Attaching logs during an attempt of browsing \\server from CM-WM-W7$
thanks
----- Original Message ----- > From: "samba" <samba at lists.samba.org>
> To: "Alex MacCuish" <alex at maccuish.org.uk>,
"samba" <samba at lists.samba.org>
> Sent: Saturday, May 9, 2020 12:03:58 AM
> Subject: Re: [Samba] Unable to access shares by server alias
> By default, we should just be doing 'match by key' based on our
secret
> (machine account password), so I hope that isn't it.
>
> The server logs may be enlightening.
>
> Andrew Bartlett
>
> On Fri, 2020-05-08 at 22:42 +0100, Alex MacCuish via samba wrote:
>> Did you update the keytab on the fileserver after changing the SPNs
>> on
>> the computer object? If not, the fileserver won't have the correct
>> SPNs
>> in its keytab file so will fail at negotiating kerberos. NTLM should
>> have still saved you however...
>>
>> On 08/05/2020 22:27, Lorenzo Milesi via samba wrote:
>> > Hi.
>> > We migrated a S4 workgroup to S4 AD DC, I'm trying to allow
users
>> > to access the new \\fileserver with the old host name \\server. I
>> > added a CNAME record to the AD DNS zone, created alias for
>> > fileserver with
>> > samba-tool spn add ldap/SERVER fileserver$
>> > samba-tool spn add HOST/SERVER fileserver$
>> >
>> > I also added
>> > netbios aliases = server
>> > to smb.conf but this should be useless, as they're now all
using
>> > Windows10 and 7. But I'm still unable to browse the server as
>> > \\server.
>> >
>> > Am I missing something?
>> > thanks
>>
>>
> --
> Andrew Bartlett https://samba.org/~abartlet/
> Authentication Developer, Samba Team https://samba.org
> Samba Developer, Catalyst IT
> https://catalyst.net.nz/services/samba
>
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions: https://lists.samba.org/mailman/options/samba
--
Lorenzo Milesi - lorenzo.milesi at yetopen.it
GPG/PGP Key-Id: 0xE704E230
YetOpen S.r.l. - https://www.yetopen.it/
Via Salerno 18 - 23900 Lecco - ITALY -
Tel +39 0341 220 205 - Fax +39 178 6070 222
Think green - Non stampare questa e-mail se non necessario / Don't print
this email unless necessary
-------- D.Lgs. 196/2003 e GDPR 679/2016 --------
Tutte le informazioni contenute in questo messaggio sono riservate ed a uso
esclusivo del destinatario.
Tutte le informazioni ivi contenute, compresi eventuali allegati, sono da
ritenere confidenziali e riservate secondo i termini
del vigente D.Lgs. 196/2003 in materia di privacy e del Regolamento europeo
679/2016 - GDPR - e quindi ne e' proibita l'utilizzazione ulteriore non
autorizzata.
Nel caso in cui questo messaggio Le fosse pervenuto per errore, La invitiamo ad
eliminarlo senza copiarlo, stamparlo, a non inoltrarlo a terzi e ad avvertirci
non appena possibile.
Grazie.
Confidentiality notice: this email message including any attachment is for the
sole use of the intended recipient and may contain confidential and privileged
information;
pursuant to Legislative Decree 196/2003 and the European General Data Protection
Regulation 679/2016 - GDPR - any unauthorized review, use, disclosure or
distribution
is prohibited. If you are not the intended recepient please delete this message
without copying, printing or forwarding it to others, and alert us as soon as
possible.
Thank you.
