Re: [Samba] Failover
Hi, Actually my main problem atm, I can't open the shares from windows 7 clients (object couldn't found), \\domain\share and also \10.48.16.155\share is working perfectly from windows XP clients. Both DC are running his own DNS server (i am using bind9) and also their own sysvol and stuffz. Only the data part controlled by drbd+heartbeat. Refards, Robert 2013/10/14 Daniel Müller > By the way! All your DCs should be able to run the 10.48.16.155!?? And all > your shares are mapped like this : \\10.48.16.155\share!? > How do you manage the second Controller to take over when the Master DC is > down. It is important to have the DC slave dns working. > With the internal DNS or dlz_bind I did not succeed to manage this. Only > flat files could do the job for me. So the best thing to do > Is to map like \\your.domain\share. No failover Ip is needed. > > Greetings > Daniel > > --- > EDV Daniel Müller > > Leitung EDV > Tropenklinik Paul-Lechler-Krankenhaus > Paul-Lechler-Str. 24 > 72076 Tübingen > > Tel.: 07071/206-463, Fax: 07071/206-499 > eMail: [email protected] > Internet: www.tropenklinik.de > --- > -Ursprüngliche Nachricht- > Von: [email protected] [mailto:[email protected]] > Im > Auftrag von Robert Gurdon > Gesendet: Montag, 7. Oktober 2013 16:15 > An: [email protected] > Betreff: [Samba] Failover > > Hi guys, > > > I have a domain with Samba 4.0.5 domain controllers and also a failover > DRBD > shared disk, where the "active" DC controlls the access to the disk. > DOMAINC01 - 10.48.16.150 > DOMAINC02 - 10.48.16.151 > DOMAINCHA - 10.48.16.155 << this would be the failover IP, which works > perfectly on Windows XP clients. > I can see the shares, just like on DOMAINC01 or DOMAINC02 and if the users > has the proper credentials they can write open etc. > But when I try to do the same on a Windows 7 client I simply get an error > message " You dont have the proper rights to open the directory" > I guess because of the DOMAINCHA "virtual" controller is not in the AC, but > shall I add a computer to the AC so my win7 clients could open the > available > shares? > > Thanks, > > Robert > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Failover
By the way! All your DCs should be able to run the 10.48.16.155!?? And all your shares are mapped like this : \\10.48.16.155\share!? How do you manage the second Controller to take over when the Master DC is down. It is important to have the DC slave dns working. With the internal DNS or dlz_bind I did not succeed to manage this. Only flat files could do the job for me. So the best thing to do Is to map like \\your.domain\share. No failover Ip is needed. Greetings Daniel --- EDV Daniel Müller Leitung EDV Tropenklinik Paul-Lechler-Krankenhaus Paul-Lechler-Str. 24 72076 Tübingen Tel.: 07071/206-463, Fax: 07071/206-499 eMail: [email protected] Internet: www.tropenklinik.de --- -Ursprüngliche Nachricht- Von: [email protected] [mailto:[email protected]] Im Auftrag von Robert Gurdon Gesendet: Montag, 7. Oktober 2013 16:15 An: [email protected] Betreff: [Samba] Failover Hi guys, I have a domain with Samba 4.0.5 domain controllers and also a failover DRBD shared disk, where the "active" DC controlls the access to the disk. DOMAINC01 - 10.48.16.150 DOMAINC02 - 10.48.16.151 DOMAINCHA - 10.48.16.155 << this would be the failover IP, which works perfectly on Windows XP clients. I can see the shares, just like on DOMAINC01 or DOMAINC02 and if the users has the proper credentials they can write open etc. But when I try to do the same on a Windows 7 client I simply get an error message " You dont have the proper rights to open the directory" I guess because of the DOMAINCHA "virtual" controller is not in the AC, but shall I add a computer to the AC so my win7 clients could open the available shares? Thanks, Robert -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Failover
2013-10-07 21:11 keltezéssel, Andrew Bartlett írta: On Mon, 2013-10-07 at 15:36 +0200, Sandbox wrote: Hi guys, I have a domain with Samba 4.0.5 domain controllers and also a failover DRBD shared disk, where the "active" DC controlls the access to the disk. DOMAINC01 - 10.48.16.150 DOMAINC02 - 10.48.16.151 DOMAINCHA - 10.48.16.155 << this would be the failover IP, which works perfectly on Windows XP clients. I can see the shares, just like on DOMAINC01 or DOMAINC02 and if the users has the proper credentials they can write open etc. But when I try to do the same on a Windows 7 client I simply get an error message " You dont have the proper rights to open the directory" I guess because of the DOMAINCHA "virtual" controller is not in the AC, but shall I add a computer to the AC so my win7 clients could open the available shares? Please don't use DRDB with Samba as an AD DC. You don't need it (you should have two DRS replicating DCs). The reason I am so strongly against this is that I had to work very hard to recover a corrupt database at such a site. We suspect that barriers were either not enabled or not passed down to the OS in this case, followed by a unexpected loss of power. The corrupt database was then perfectly mirrored to the DRDB clone, resulting in two corrupt mirrors. DRS replication likely would have detected the corruption (because the database would not have been valid) and failed the replica, saving the data. Andrew Bartlett Hi, You misunderstood me, I don't use DRBD as database storage (only for users documents and stuffs) my servers database are sitting on their "private" place :) -- Kind regards: Robert -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: [Samba] Failover
On Mon, 2013-10-07 at 15:36 +0200, Sandbox wrote: > Hi guys, > > > I have a domain with Samba 4.0.5 domain controllers and also a failover > DRBD shared disk, where the "active" DC controlls the access to the disk. > DOMAINC01 - 10.48.16.150 > DOMAINC02 - 10.48.16.151 > DOMAINCHA - 10.48.16.155 << this would be the failover IP, which works > perfectly on Windows XP clients. > I can see the shares, just like on DOMAINC01 or DOMAINC02 and if the users > has the proper credentials they can write open etc. > But when I try to do the same on a Windows 7 client I simply get an error > message " You dont have the proper rights to open the directory" > I guess because of the DOMAINCHA "virtual" controller is not in the AC, but > shall I add a computer to the AC so my win7 clients could open the > available shares? Please don't use DRDB with Samba as an AD DC. You don't need it (you should have two DRS replicating DCs). The reason I am so strongly against this is that I had to work very hard to recover a corrupt database at such a site. We suspect that barriers were either not enabled or not passed down to the OS in this case, followed by a unexpected loss of power. The corrupt database was then perfectly mirrored to the DRDB clone, resulting in two corrupt mirrors. DRS replication likely would have detected the corruption (because the database would not have been valid) and failed the replica, saving the data. Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba
Re: RE [Samba] Failover LDAP?
