Hi everyone,
It looks like when I do 'net ads join' the PTR records for the host are
not created, whereas when I do domain join on a Windows machine the PTR records
do get created. Thus the question I have: does Winbind have the ability to
create PTR records but simply doesn't create them by default or unless
certain conditions are met? If it does, how do I make sure Winbind creates them?
We use Samba 4.8.3 on Amazon Linux 2. Installed Samba packages:
samba-client-libs.x86_64 4.8.3-4.amzn2.0.1 @amzn2-core
samba-common.noarch 4.8.3-4.amzn2.0.1 @amzn2-core
samba-common-libs.x86_64 4.8.3-4.amzn2.0.1 @amzn2-core
samba-common-tools.x86_64 4.8.3-4.amzn2.0.1 @amzn2-core
samba-libs.x86_64 4.8.3-4.amzn2.0.1 @amzn2-core
samba-winbind.x86_64 4.8.3-4.amzn2.0.1 @amzn2-core
samba-winbind-clients.x86_64 4.8.3-4.amzn2.0.1 @amzn2-core
samba-winbind-krb5-locator.x86_64 4.8.3-4.amzn2.0.1 @amzn2-core
samba-winbind-modules.x86_64 4.8.3-4.amzn2.0.1 @amzn2-core
Content of /etc/samba/smb.conf:
[global]
idmap config * : backend = autorid
idmap config * : range = 100000000-2100000000
idmap config * : rangesize = 100000000
idmap config NIKITIN : backend = rid
idmap config NIKITIN : range = 65536 - 99999999
winbind refresh tickets = yes
winbind enum groups = no
winbind enum users = no
#--authconfig--start-line--
# Generated by authconfig on 2019/01/19 00:31:30
# DO NOT EDIT THIS SECTION (delimited by --start-line--/--end-line--)
# Any modification may be deleted or altered by authconfig in future
workgroup = EXAMPLE
realm = EXAMPLE.COM
security = ads
template homedir = /home/%U
template shell = /bin/bash
kerberos method = secrets and keytab
winbind use default domain = false
winbind offline logon = true
#--authconfig--end-line--
log level = 3
interfaces = eth1 lo
; workgroup = SAMBA
; security = user
passdb backend = tdbsam
printing = cups
printcap name = cups
load printers = yes
cups options = raw
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: This is a digitally signed message part.
URL:
<http://lists.samba.org/pipermail/samba/attachments/20190607/21a54972/signature.sig>
