[Samba] samba 4 joining a Windows 2003 srv / Sync and DNS problems
Sam
sr42354 at gmail.com
Fri Apr 3 08:53:02 MDT 2015
hello,
After a lot of different approach to move from an old windows 2000
server AD to samba4, my last try seems nearly good now...
I did this :
- Preparing the old DC with adprep commands
- add DNS and AD roles in a new temporary win 2003srv
- add this new server as an AD controller
- transfer all roles to win2003 with ntdsutil command
- demote win2000
- put the AD domain and forest functional level to 2003
- move _msdcs in the DNS management tool as described here
(http://support.microsoft.com/kb/817470/en-us)
- adjust all zones with "Nonsecure and secure" Dynamic updates
- adjust all zones with Replication "To all DNS servers in the active
directory forest ariane.intra"
- join a new sernet samba4 server.
A lot of things works, I can use rsat tools for managing the dns and the
AD users of Samba4.
But some things disturbing me...
Replication works only in one way
during Samba4 join I had see that :
descriptor_sd_propagation_recursive:
DC=DomainDnsZones,DC=ariane,DC=intra not found under DC=ariane,DC=intra
descriptor_sd_propagation_recursive:
DC=ForestDnsZones,DC=ariane,DC=intra not found under DC=ariane,DC=intra
and now if I do a "samba-tool drs showrepl" command, I thinks it
missings these parts ( DomainDnsZones and ForestDnsZones) in OUTBOUND
sections :
root at S4:~# samba-tool drs showrepl
Premier-Site-par-defaut\S4
DSA Options: 0x00000001
DSA object GUID: 1092bc64-4165-4e98-9aa7-97a71481fef4
DSA invocationId: f36fc4a1-714c-4906-962c-49f713337271
==== INBOUND NEIGHBORS ====
DC=ariane,DC=intra
Premier-Site-par-defaut\W2003 via RPC
DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d
Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful
0 consecutive failure(s).
Last success @ Fri Apr 3 16:36:58 2015 CEST
DC=DomainDnsZones,DC=ariane,DC=intra
Premier-Site-par-defaut\W2003 via RPC
DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d
Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful
0 consecutive failure(s).
Last success @ Fri Apr 3 16:36:58 2015 CEST
CN=Configuration,DC=ariane,DC=intra
Premier-Site-par-defaut\W2003 via RPC
DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d
Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful
0 consecutive failure(s).
Last success @ Fri Apr 3 16:36:58 2015 CEST
CN=Schema,CN=Configuration,DC=ariane,DC=intra
Premier-Site-par-defaut\W2003 via RPC
DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d
Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful
0 consecutive failure(s).
Last success @ Fri Apr 3 16:36:58 2015 CEST
DC=ForestDnsZones,DC=ariane,DC=intra
Premier-Site-par-defaut\W2003 via RPC
DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d
Last attempt @ Fri Apr 3 16:36:58 2015 CEST was successful
0 consecutive failure(s).
Last success @ Fri Apr 3 16:36:58 2015 CEST
==== OUTBOUND NEIGHBORS ====
DC=ariane,DC=intra
Premier-Site-par-defaut\W2003 via RPC
DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d
Last attempt @ Fri Apr 3 15:22:18 2015 CEST was successful
0 consecutive failure(s).
Last success @ Fri Apr 3 15:22:18 2015 CEST
CN=Configuration,DC=ariane,DC=intra
Premier-Site-par-defaut\W2003 via RPC
DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d
Last attempt @ Fri Apr 3 15:22:18 2015 CEST was successful
0 consecutive failure(s).
Last success @ Fri Apr 3 15:22:18 2015 CEST
CN=Schema,CN=Configuration,DC=ariane,DC=intra
Premier-Site-par-defaut\W2003 via RPC
DSA object GUID: 6939e9d0-1c85-4600-9b7f-18ab35e6775d
Last attempt @ Fri Apr 3 15:22:23 2015 CEST was successful
0 consecutive failure(s).
Last success @ Fri Apr 3 15:22:23 2015 CEST
==== KCC CONNECTION OBJECTS ====
Connection --
Connection name: d4f5908c-c251-43e3-9c5d-1f29e68b3a1b
Enabled : TRUE
Server DNS name : w2003.ariane.intra
Server DN name : CN=NTDS
Settings,CN=W2003,CN=Servers,CN=Premier-Site-par-defaut,CN=Sites,CN=Configuration,DC=ariane,DC=intra
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!
What can I do on the win2003 Ad to fix this?
Thanks all!
Samuel
More information about the samba
mailing list