similar to: preparing for a new site with an extra domain controller

From my experience, create the DC in the new office. Join domain. Using the mmc Sites and Sevices from a windows workstation, create new site and assign network. You can choose to rename the default site or create new site and assign network there. This is not necessary. I don?t recall doing anything else. On 10 Dec 2024 at 08:06 +0000, Stefan G. Weichinger via samba <samba at

Am 10.12.24 um 09:28 schrieb Luis Peromarta via samba: > From my experience, create the DC in the new office. Join domain. > > Using the mmc Sites and Sevices from a windows workstation, create new site and assign network. > > You can choose to rename the default site or create new site and assign network there. This is not necessary. > > I don?t recall doing anything

Hello everybody, I saw Guus already had contact with Jason over email. What do you guys tinc of wireguards, are there advantages? Jason seems to have a good grip of what he is talking about. https://fosdem.org/2017/schedule/event/wireguard/attachments/slides/1675/export/events/attachments/wireguard/slides/1675/wireguard_slides.pdf https://fosdem.org/2017/schedule/event/wireguard/ Kind

Hello, I published a new documentation about how to setup sites and subnets in Active Directory: https://wiki.samba.org/index.php/Active_Directory_Sites Regards, Marc

Hello, Reading about, specifically in the wiki <https://wiki.samba.org/index.php/Active_Directory_Sites> link, says the following about subnets. "Create a subnet entry for all subnets in your network and assign them to a site:" The subnet on which our DCs are configured is a public IP block, but the client machines are in a subnet with a private address block. Do I need to

Greetings, I'm not sure what else to add. If you need more info please let me know. Any input is greatly appreciated. Eric On Sat, Mar 4, 2023 at 2:58?PM Eric <rvwbug at gmail.com> wrote: > Greetings, > > This is my first attempt at multi-site with unique subnets (actually > first attempt at more than on DC). > > I had the existing "defaultFirstSite"

Thanks for the answer ligpanda101!! For DC's that are not present on a subnet, assign the subnet to the closet > site to a DC Visibly via RSAT, how would that look? On Wed, Jun 27, 2018 at 1:06 PM lingpanda101 <lingpanda101 at gmail.com> wrote: > On 6/27/2018 11:44 AM, Elias Pereira via samba wrote: > > Hello, > > > > Reading about, specifically in the wiki

Hi, Existing Samba setup has no sites, two servers (one AD and one DC) are all in Default-First-Site-Name site. Inter-Site Transport: IP Site Link: DEFAULTIPSITELINK Sites: Default-First-Site-Name (already existing): Domain Controller(s): AD, HKDC Subnets: 192.168.1.0/24 SZOffice (new created): Domain Controller:

Hi Jared, I've seen the same while testing on digital ocean, I think it's the context switching that happens when sending a packet. I've done some testing with wireguard and that has a lot better performance but it's still changing quite a lot and only does a subset of what tinc does so probably not a stable solution. Martin On Wed, 17 May 2017 at 18:05 Jared Ledvina <jared at

Hi folks, I have been using Samba4 as an Active Directory domain controller with many clients since about 2013, and it is the best. I have recently been asked to extend the AD domain in a clients office, to 6 other physical sites. Rather than reinvent the wheel, what is the best way to accomplish this given the current support in Samba4? Alex Ferrara Director Receptive IT Solutions

All, I configured two DCs (Samba version 4.5.5) replicating ad.corp.com in two sites ( https://wiki.samba.org/index.php/Active_Directory_Sites) Following 'DNS configuration on Domain Controllers' section from this wiki https://wiki.samba.org/index.php/Joining_a_Samba_DC_to_an_Existing_Active_Directory If I configure nameserver DC1 to be the first resolver for DC2, samba_dnsupdate

Hello, I am trying to figure out, whether there are any best practices how to run a Samba AD DC in a container. First of all: why a container? Because obviously containers require less resources and are easier to update than multiple linux systems ? and I want to spend some of the savings into redundancy (multiple DCs, also distributed to serve different locations). Googling around I found

Hi list, I recently realized that using multiple DC has a major drawback when using Samba In my understanding, in a classical AD environment, sysvol share is supposed to be a DFS share. This means that proximity rules are applied when accessing to it. When using samba it seems that we face a classical round-robin DNS, which can lead to the situation where a machine on site A tries to fetch

In Samba/NT i was used to share mapping done in netlogon script, so users move around between sites, get home and profile from remote location but still have share mapped from local servers. In Samba/AD, using GPO, share mapping is in ''user policy'', and so user roam between sites and get different policies? I'm googling around but i'm a bit confused... i can still use

Greetings, This is my first attempt at multi-site with unique subnets (actually first attempt at more than on DC). I had the existing "defaultFirstSite" then added a second site and two subnets (that I associated with each site). I joined a second DC from the second site with the following: samba-tool domain join ssc.domain.com DC -Uadministrator --realm= ssc.domain.com

On 09/10/2019 09:35, Rowland penny via samba wrote: > On 09/10/2019 09:14, lejeczek via samba wrote: >> hi guys, >> >> what would be an absolute minimum on the list of sevices one should have >> for NT style domain? (userdb in separate LDAP, dns too is in bind9) >> >> And maybe even less need for stand-alone server? >> >> many thanks, L. >>

Hai Marco, > It is still true that 'samba-tool sites' is 'not recommended' and it i > better to manage sites and subnets with ADSS? Or that page have to/can > be updated? When i look at the page modify date, i say use the RSAT tools. I dont (hardly) use samba-tool here.. I do everything through RSAT tools. > Only a little note: You can target the ip range in the GPO

I would like to ask that more flexibility be built into automatically choosing sites for downloading. I have just upgraded to CentOS 5.2. When I look for a mirror, I get many choices from Taiwan. Since I am in Hong Kong this makes sense geographically but .... not in terms of bandwidth. Although Taiwan is very close, it is almost the slowest connection I can make. Some .jp sites are good

hi guys, what would be an absolute minimum on the list of sevices one should have for NT style domain? (userdb in separate LDAP, dns too is in bind9) And maybe even less need for stand-alone server? many thanks, L.

Hi all, Is there a command line to add DC to some site? The idea is to have a domain with several sites. If the whole AD database get corrupt I would restore some backup to recreate the first DC (the one with FSMO) then I'll join all others DC to that domain to force them to rebuild their database according to the one restored. Doing that I'll get all DC with the right DB but also in