samba - Apr 2015 - Fwd: Fwd: samba_dnsupdate failed with RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any KDC for requested realm)

---------- Forwarded message ----------
From: Dania Ramirez Moya <dania181087 at gmail.com>
Date: 2015-03-30 16:45 GMT-04:00
Subject: Re: Fwd: samba_dnsupdate failed with RuntimeError: kinit for
SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any KDC for requested realm)
To: Rowland Penny <rowlandpenny at googlemail.com>
Cc: samba <samba at lists.samba.org>


Hello rowland
I tested with realm economia.lcl and and the problem was solved.It seems
that is my single label domain.Will I have any option to migrate my w2k3 to
samba4 ? Is it possible to rename my single label domain to later migrate ?

Best regards

2015-03-28 18:09 GMT-04:00 Rowland Penny <rowlandpenny at googlemail.com>:

 On 28/03/15 21:15, Dania Ramirez Moya wrote:
>
>
>  Hello, thank you Rowland for you response
>   Yes, it is.This domain was installed with a single label, just
> ECONOMIA. Is that a problem?
>
>
> It could be, the realm name is usually the DNS domain name, whilst the
> windows domain name is just one word and is usually the left hand part of
> the realm name. i.e. if the DNS domain name  is example.com then the
> realm name would be EXAMPLE.COM (the realm name is usually in uppercase)
> and the windows domain name would be EXAMPLE (again in uppercase). If
> samba_dnsupdate expects something like example.com, then this could be
> your problem, not saying it is, only that it could be.
>
> I would suggest that you check on the windows server what your realm name
> is, you may find that it isn't 'ECONOMIA'
>
> Rowland
>
>
>    Thit is my /etc/krb5.conf
>
> [libdefaults]
>         default_realm = ECONOMIA
>         dns_lookup_realm = true
>         dns_lookup_kdc = true
>  I made the changes that you suggest me but  I continue to get the same
> result RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot
> contact any KDC for)
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
>
> *samba_dnsupdate --verbose IPs: ['192.168.186.137'] Skipping PDC
entry
> (SRV _ldap._tcp.pdc._msdcs.${DNSDOMAIN}                   ${HOSTNAME} 389)
> as we are not a PDC Skipping PDC entry (SRV
> _ldap._tcp.pdc._msdcs.${DNSFOREST}                   ${HOSTNAME} 389) as we
> are not a PDC Looking for DNS entry A economia 192.168.186.137 as economia.
> Failed to find matching DNS entry A economia 192.168.186.137 Looking for
> DNS entry A smb4economia.economia 192.168.186.137 as smb4economia.economia.
> Looking for DNS entry A gc._msdcs.economia 192.168.186.137 as
> gc._msdcs.economia. Failed to find matching DNS entry A gc._msdcs.economia
> 192.168.186.137 Looking for DNS entry CNAME
> 207c6ca4-3976-4aaf-b60a-bc98093df340._msdcs.economia smb4economia.economia
> as 207c6ca4-3976-4aaf-b60a-bc98093df340._msdcs.economia. Looking for DNS
> entry SRV _kpasswd._tcp.economia smb4economia.economia 464 as
> _kpasswd._tcp.economia. Checking 0 100 464 dc.economia. against SRV
> _kpasswd._tcp.economia smb4economia.economia 464 Failed to find matching
> DNS entry SRV _kpasswd._tcp.economia smb4economia.economia 464 Looking for
> DNS entry SRV _kpasswd._udp.economia smb4economia.economia 464 as
> _kpasswd._udp.economia. Checking 0 100 464 dc.economia. against SRV
> _kpasswd._udp.economia smb4economia.economia 464 Failed to find matching
> DNS entry SRV _kpasswd._udp.economia smb4economia.economia 464 Looking for
> DNS entry SRV _kerberos._tcp.economia smb4economia.economia 88 as
> _kerberos._tcp.economia. Checking 0 100 88 dc.economia. against SRV
> _kerberos._tcp.economia smb4economia.economia 88 Failed to find matching
> DNS entry SRV _kerberos._tcp.economia smb4economia.economia 88 Looking for
> DNS entry SRV _kerberos._tcp.dc._msdcs.economia smb4economia.economia 88 as
> _kerberos._tcp.dc._msdcs.economia. Checking 0 100 88 dc.economia. against
> SRV _kerberos._tcp.dc._msdcs.economia smb4economia.economia 88 Failed to
> find matching DNS entry SRV _kerberos._tcp.dc._msdcs.economia
> smb4economia.economia 88 Looking for DNS entry SRV
> _kerberos._tcp.default-first-site-name._sites.economia
> smb4economia.economia 88 as
> _kerberos._tcp.default-first-site-name._sites.economia. Checking 0 100 88
> dc.economia. against SRV
> _kerberos._tcp.default-first-site-name._sites.economia
> smb4economia.economia 88 Failed to find matching DNS entry SRV
> _kerberos._tcp.default-first-site-name._sites.economia
> smb4economia.economia 88 Looking for DNS entry SRV
> _kerberos._tcp.default-first-site-name._sites.dc._msdcs.economia
> smb4economia.economia 88 as
> _kerberos._tcp.default-first-site-name._sites.dc._msdcs.economia. Checking
> 0 100 88 dc.economia. against SRV
> _kerberos._tcp.default-first-site-name._sites.dc._msdcs.economia
> smb4economia.economia 88 Failed to find matching DNS entry SRV
> _kerberos._tcp.default-first-site-name._sites.dc._msdcs.economia
