similar to: Replication fails with (WERR_GEN_FAILURE)

On 20/09/2020 00:30, Elias Pereira via samba wrote: > hi, > > I listed the 0ADEL entries with the command below and didn't find the > object. > # ldbsearch --cross-ncs --show-deleted -H /var/lib/samba/private/sam.ldb | > grep "\0ADEL" > > I tried to delete using the command below, but it says it doesn't exist. > # ldbdel -H

On Sun, 2019-11-03 at 18:58 +0100, Johannes Engel via samba wrote: > Hi Andrew, > > thanks a lot, however, I am not entirely sure I understand your hint: > I have 3 DCs in the domain, the third of which is having the issue > described. > Now, here is what I did: > > samba-tool drs replicate DC3 DC2 dc=my,dc=domain --local -k no > > Partition[dc=my,dc=domain]

hello, There is a group in my AD that has a user that does not exist. I can see it via RSAT. By running the command: samba-tool dbcheck --cross-ncs --reset-well-known-acls --fix --yes The following error occurs: Checking 10016 objects WARNING: no target object found for GUID component for one-way forward link member in object CN=ALUNOS,OU=GRUPOS,OU=CAMPUS,DC=mycompany,DC=net -

On Sun, 2019-11-03 at 16:24 +0100, Johannes Engel via samba wrote: > 2 hours and I am a little further: > Helped myself with Andrew's script in source4/scripts/devel/chgtdcpass > which updated the machine password as well as the keytab. > After a restart samba keeps complaining now that the (outdated) KVNO 6 is > no longer part of the secrets.keytab: > [2019/11/03

Hi All, since Friday I get a surprising error, when I try to replicate my domain-controllers. This is new! It worked before in any direction without any failures... When I replicate from dc2 to dc1 this runs also, without any failures: root at dc1:~# samba-tool drs replicate dc1 dc2 DC=mydomain,DC=uni-frankfurt,DC=de Replicate from dc2 to dc1 was successful. Only when I try to replicate from

Hi, I performed the procedures below on Samba4-DC1 (Master) and apparently everything went fine. /etc/init.d/samba-ad-dc stop sed -i -e 's/${DOMAINDN}/DC=empresa,DC=com,DC=br/g' \ -e 's/${NETBIOSNAME}/SAMBA4-DC1/g' \ -e 's/${NISDOMAIN}/empresa/g' \ /tmp/ypServ30.ldif root at samba4-dc1:/tmp# ldbmodify -H /var/lib/samba/private/sam.ldb

Hello everyone, I have setup two Samba AD DC's with BIND9_DLZ dns backend. faiserver.example.corp is one of them hosting all FSMO Roles. location-000001.example.corp is the second one. Both are in different subnets but can reach each other. Unfortunately replication only works from faiserver.example.corp -> location-000001.example.corp. In the other direction location-000001.example.corp

Hello, after demote and rejoun my dc2 i have problems with replication. First of all some srv records on dc1 are missing, on dc2 they are exist. root at dc2:~# dig srv _ldap._tcp.ForestDnsZones.samdom.example.com @dc2.samdom.example.com. ; <<>> DiG 9.11.5-P4-5.1+deb10u1-Debian <<>> srv _ldap._tcp.ForestDnsZones.samdom.example.com @dc2.samdom.example.com. ;; global

Hi there. I'm trying to upgrad from 4.7.7 to 4.9.4. I built from source, running on centos 7.6 on a Raspberry Pi. When testing on a secondary DC, my "samba-tool drs showrepl" errors out with: ERROR(<class 'samba.drs_utils.drsException'>): DRS connection to dc02.rvx.is > failed - drsException: DRS connection to dc02.rvx.is failed: (8, >

> > Well, you wouldn't be able to delete it, how can you delete something that has already been deleted :-) Samba's ghosts... O.o :D Try running this: samba-tool domain tombstones expunge --tombstone-lifetime=1 Ok, this error was fixed!! Thanks Rowland!! But, the error with the replication still occurs. I thought the replication error was linked to the ghost entry error. #

