[Samba] preparing a 2nd DC
Stefan G. Weichinger
lists at xunil.at
Fri Feb 1 21:27:29 UTC 2019
Am 30.01.19 um 12:09 schrieb Stefan G. Weichinger via samba:
> Am 30.01.19 um 11:37 schrieb Rowland Penny via samba:
>> You will have to sync sysvol AFTER the join
>> The join will create the kerberos ticket (unless you are actually
>> referring to /etc/krb5.conf) and smb.conf.
>> /etc/resolv.conf needs to point to DC1 before the join and itself after
>> the join.
> phew! I didn't have that on the radar, good that I asked ...
> No problem to temporarily disable the rsync-job and rm the kerberos
> ticket (quick reboot of DC2 during lunch ;-)).
>>> I hesitate to join the DC2 during work hours ;-) from experience.
>> Wise decision ;-)
> At least this was done correctly ;-)
>>> And I think it's better to ask you *before* I crash my network ;-)
>> Oh definitely, better to ask before, it is easier to fix ;-)
> great, thanks so far.
Are we surprised that I face difficulties at the join? no ...
clean /etc/samba, no krb5.conf
# samba-tool domain join mydomain.at -U"BUERO\Administrator"
--dns-backend=SAMBA_INTERNAL --option='idmap_ldb:use rfc2307 = yes'
Password for [BUERO\Administrator]:
ERROR(runtime): uncaught exception - (-1073741606,
'provision_store_self_join failed with NT_STATUS_CANT_ACCESS_DOMAIN_INFO')
File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line
176, in _run
return self.run(*args, **kwargs)
File "/usr/lib/python2.7/dist-packages/samba/netcmd/domain.py", line
697, in run
the smb.conf on DC(1) says:
workgroup = BUERO
realm = MYDOMAIN.AT
netbios name = DC
that comes from old NT4 times
I wonder if I use wrong realm/domain name or if I miss some package on DC2
dsdb-modules are installed already (were missing at first)
More information about the samba