> smb4economia.economia 88 Looking for DNS entry SRV _kerberos._udp.economia
> smb4economia.economia 88 as _kerberos._udp.economia. Checking 0 100 88
> dc.economia. against SRV _kerberos._udp.economia smb4economia.economia 88
> Failed to find matching DNS entry SRV _kerberos._udp.economia
> smb4economia.economia 88 Looking for DNS entry SRV _ldap._tcp.economia
> smb4economia.economia 389 as _ldap._tcp.economia. Checking 0 100 389
> dc.economia. against SRV _ldap._tcp.economia smb4economia.economia 389
> Failed to find matching DNS entry SRV _ldap._tcp.economia
> smb4economia.economia 389 Looking for DNS entry SRV
> _ldap._tcp.dc._msdcs.economia smb4economia.economia 389 as
> _ldap._tcp.dc._msdcs.economia. Checking 0 100 389 dc.economia. against SRV
> _ldap._tcp.dc._msdcs.economia smb4economia.economia 389 Failed to find
> matching DNS entry SRV _ldap._tcp.dc._msdcs.economia smb4economia.economia
> 389 Looking for DNS entry SRV _ldap._tcp.gc._msdcs.economia
> smb4economia.economia 3268 as _ldap._tcp.gc._msdcs.economia. Checking 0 100
> 3268 dc.economia. against SRV _ldap._tcp.gc._msdcs.economia
> smb4economia.economia 3268 Failed to find matching DNS entry SRV
> _ldap._tcp.gc._msdcs.economia smb4economia.economia 3268 Looking for DNS
> entry SRV _ldap._tcp.default-first-site-name._sites.economia
> smb4economia.economia 389 as
> _ldap._tcp.default-first-site-name._sites.economia. Checking 0 100 389
> dc.economia. against SRV _ldap._tcp.default-first-site-name._sites.economia
> smb4economia.economia 389 Failed to find matching DNS entry SRV
> _ldap._tcp.default-first-site-name._sites.economia smb4economia.economia
> 389 Looking for DNS entry SRV
> _ldap._tcp.default-first-site-name._sites.dc._msdcs.economia
> smb4economia.economia 389 as
> _ldap._tcp.default-first-site-name._sites.dc._msdcs.economia. Checking 0
> 100 389 dc.economia. against SRV
> _ldap._tcp.default-first-site-name._sites.dc._msdcs.economia
> smb4economia.economia 389 Failed to find matching DNS entry SRV
> _ldap._tcp.default-first-site-name._sites.dc._msdcs.economia
> smb4economia.economia 389 Looking for DNS entry SRV
> _ldap._tcp.default-first-site-name._sites.gc._msdcs.economia
> smb4economia.economia 3268 as
> _ldap._tcp.default-first-site-name._sites.gc._msdcs.economia. Checking 0
> 100 3268 dc.economia. against SRV
> _ldap._tcp.default-first-site-name._sites.gc._msdcs.economia
> smb4economia.economia 3268 Failed to find matching DNS entry SRV
> _ldap._tcp.default-first-site-name._sites.gc._msdcs.economia
> smb4economia.economia 3268 Looking for DNS entry SRV
> _ldap._tcp.2dcb8925-d286-4995-8b9a-3cbc85a636b0.domains._msdcs.economia
> smb4economia.economia 389 as
> _ldap._tcp.2dcb8925-d286-4995-8b9a-3cbc85a636b0.domains._msdcs.economia.
> Checking 0 100 389 dc.economia. against SRV
> _ldap._tcp.2dcb8925-d286-4995-8b9a-3cbc85a636b0.domains._msdcs.economia
> smb4economia.economia 389 Failed to find matching DNS entry SRV
> _ldap._tcp.2dcb8925-d286-4995-8b9a-3cbc85a636b0.domains._msdcs.economia
> smb4economia.economia 389 Looking for DNS entry SRV _gc._tcp.economia
> smb4economia.economia 3268 as _gc._tcp.economia. Checking 0 100 3268
> dc.economia. against SRV _gc._tcp.economia smb4economia.economia 3268
> Failed to find matching DNS entry SRV _gc._tcp.economia
> smb4economia.economia 3268 Looking for DNS entry SRV
> _gc._tcp.default-first-site-name._sites.economia smb4economia.economia 3268
> as _gc._tcp.default-first-site-name._sites.economia. Checking 0 100 3268
> dc.economia. against SRV _gc._tcp.default-first-site-name._sites.economia
> smb4economia.economia 3268 Failed to find matching DNS entry SRV
> _gc._tcp.default-first-site-name._sites.economia smb4economia.economia 3268
> Traceback (most recent call last):   File
"/usr/sbin/samba_dnsupdate", line
> 510, in <module>     get_credentials(lp)   File
> "/usr/sbin/samba_dnsupdate", line 123, in get_credentials    
raise e
> RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any
> KDC for requested realm) *
>
>
>
>

On 06/04/15 19:32, Dania Ramirez Moya wrote:
>
> ---------- Forwarded message ----------
> From: *Dania Ramirez Moya* <dania181087 at gmail.com 
> <mailto:dania181087 at gmail.com>>
> Date: 2015-03-30 16:45 GMT-04:00
> Subject: Re: Fwd: samba_dnsupdate failed with RuntimeError: kinit for 
> SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any KDC for requested realm)
> To: Rowland Penny <rowlandpenny at googlemail.com 
> <mailto:rowlandpenny at googlemail.com>>
> Cc: samba <samba at lists.samba.org <mailto:samba at
lists.samba.org>>
>
>
> Hello rowland
> I tested with realm economia.lcl and and the problem was solved.It 
> seems that is my single label domain.Will I have any option to migrate 
> my w2k3 to samba4 ?Is it possible to rename my single label domain to 
> later migrate ?
>
> Best regards
>
>
Honestly, I do not know, you would be changing quite a lot, it may be 
possible, but I have never tried it.

Anybody else have any experience of doing this ???

Rowland