When I attempt to join samba 4.8.0 (stable) to my samba 4.6.7 DC (Ubuntu), I receive the following error: Partition[DC=us,DC=dignitastech,DC=com] objects[500/1605] linked_values[0/118] Failed to commit objects: WERR_GEN_FAILURE Join failed - cleaning up Deleted CN=DC3-CLONE,OU=Domain Controllers,DC=us,DC=dignitastech,DC=com Deleted CN=NTDS

Hai,   As extra on Rowland comment..  Your config looks ok as said, i did see..   smb.conf  map to guest = bad user         < remove it.   Bad User - Means user logins with an invalid password are rejected, unless the username does not exist, in                       which case it is treated as a guest login and mapped into the guest account. and you want that for a AD DC setup?  you might

Hi all! I have an AD domain with two DC's, DC3 (samba 4.20.4 from backports in a VM running debian 12) and DC2 (samba 4.18.9 in a VM running slackware 15.0) who holds the FSMO roles and I tried to replace DC2 with another host named DC2 (samba 4.20.5 from backports in a VM running debian 12). What I did was (in this order): * Shutdown both DC's * Snapshot both DC's disks * Brought

Hello, I just start testing the setup of an RODC with 4.8.3 (I use the packages from Louis). The join works fine. After a reboot of the rodc I can see all Objcts with: ldbsearch --url=/var/lib/samba/private/sam.ldb and all users and groups with: wbinfo -u wbinfo -g But as soon as I try to test the replication I got this message: ----------- root at rodc-01:/var/lib/samba/private# samba-tool drs

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I just set up a Domain with two DCs. I use Debian jessie the debian-pakages. And bind9 also from the debian repositories. After setting up the first DC everything was working fine. The nameresolution of hosts ans SRV-records worked. Then I set up a second DC also everything aut of the debian-box with bind9 as nameserver. The

hi, I listed the 0ADEL entries with the command below and didn't find the object. # ldbsearch --cross-ncs --show-deleted -H /var/lib/samba/private/sam.ldb | grep "\0ADEL" I tried to delete using the command below, but it says it doesn't exist. # ldbdel -H /var/lib/samba/private/sam.ldb "<GUID=44b7fb44-1a88-42a4-854b-60bddd391577>" --show-deleted --relax delete

Hallo, we have 5 ADDCs. All of them did run with sernet-samba 4.6.7. I updated 4 of them to sernet-samba 4.7.0, one after the other, checked replication, everything seemed to be ok. One day later a colleague wanted to delete a lot of users with a powershell-script and since then the replication doesnt work anymore. (Im sure the script is not the problem, but it seemes like it triggered something)

Hi Andrew, thanks a lot, however, I am not entirely sure I understand your hint: I have 3 DCs in the domain, the third of which is having the issue described. Now, here is what I did: > samba-tool drs replicate DC3 DC2 dc=my,dc=domain --local -k no Partition[dc=my,dc=domain] objects[0] linked_values[0] Incremental replication of 0 objects and 0 links from DC2 to

Hello, we could need some help resolving a replication issue we experience since one week. We have 1 DC in the cloud running Windows Server 2019 with DFL/FFL 2008R2. We have 3 sites with 5 DCs running Samba on Debian Buster in total replicating the AD from Windows. Since one week the replication state shows the following error: DC=ds,DC=craze,DC=toys Azure\VMDC-AZURE-01 via RPC DSA

On Wed, 2 Jan 2019 09:54:24 +0000 Rowland Penny via samba <samba at lists.samba.org> wrote: > On Wed, 2 Jan 2019 09:45:56 +0000 > Kristján Valur Jónsson <kristjan at rvx.is> wrote: > > > Any thoughts? Have code, will debug. The error itself is > > meaningless to me and I am deeply and utterly unfamiliar with samba > > code, but if you have any thought or