samba - Sep 2022 - DNS Help Request

DC02 is not a DC.  Initially I was going to make it a DC but I changed my
mind.

cat /etc/samba/smb.conf
cat /etc/samba/smb.conf
[global]
security = ADS
workgroup = HOME
realm = HOME.ROB-CAMPBELL.LAN

log file = /var/log/samba/%m.log
log level = 1
idmap config * : backend = autorid
idmap config * : range = 10000-9999999
idmap config * : rangesize = 200000

username map = /etc/samba/user.map

template shell = /bin/bash
template homedir = /home/%U

There is a log being created /var/log/samba/%m.log:

[2022/09/09 15:14:39.261894,  0]
../../source4/smbd/server.c:644(binary_smbd_main)
  samba version 4.13.13-Debian started.
  Copyright Andrew Tridgell and the Samba Team 1992-2020
[2022/09/09 15:14:39.306210,  0]
../../source4/smbd/server.c:874(binary_smbd_main)
  At this time the 'samba' binary should only be used for either:
  'server role = active directory domain controller' or to access the
ntvfs
file server with 'server services = +smb' or the rpc proxy with
'dcerpc
endpoint servers = remote'
  You should start smbd/nmbd/winbindd instead for domain member and
standalone file server tasks
[2022/09/09 15:14:39.306319,  0]
../../lib/util/become_daemon.c:121(exit_daemon)
  exit_daemon: daemon failed to start: Samba detected misconfigured 'server
role' and exited. Check logs for details, error code 22

I haven't tried to join because DNS doesn't seem to be working and
verifying dns is towards the beginning of the wiki.

nslookup DC01.home.server-name.lan
;; connection timed out; no servers could be reached

nslookup 10.0.0.10
;; connection timed out; no servers could be reached




~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.


On Fri, Sep 9, 2022 at 1:34 PM Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Fri, 2022-09-09 at 13:28 -0400, Rob Campbell wrote:
> > I set up DC01 as the AD DC.  I set up DC02 as a member (or I was
> > trying to
> > set it up as a member).  I did try to start the winbind service but
> > it
> > didn't start.  If I don't need to start it, I won't.  I
was trying
> > anything
> > to get DC02 to register in DNS.
>
> OK, I follow that DC01 is a DC, but is DC02 also a DC ? If not, why
> call it 'DC02'?
>
> What command did you use to join 'DC02' as a member ?
>
> Have you created a smb.conf on 'DC02' and if so, what does it
contain ?
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Fri, 2022-09-09 at 15:16 -0400, Rob Campbell wrote:
> DC02 is not a DC.  Initially I was going to make it a DC but I
> changed my
> mind.
> 
> cat /etc/samba/smb.conf
> cat /etc/samba/smb.conf
> [global]
> security = ADS
> workgroup = HOME
> realm = HOME.ROB-CAMPBELL.LAN
> 
> log file = /var/log/samba/%m.log
> log level = 1
> idmap config * : backend = autorid
> idmap config * : range = 10000-9999999
> idmap config * : rangesize = 200000
> 
> username map = /etc/samba/user.map
> 
> template shell = /bin/bash
> template homedir = /home/%U
> 
> There is a log being created /var/log/samba/%m.log:
> 
> [2022/09/09 15:14:39.261894,  0]
> ../../source4/smbd/server.c:644(binary_smbd_main)
>   samba version 4.13.13-Debian started.
>   Copyright Andrew Tridgell and the Samba Team 1992-2020
> [2022/09/09 15:14:39.306210,  0]
> ../../source4/smbd/server.c:874(binary_smbd_main)
>   At this time the 'samba' binary should only be used for either:
>   'server role = active directory domain controller' or to access
the
> ntvfs
> file server with 'server services = +smb' or the rpc proxy with
> 'dcerpc
> endpoint servers = remote'
You appear to be trying to start the 'samba' binary. you should join
the domain with 'net ads join -Uadministrator' or 'samba-tool domain
join <your_dnsdomain> MEMBER -Uadministrator', then once joined, start
smbd and winbind, you can aso optional start nmbd.
>   You should start smbd/nmbd/winbindd instead for domain member and
> standalone file server tasks
> [2022/09/09 15:14:39.306319,  0]
> ../../lib/util/become_daemon.c:121(exit_daemon)
>   exit_daemon: daemon failed to start: Samba detected misconfigured
> 'server
> role' and exited. Check logs for details, error code 22
> 
> I haven't tried to join because DNS doesn't seem to be working and
> verifying dns is towards the beginning of the wiki.
> 
> nslookup DC01.home.server-name.lan
> ;; connection timed out; no servers could be reached
Well it wouldn't, you should be using 'nslookup dc01.home.rob-
campbell.lan' provided your dns domain is 'home.rob-campbell.lan',
which it should be because your realm is
'HOME.ROB-CAMPBELL.LAN'.
> 
> nslookup 10.0.0.10
> ;; connection timed out; no servers could be reached
Have you set up a reverse zone in AD ?

Rowland