follow the instructions on > the Samba wiki but had problems and missed the fix on the webpage. > > I then removed the /usr/local/samba directory and re-ran 'make install' > and then joined the DC again, exactly as I did the first time and >

Thanks all for helping with this and for script Still no luck though. I've modified scripts as they had some bugs, my output and modified version at the end. As I mentioned, I don't have any issues with joining samba 4.1 or 4.2 in the lab, only on that site. >> if so, try the following. >> in resolv.conf, add >> search mynat.myco.bcu myco.bcu I haven't tried

I upped 1.0.4 of the script.. I added checks if no DC's are found, error message and exits script, so no python errors anymore, if i did it right. ;-) on both DC's do the following. and whats the output of : cat /etc/hosts cat /etc/resolv.conf and kinit Administrator SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SERVER_IP_ADRESS=`hostname -i` echo "Test domainname:

Hai, After reading all below i can only conclude this must be firewalling, as Rowland is saying also. check if all of these ports are acceccable for the server your trying to join. tcp 0 0 192.168.X.1:1024 0.0.0.0:* LISTEN 2146/samba tcp 0 0 192.168.X.1:135 0.0.0.0:* LISTEN 2146/samba tcp 0 0 192.168.X.1:139

On 08/06/15 13:08, L.P.H. van Belle wrote: > Hai, > > After reading all below i can only conclude this must be firewalling, as Rowland is saying also. > > check if all of these ports are acceccable for the server your trying to join. > > tcp 0 0 192.168.X.1:1024 0.0.0.0:* LISTEN 2146/samba > tcp 0 0 192.168.X.1:135 0.0.0.0:*

Hi Rowland, I have similar problem with sernet 4.2.4 package: no dns entry created and logs are showing NOTAUTH for dnsupdate Here is my work around: New DC joins domain with: --dns-backend=BIND9_DLZ and --server=partnerDC.contoso.com Don't start samba or bind yet !! After that I've to correct some permissions rights on these folders/files (bind can read): - private - dns - dns/* -

Hai Bob. SETDNSDOMAIN='hostname -d' needs to be: SETDNSDOMAIN=`hostname -d` .. so change them all . SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SERVER_IP_ADDRESS=`hostname -i` and you can ignore : >[....] Stopping domain name service...: bind9rndc: connect failed: >127.0.0.1#953: connection refused > >. ok > >[ ok ] Starting domain name service...:

Are you sure you have the "correct" administrator password .. ? this should work ,? echo ${SAMBA_NT_ADMIN_PASS}| smbclient //localhost/netlogon -U Administrator -c 'ls' that does not involve kerberos yet.. ? Please run: ? SETHOSTNAME=`hostname -s` SETDNSDOMAIN=`hostname -d` SETFQDN=`hostname -f` host -t SRV _ldap._tcp.${SETDNSDOMAIN}. host -t SRV

Hi guys, thanks again for the quick answers. First, the smb.conf on the linux fileserver. It is quite long, as I took the old file (working version from samba3 configuration) and only made adjustments, like adding the realm. /etc/samba/smb.conf: [global] ### Browsing/Identification ### workgroup = MAYWEG.NET realm = INTRANET.MAYWEG.NET netbios name = server13 smb ports = 139, 445

can you run these commands and tell us the output. ( copy past it. ) SETFQDN=`hostname -f` SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SETSERVERIP=`hostname -i` echo "==========Test DNS Records ===============================" echo "Testing : dns entries" if [ -z "`host -t SRV _ldap._tcp.${SETDNSDOMAIN}. | grep 'not found'`" ]; then echo

Ok just to verify. DC name= ad41.dc.samges.ru dnsdomain= dc.samges.ru Kerberos domain ?? Im guessing you kerberos to dnsdomain mapping is wrong. Can you post the /etc/hosts /etc/resolv.conf /etc/krb5.conf And, can you post this line u used for provisioning? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: Mike Lykov [mailto:combr at samges.ru] > Verzonden:

Ok, I setup a new smb.conf and rebooted. Winbind doesn't seem to pass on the domain users anymore and the DNS Update during domain join still fails. For some reason, although I have all samba 3.5.6. packages installed on this debian squeeze samba -V or samba-tool are unknown commands. Maybe this is why the dns update fails, some missing tools or commands? wbinfo -u and wbinfo -g return domain

On 20/03/15 11:13, Timo Altun wrote: > Hi guys, > > thanks again for the quick answers. First, the smb.conf on the linux > fileserver. It is quite long, as I took the old file (working version from > samba3 configuration) and only made adjustments, like adding the realm. > > /etc/samba/smb.conf: > [global] > ### Browsing/Identification ### > > workgroup =

Thank you Louis for that answer! Actually I did get kinit and samba_dnsupdate working, though I am unsure how. I tried some changes to krb5.conf in the [realms] and [domain_realm] sections, als well as setting dns_lookup_realm = false to true, but reverted it all back to the initial file: [libdefaults] default_realm = INTRANET.MAYWEG.NET dns_lookup_realm = false dns_lookup_kdc = true After a

I went and got the newest (upped recently) script. No love. I removed the email address line to get more command line output. root at dc01:~# ./samba-check-db-repl.sh Running with with console output Running : /usr/bin/samba-tool ldapcmp --filter='whenChanged' ldap://dc01 ldap://dc02.dtsh***m.dt. Please wait.. this can take a while.. Failed to bind - LDAP error 49