[Samba] multi-site DC - AD

L.P.H. van Belle belle at bazuin.nl
Thu Feb 12 02:04:40 MST 2015

and you have added the following to the /etc/hosts	pdc.domain.co.id pdc

and you did setup your krb5.conf in that way you point directly to the correct hosts without the use of a search 

default = FILE:/var/log/krb5libs.log
kdc = FILE:/var/log/krb5kdc.log
admin_server = FILE:/var/log/kadmind.log

default_realm = SMBDOM.EXAMPLE.COM
dns_lookup_realm = false
dns_lookup_kdc = true
ticket_lifetime = 24h
renew_lifetime = 7d
forwardable = true

kdc = kerberos.example.com
admin_server = kerberos.example.com

.example.com = EXAMPLE.COM
example.com = EXAMPLE.COM

and maybe you should also find out where your latency delay is comming from.
>64 bytes from icmp_seq=5 ttl=61 time=194 ms
>64 bytes from icmp_seq=6 ttl=61 time=50.2 ms

install for example smokeping and track with mtr.


>-----Oorspronkelijk bericht-----
>Van: bentunx at gmail.com [mailto:samba-bounces at lists.samba.org] 
>Namens zhia chandra
>Verzonden: donderdag 12 februari 2015 9:10
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] multi-site DC - AD
>hi all
>i have problem with my multi-site AD-DC installation, one of my DC, 
>suddently cant start well, i think problem(corrupt) with the 
>LDAP database
>then i try to re join it, but every time i try to join it i always has 
>issue like this
>/Finding a writeable DC for domain 'domain.co.id'
>Found DC pdc.domain.co.id
>Password for [domain\administrator]:
>workgroup is domain
>realm is domain.co.id
>checking sAMAccountName
>Adding CN=DC24,OU=Domain Controllers,DC=domain,DC=co,DC=id
guration,D C=domain,DC=co,DC=id
>Adding CN=NTDS 
>Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for 
>d1-ab04-00c04fc2dcd2 at ncacn_ip_tcp:pdc.domain.co.id[1024,seal] 
>Join failed - cleaning up
>checking sAMAccountName
>Deleted CN=DC24,OU=Domain Controllers,DC=domain,DC=co,DC=id
>ERROR(runtime): uncaught exception - (-1073741643, 
>   File 
init__.py" , 
>line 175, in _run
>     return self.run(*args, **kwargs)
>   File 
>line 555, in run
>     machinepass=machinepass, use_ntvfs=use_ntvfs, 
>   File 
>line 1172 , in join_DC
>     ctx.do_join()
>   File 
>line 1075 , in do_join
>     ctx.join_add_objects()
>   File 
>line 541, in join_add_objects
>     ctx.join_add_ntdsdsa()
>   File 
>line 474, in join_add_ntdsdsa
>     ctx.DsAddEntry([rec])
>   File 
>line 384, in DsAddEntry
>     ctx.drsuapi_connect()
>   File 
>line 362, in drsuapi_connect
>     ctx.drsuapi = drsuapi.drsuapi(binding_string, ctx.lp, ctx.creds)/
>i have about 1mbps OpenVPN connection between this site to 
>another DC to 
>i try to ping from each DC    , i think its fine
>/[root at dc24 ~]# ping pdc
>PING pdc.domain.co.id ( 56(84) bytes of data.
>64 bytes from icmp_seq=1 ttl=61 time=140 ms
>64 bytes from icmp_seq=2 ttl=61 time=51.2 ms
>64 bytes from icmp_seq=3 ttl=61 time=48.5 ms
>64 bytes from icmp_seq=4 ttl=61 time=59.3 ms
>64 bytes from icmp_seq=5 ttl=61 time=194 ms
>64 bytes from icmp_seq=6 ttl=61 time=50.2 ms
>64 bytes from icmp_seq=7 ttl=61 time=65.5 ms
>64 bytes from icmp_seq=8 ttl=61 time=62.3 ms
>64 bytes from icmp_seq=9 ttl=61 time=50.1 ms
>--- pdc.domain.co.id ping statistics ---
>9 packets transmitted, 9 received, 0% packet loss, time 8835ms
>rtt min/avg/max/mdev = 48.567/80.214/194.278/48.556 ms/
>but still i cant re joint the dc
>any suggest to overcome this problem ?
>Thanks In Advance
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list