similar to: samba remote site client authentication and network browsing problem

On Tue, 24 Dec 2024 11:38:17 +0000 Manzini Enrico via samba <samba at lists.samba.org> wrote: > Hello, > we are testing a dc/rodc configuration with Samba AD, but we are > stuck with a problem that occurs when one of the writable DCs (the > one that was used as a partner during rodc join) is shutdown: Test > configuration: > - writeable dc and read only dc Samba

Hi Rowland We actually use RODC's because we have a customer with hub and spoke configuration with 4 RWDC's in the central site, and about 80 remote sites with RODC's deployed, all of these with low hardware security, sites where the machine can physically can be stolen, so we opted to use RODC's machines at the remote sites The connectivity and dns resolution works both fine, with

On Thu, 2 Jan 2025 08:25:56 +0000 Manzini Enrico <emanzini at zensistemi.com> wrote: > Hi Rowland > > I try some several test and: > - tried fsmo transfer from the rwdc used as replication partner to > the secondary dc, no luck, problem persist > - tried join with no replication partner specification, no luck, > problem persist Also during the join procedure the rodc

On Tue, 31 Dec 2024 09:42:05 +0000 Manzini Enrico via samba <samba at lists.samba.org> wrote: > Ok, but why if i browse the network from the client with the remote > rodc and the rwdc used as replication partner for rodc join online, > everything work as expected, but if i shutdown the rwdc used for rodc > join replication partner offline, client no work anymore? >

Ok, but why if i browse the network from the client with the remote rodc and the rwdc used as replication partner for rodc join online, everything work as expected, but if i shutdown the rwdc used for rodc join replication partner offline, client no work anymore? The join command for the remote rodc RODC-1 is: samba-tool domain join scratch.lan RODC --server=dc-1.scratch.lan --realm=SCRATCH.LAN

Hi Rowland I try some several test and: - tried fsmo transfer from the rwdc used as replication partner to the secondary dc, no luck, problem persist - tried join with no replication partner specification, no luck, problem persist Also during the join procedure the rodc anyway find a domain controller to use as a replication partner (it say "find dc dc_name", and after the join

On Mon, 30 Dec 2024 16:07:31 +0000 Manzini Enrico via samba <samba at lists.samba.org> wrote: > Hi Rowland > We actually use RODC's because we have a customer with hub and spoke > configuration with 4 RWDC's in the central site, and about 80 remote > sites with RODC's deployed, all of these with low hardware security, > sites where the machine can physically can

Hi Rowland, below, the servers and the remote client dns configuration Server's dns configuration: DC-1: - themself - DC-2 DC-2 - themself - DC-1 RODC-1 - DC-1 - DC-2 - themself REMOTE-CLIENT - directly point as dns to the RODC-1 ip - nltest /dsgetdc:domain_name report RODC-1 as logon server DNS SRV RECORDS: The ad srv records uses default configuration Enrico Manzini

On Fri, 3 Jan 2025 08:29:59 +0000 Manzini Enrico <emanzini at zensistemi.com> wrote: > Hi Rowland, below, the servers and the remote client dns configuration > > Server's dns configuration: > DC-1: > - themself > - DC-2 > > DC-2 > - themself > - DC-1 > > RODC-1 > - DC-1 > - DC-2 > - themself > In my opinion, all Samba AD DCs

Hi Rowland, i've modified, the dns like below: RODC-1: - themself - DC-1 - DC-2 DC-1 And DC-2 dns configuration not modified But the problems remains - samba-tool drs replicate rodc-1 dc-2 dc=scratch,dc=lan -U administrator did not replicate - network browsing anyway require authentication and not work Enrico Manzini -----Messaggio originale----- Da: samba <samba-bounces at

Hi Marc, > Am 08.04.2015 um 17:25 schrieb BRIEC, Pierre: >> On Site1, the machines accounts are specifics, same for the Users and >> Groups except 1 group that is common with Site2 (The Teachers). >> Today, each site is independant, >> >> Now, i would like a create a new domain Samba4 AD whith all machines and >> users from site1 and site2 together. >>

On Sun, May 5, 2019 at 9:52 AM Rowland Penny via samba < samba at lists.samba.org> wrote: > On Sun, 5 May 2019 09:20:37 -0300 > Emerson Kfuri via samba <samba at lists.samba.org> wrote: > > > Hello, > > > > Recently I started using RODC servers on my environment and noticed a > > few issues with it: > > - lack of LDAP SPNs > > -

Hi everyone, I would like to have some input on ressources access from a workstation logged on a RODC server that has to connect on hub site servers. After login in the remote windows workstation, I have LOGONSERVER environment variable set to the local RODC server (workstation and user credentials have been preloaded). Everything works fine on local server. However if I want to connect to

On Wed, 24 Oct 2018 09:45:39 +1300 Garming Sam <garming at catalyst.net.nz> wrote: > > On 23/10/18 9:48 PM, Rowland Penny via samba wrote: > > On Tue, 23 Oct 2018 10:07:29 +1300 > > Garming Sam via samba <samba at lists.samba.org> wrote: > > > >> Hi, > >> > >> On 20/10/18 1:26 AM, Julien Ropé via samba wrote: > >>>  The

Hi Garming, > As far I know, all this should work as you would expect. Quite recently, > Andrew Bartlett and I went about testing some of the behaviour of the > KDC and confirming behaviour such as RODC ticket forwarding. thanks for the input. It gives me hope to dig deeper! I have some more time to spend on this issue today, I gonna try some more scenario. > The one thing to check

Hello everybody, if I set up a RODC in a different site with an own subnet do I have to replicate the machine-passwords with "samba-tool rodc reload host\$ --server=addc"? Or can a machine always authenticate against a RODC? Greetings Stefan -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 195

On Tue, 23 Oct 2018 10:07:29 +1300 Garming Sam via samba <samba at lists.samba.org> wrote: > Hi, > > On 20/10/18 1:26 AM, Julien Ropé via samba wrote: > > > >  The deployment works, and computers seems to interact with the > > RODCs as they should, but sometimes computers leave the domain > > after a password change. > > > >  This seems to

Hi, I've tried replacing some 2012R2 RODC by samba-4.9.4 RODCs. One question about password replication: Samba wiki (https://wiki.samba.org/index.php/Join_a_domain_as_a_RODC) states that samba RODC acts as a proxy server to a writable DC if users are not member of the Allowed RODC Password Replication Group, which is the behavior we knew (and what we want) from the MS RODCs. Our test

Am 22.11.18 um 17:51 schrieb Rowland Penny via samba: > On Thu, 22 Nov 2018 17:29:16 +0100 > Stefan Kania via samba <samba at lists.samba.org> wrote: > >> Hello everybody, >> >> if I set up a RODC in a different site with an own subnet do I have to >> replicate the machine-passwords with "samba-tool rodc reload host\$ >> --server=addc"? Or

> Jakob Curdes via samba<samba at lists.samba.org> wrote: > >> Hello, we have setup a SAMBA4 RODC in our setup where we have two >> exisitng RW Samba4 DC's. >> >> The RODC is joined correctly and can preload user accounts etc. It >> also can resolve its own name and the name of other DC's, also the >> SRV records needed. >> We created