similar to: multi-site DNS confusion

Greetings, I'm not sure what else to add. If you need more info please let me know. Any input is greatly appreciated. Eric On Sat, Mar 4, 2023 at 2:58?PM Eric <rvwbug at gmail.com> wrote: > Greetings, > > This is my first attempt at multi-site with unique subnets (actually > first attempt at more than on DC). > > I had the existing "defaultFirstSite"

I run command in debug mode level 3: root at DC02:~# samba-tool domain join conylec.local DC -U "conylec\administrador" --dns-backend=SAMBA_INTERNAL --server=DC01.conylec.local -d 3 GENSEC backend 'gssapi_spnego' registered GENSEC backend 'gssapi_krb5' registered GENSEC backend 'gssapi_krb5_sasl' registered GENSEC backend 'spnego' registered GENSEC

> > El dom., 5 abr. 2020 a las 20:05, Epsilon Minus > > (<theepsilonminus at gmail.com>) escribi?: > >> > >> Hello, > >> > >> I inherited an Active directory in Windows in Spanish, after a lot of > >> work I was able to do the first synchronization to a DC in Samba. > >> > >> Now I am at the stage that I want to

Hai Bob. SETDNSDOMAIN='hostname -d' needs to be: SETDNSDOMAIN=`hostname -d` .. so change them all . SETDNSDOMAIN=`hostname -d` SETHOSTNAME=`hostname -s` SERVER_IP_ADDRESS=`hostname -i` and you can ignore : >[....] Stopping domain name service...: bind9rndc: connect failed: >127.0.0.1#953: connection refused > >. ok > >[ ok ] Starting domain name service...:

I'm hoping the issue is just load balancing, but I'm not sure. I can't see to get the traffic balanced across two DCs. I ran this script on all Linux nodes to balance the traffic. #!/usr/bin/perl use strict; use warnings; my $primary_name_server; my $random = int(rand(10)); open(my $resolv_conf_fh, '< /etc/resolv.conf') or die("Unable to open /etc/resolv.conf for

Hi! I have a question about order in dcs is /etc/resolv.conf , my configuration: DC01: /etc/resolv.conf IP DC02 IP DC01 DC02 /etc/resolv.conf IP DC01 IP DC02 https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory#DNS_Configuration_on_Domain_Controllers --- However this setting causes the error: samba_dnsupdate --verbose --all-names dns_tkey_negotiategss:

Hello, A couple days ago I wrote a message about replication problem with Exchange to samba-technical@: https://lists.samba.org/archive/samba-technical/2016-February/112019.html Problem I want to resolve looks like "exchange schema _not_ installed on the samba4 AD DC": https://lists.samba.org/archive/samba/2015-May/191636.html I try to search additional information and found old

On Tue, 23 Aug 2016 13:01:09 -0700 Sean via samba <samba at lists.samba.org> wrote: > Is it possible to specify a list of DCs for Samba to use, rather than > have it look them up dynamically via DNS? > > > > I have an issue with Kerberos, Samba, and SSSD where my machines stop > authenticating after a period of time – preAuthentication errors, > etc. I suspect

Thank you everyone for your help. I corrected my resolv.conf files as Peter Milesson suggested and then had to take a number of extra steps so now things are looking a little better. In case it helps anyone else in the future, here's what I found (plus I am now having problems resolving internal addresses). As far as I can see, the setup on both servers is identical (except they use their own

Hi Peter, As Rowland pointed out in a previous post to you "Each DC should use its own ipaddress for its nameserver in /etc/resolv.conf", so the gateway IP should not be there. So make /etc/resolv.conf on DC01 nameserver 192.168.4.5 search internal.kcs and /etc/resolv.conf on DC02 nameserver 192.168.4.6 search internal.kcs If you use the internal dns backend add the following to

Hi Epsilon, I think the issue here is with localization support in Samba. You "Default-First-Site" in Spanish MS-AD is translated (as it is in French AD), and it seems that it looks for the following site name during the join: CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=conylec,DC=local while it should be trying to create the entry in the following site name:

Hi, me and my coworkers are trying to migrate a Samba 3 domain to a Samba4 one. As for now we did a classicupgrade and imported all the ldap entry to a DC following the guide without problems following the doc https://wiki.samba.org/index.php/Migrating_a_Samba_NT4_domain_to_a_Samba_AD_domain_(classic_upgrade) Now as we try to join another DC following this guide

What i forgot to mention. The "maintainence user" is a linux user.. but what are you trying to do? or whats the goal further.. Greetz, Louis >-----Oorspronkelijk bericht----- >Van: belle at bazuin.nl [mailto:samba-bounces at lists.samba.org] >Namens L.P.H. van Belle >Verzonden: dinsdag 3 februari 2015 8:46 >Aan: samba at lists.samba.org >Onderwerp: Re:

This doesn't really answer your question, but it already looks like you're using SSSD for authentication, and specifying local DC's (instead of DNS lookups). Why not bind to AD directly with that? Using realmd/adcli makes it easy, and with a minimal samba installation (libs only) -Kris Kris Lou klou at themusiclink.net On Tue, Aug 23, 2016 at 2:47 PM, Sean via samba <samba at

On Fri, 2024-04-05 at 08:04 +0100, Rowland Penny via samba wrote: > On Fri, 05 Apr 2024 08:06:10 +0200 > PaLi via samba <samba at lists.samba.org> wrote: > > > Hello > > > > I have a strange problem on a brand new installation of samba AD > > (samba-4.19.5 on Fedora 39). > > > > Domain controller is dc01.some.domain.org > > Secondary

On Fri, 05 Apr 2024 15:38:23 +0200 pavel.lisy at gmail.com wrote: > On Fri, 2024-04-05 at 08:04 +0100, Rowland Penny via samba wrote: > > On Fri, 05 Apr 2024 08:06:10 +0200 > > PaLi via samba <samba at lists.samba.org> wrote: > > > > > Hello > > > > > > I have a strange problem on a brand new installation of samba AD > > >

Hi all, I have just added a DC to our existing AD. Join did work without any error messages but now I have recognized that only inbound replication from old DCs is working outbound list is empty. Samba version is: Version 4.2.0pre1-GIT-cff0f8e here is the output of samba-tool drs showrepl: DSA Options: 0x00000001 DSA object GUID: 94534f65-5d06-41f5-844d-a58a0bc03c93 DSA invocationId:

On Fri, 2024-04-05 at 15:00 +0100, Rowland Penny via samba wrote: > On Fri, 05 Apr 2024 15:38:23 +0200 > pavel.lisy at gmail.com?wrote: > > > On Fri, 2024-04-05 at 08:04 +0100, Rowland Penny via samba wrote: > > > On Fri, 05 Apr 2024 08:06:10 +0200 > > > PaLi via samba <samba at lists.samba.org> wrote: > > > > > > > Hello > > >

Am 26.09.18 um 20:42 schrieb Rowland Penny via samba: > On Thu, 27 Sep 2018 06:29:26 +1200 > Andrew Bartlett <abartlet at samba.org> wrote: > >> On Wed, 2018-09-26 at 14:47 +0100, Rowland Penny via samba wrote: >>> On Wed, 26 Sep 2018 15:28:42 +0200 >>> Daniel Jordan <d.jordan at gfd.de> wrote: >>> >>>> >>>> dc01:~#

Is it possible to specify a list of DCs for Samba to use, rather than have it look them up dynamically via DNS? I have an issue with Kerberos, Samba, and SSSD where my machines stop authenticating after a period of time – preAuthentication errors, etc. I suspect it's because of a "DC mismatch" between the three. Because we have numerous DCs all over the world, I specifically