samba - Sep 2020 - Moving FSMO roles doesnt affect srv records in DNS ?.

-----Original message-----
> From: Rowland penny <rpenny at samba.org>
> Sent: Thursday 24th September 2020 17:02
> To: samba at lists.samba.org
> Subject: Re: [Samba] Moving FSMO roles doesnt affect srv records in DNS ?.
> 
> On 24/09/2020 15:38, Peter Boos via samba wrote:
> > Thanks Rowland,
> > I checked again the DNS service.
> > Its still not pointing towards the new DC its Thursday now.
> > While we migrated last Sunday (20-9-2020).
> > Is it a manual action we should do `samba_dnsupdate`
> > Or is it something that's triggered by a cron job ?.
> >
> > I Just want to be be sure its all correctly installed and working.
> > As i would like to migrate the old server away.
> > (As the plan was to replace the old server for 2 new servers).
> 
> Can we see the smb.conf from the DC /
> 
> Also, do you have the dnsutils package installed ? (this the debian 
> package that contains nsupdate)
> 
> Rowland
> 
> 
> 
>
The dnsutils package was missing, added it (typo in a script).
Below is smb.conf, was it perhaps also the reason reversedns didn work
I had not mentioned that earlier, it wasnt something critical we thought.
And i wasnt sure either if thats normal for Samba 


[global]

  netbios name = DC1
  realm = dom.mydomain.com
  workgroup = dom
  dns forwarder = 172.16.7.1
  server role = active directory domain controller
  idmap_ldb:use rfc2307 = yes

bind interfaces only = yes
interfaces = 172.16.7.40

  loglevel = 3

  winbind enum users = yes
  winbind enum groups = yes

  wins support = yes
  wins server = 172.16.7.40

[netlogon]
  path = /var/lib/samba/sysvol/dom.mydomain.com/scripts
  read only = No

[sysvol]
  path = /var/lib/samba/sysvol
  read only = No

On 25/09/2020 13:58, Peter Boos via samba wrote:
> The dnsutils package was missing, added it (typo in a script).
> Below is smb.conf, was it perhaps also the reason reversedns didn work
> I had not mentioned that earlier, it wasnt something critical we thought.
> And i wasnt sure either if thats normal for Samba
Yes, the reversezone is supposed to work.
> [global]
>
>    netbios name = DC1
>    realm = dom.mydomain.com
>    workgroup = dom
>    dns forwarder = 172.16.7.1
>    server role = active directory domain controller
>    idmap_ldb:use rfc2307 = yes
>
> bind interfaces only = yes
> interfaces = 172.16.7.40
>
>    loglevel = 3
>
>    winbind enum users = yes
>    winbind enum groups = yes
You don't need those, they just slow things down in a large
domain
>    wins support = yes
>    wins server = 172.16.7.40
Why do you need 'wins' in an AD domain ?

Rowland