samba - Oct 2013 - Samba4 Redundant DCs

I have semi-successfully provisioned 2 domain controllers on one domain with (I
think) working replication. I followed the Samba wiki and used the
sernet-samba-ad repos and packages on CentOS 6.4 x64. Questions:

Replication status has times for outbound neighbors as @ NTTIME(0) on both
sides. What does this mean? dc1: http://pastebin.com/atxPraCA dc2:
http://pastebin.com/V9JkwbUq
Both reports end with "Warning: No NC replicated for Connection!" What
does this mean?
How does DNS replication work here? I followed this:
https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC#Check_required_DNS_entries_of_the_new_host
and had to add A record by hand and also the CNAME record. When it comes to the
last step which I believe to be setting the name server to the newly provisioned
replicated domain's own internal DNS (I'm using internal DNS), I set
/etc/resolv.conf to point at <IP address> at which point DNS won't
resolve anything. Is there something I can check here to ensure this is working
or do I have the wrong idea altogether here?
kinit and klist return as expected on the first domain controller (auth1) but
not so on the new replicated domain controller. dc1:
http://pastebin.com/21SdGMEN dc2: NEVERMIND THAT PART JUST STARTED WORKING :)

I'm very excited to be approved to put this new infrastructure into
production eventually, and I appreciate the group's help to get the platform
solid and reliable so I can thoroughly test it before deployment!

Thomas Maerz
Network/Systems Administrator
Brewer Science, Inc.
A+ NET+ CCENT MCDST
tmaerz at brewerscience.com
work: 	573-364-0444 x1402
cell:		573-612-1349

CONFIDENTIALITY NOTICE 
This message (and any of its attachments) is intended for the addressee and may
contain confidential information, may be attorney-client privileged, and may
constitute inside or non-public information under federal or state laws.
Unauthorized use of this information is strictly prohibited and may be unlawful.
If you have received this email transmission in error, please immediately notify
the sender by return email, delete the email and any attachments, and empty any
folders containing the discarded information.

Hi

On 15 October 2013 23:39, Thomas Maerz <tmaerz at brewerscience.com>
wrote:
> I have semi-successfully provisioned 2 domain controllers on one domain
with (I think) working replication. I followed the Samba wiki and used the
sernet-samba-ad repos and packages on CentOS 6.4 x64. Questions:
>
> Replication status has times for outbound neighbors as @ NTTIME(0) on both
sides. What does this mean? dc1: http://pastebin.com/atxPraCA dc2:
http://pastebin.com/V9JkwbUq
I believe that means it has never replicated to AUTH1.
> Both reports end with "Warning: No NC replicated for Connection!"
What does this mean?
I am not sure.  Maybe this is relevant, although it's quite old:

https://lists.samba.org/archive/samba-technical/2011-November/080377.html
> How does DNS replication work here? I followed this:
https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC#Check_required_DNS_entries_of_the_new_host
and had to add A record by hand and also the CNAME record. When it comes to the
last step which I believe to be setting the name server to the newly provisioned
replicated domain's own internal DNS (I'm using internal DNS), I set
/etc/resolv.conf to point at <IP address> at which point DNS won't
resolve anything. Is there something I can check here to ensure this is working
or do I have the wrong idea altogether here?
I've not tried this, but I think that should work.  If you try
querying the second DC with samba-tool do you see the DNS records?
> kinit and klist return as expected on the first domain controller (auth1)
but not so on the new replicated domain controller. dc1:
http://pastebin.com/21SdGMEN dc2: NEVERMIND THAT PART JUST STARTED WORKING :)
>
> I'm very excited to be approved to put this new infrastructure into
production eventually, and I appreciate the group's help to get the platform
solid and reliable so I can thoroughly test it before deployment!
>
> Thomas Maerz
> Network/Systems Administrator
> Brewer Science, Inc.
> A+ NET+ CCENT MCDST
> tmaerz at brewerscience.com
> work:   573-364-0444 x1402
> cell:           573-612-1349
-- 
Michael Wood <esiotrot at gmail.com>