Thanks Andrew and the others who gave suggestions on this. I guess the only left now is to actually test it to see if it works. - delamatrix Andrew Bartlett wrote: On Sun, 2006-05-28 at 19:05 +1000, adrian sender wrote: Samba 3 By Example Chapter 6. Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server passdb backend = ldapsam:ldap://master.abmas.biz \ ldapsam:ldap://slave.abmas.biz This is the incorrect way to handle this problem. The correct syntax is given as an example in the smb.conf manpage: passdb backend = ldapsam:"ldap://ldap-1.example.com \ ldap://ldap-2.example.com"; Andrew Bartlett -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: RE [Samba] Failover LDAP?
Sorry you are right; Figure 6.2. Samba Configuration to Use a Single LDAP Server The addition of a failover LDAP server can simply be done by adding a second entry for the failover server to the single ldapsam entry, as shown here (note the particular use of the double quotes): passdb backend = ldapsam:"ldap://master.abmas.biz \ ldap://slave.abmas.biz"; Thats my fault for not using the correct example. Adrian Sender. From: Andrew Bartlett <[EMAIL PROTECTED]> To: adrian sender <[EMAIL PROTECTED]> CC: [email protected] Subject: Re: RE [Samba] Failover LDAP? Date: Mon, 29 May 2006 13:36:25 +1000 On Sun, 2006-05-28 at 19:05 +1000, adrian sender wrote: > Samba 3 By Example Chapter 6. > > Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server > > passdb backend = ldapsam:ldap://master.abmas.biz \ > ldapsam:ldap://slave.abmas.biz This is the incorrect way to handle this problem. The correct syntax is given as an example in the smb.conf manpage: passdb backend = ldapsam:"ldap://ldap-1.example.com \ ldap://ldap-2.example.com"; Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net << signature.asc >> -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: RE [Samba] Failover LDAP?
On Sun, 2006-05-28 at 19:05 +1000, adrian sender wrote: > Samba 3 By Example Chapter 6. > > Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server > > passdb backend = ldapsam:ldap://master.abmas.biz \ > ldapsam:ldap://slave.abmas.biz This is the incorrect way to handle this problem. The correct syntax is given as an example in the smb.conf manpage: passdb backend = ldapsam:"ldap://ldap-1.example.com \ ldap://ldap-2.example.com"; Andrew Bartlett -- Andrew Bartletthttp://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Student Network Administrator, Hawker College http://hawkerc.net signature.asc Description: This is a digitally signed message part -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
RE [Samba] Failover LDAP?
Samba 3 By Example Chapter 6. Figure 6.3. Samba Configuration to Use a Dual (Fail-over) LDAP Server passdb backend = ldapsam:ldap://master.abmas.biz \ ldapsam:ldap://slave.abmas.biz Cheers, Adrian Sender. From: Golden Butler <[EMAIL PROTECTED]> To: Samba Mailing List Subject: [Samba] Failover LDAP? Sent: Friday, 26 May 2006 1:41:19 PM Okay, I've searched around on this, but can't find any examples or docs. Is there a way to specify a second ldap server in the smb.conf, in case the primary ldap server fails or become unreachable? - Delamatrix -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Failover LDAP?
http://us5.samba.org/samba/docs/man/Samba-Guide/2000users.html#ch7dualok Golden Butler wrote: Okay, I've searched around on this, but can't find any examples or docs. Is there a way to specify a second ldap server in the smb.conf, in case the primary ldap server fails or become unreachable? - Delamatrix -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
Re: [Samba] Failover LDAP?
You should be able to specify them as a list ldap server = ldap1 ldap2 ldap3 Though that was for 2.2, looking at my 3.0 confs I've got passdb backend = ldapsam:ldap://ldapX which is local to the PDC/BDC you probably want passdb backend = ldapsam:"ldap://ldap1 ldap://ldap2"; I think the quotes are important. Duncan Golden Butler wrote: Okay, I've searched around on this, but can't find any examples or docs. Is there a way to specify a second ldap server in the smb.conf, in case the primary ldap server fails or become unreachable? - Delamatrix -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/listinfo/samba
