Hi Quentin,

Yes, the key has changed :) (and I'm currently working on it).

Could you import this key:

`wget -qO- https://samba.tranquil.it/tissamba-pubkey-2026.gpg | tee /usr/share/keyrings/tissamba.gpg > /dev/null`?

The documentation has been updated - maybe...

Hello,

No, it's not an error :)

We define the KDC servers below for the Kerberos realm of the domain:

[libdefaults]
default_realm = LONG_DOMAIN_NAME
dns_lookup_kdc = false
dns_lookup_realm=false
[realms]
LONG_DOMAIN_NAME = {
kdc = 127.0.0.1
kdc = AD_SERVER_IP1 ...

Thanks so much for your feedback!

Have a great rest of the day and a wonderful weekend!

Hi Vincent,

it seems the dist-upgrade is really messed up...

You can try this:

apt-get remove samba winbind libnss-winbind krb5-user smbclient ldb-tools python3-cryptography samba-vfs-modules samba-dsdb-modules samba-libs libwbclient0 samba-common-bin samba-common python3-samba ...

Hi Vincent,

I just tested the upgrade from Debian 11 4.16.5 to Samba 4.20.8 Debian 12 - and it works with this procedure:

`apt update`
`apt dist-upgrade -y` `
wget -qO- https://samba.tranquil.it/tissamba-pubkey.gpg | tee /usr/share/keyrings/tissamba.gpg > /dev/null`
`sha256sum /usr/share ...`

Hello all,

I apologize for the inconvenience. I ran scripts simultaneously, which I shouldn't have done.

Everything is ok now.

Thank you for your feedback!

Have a nice day,

Cool, thanks for your feedback!

Indeed, it must be quite demanding.

Have a good evening,

Yohannès

Hi Stéphane,

what version of Samba is running on this server?
We'd need to check the machine's specs (RAM/CPU) and load. Are there any applications making specific LDAP requests (with certain OIDs, for example, or nested groups, or with insufficient scope)?