samba - Sep 2016 - GSSAPI - Server not found errors

Thanks for the suggestion Rowland, I had already tried that though and both
secondary DC's resolve....

host -t CNAME fbce444a-8707-4c69-8066-d75aacfb07f0._msdcs.mydomain.com.
fbce444a-8707-4c69-8066-d75aacfb07f0._msdcs.mydomain.com is an alias for
dc02.mydomain.com.

host -t CNAME 04225dbe-d69c-4ea5-8930-eb8746790180._msdcs.mydomain.com.
04225dbe-d69c-4ea5-8930-eb8746790180._msdcs.mydomain.com is an alias for
dc03.mydomain.com.


On 30 September 2016 at 19:52, Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Fri, 30 Sep 2016 19:44:36 +0100
> "Maton, Brett via samba" <samba at lists.samba.org> wrote:
>
> > I think I'm missing some SRV records...
> >
> > Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._
> > sites.ForestDnsZones.mydomain.com dc03.mydomain.com 389 (add)
> > Outgoing update query:
> > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:     
0
> > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
> > ;; UPDATE SECTION:
> > _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.mydomain.com.
> > 900    IN SRV 0 100 389 dc03.mydomain.com.
> >
> > tkey query failed: GSSAPI error: Major = Unspecified GSS failure.
> > Minor code may provide more information, Minor = Server not found in
> > Kerberos database.
> >
> > I get the same errors on dc02.
> >
> > If I look at the forest in MS DNS tool I can find _gc _ldap _kerberos
> > SRV records for dc01 bot not for the others.
> >
> > Am I on the right track here, or just besting around the bushes ?
>
> Have a look here:
>
> https://wiki.samba.org/index.php/Verifying_and_Creating_a_DC_DNS_Record
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

On Fri, 30 Sep 2016 20:24:45 +0100
"Maton, Brett" <matonb at ltresources.co.uk> wrote:
> Thanks for the suggestion Rowland, I had already tried that though
> and both secondary DC's resolve....
> 
> host -t CNAME
> fbce444a-8707-4c69-8066-d75aacfb07f0._msdcs.mydomain.com.
> fbce444a-8707-4c69-8066-d75aacfb07f0._msdcs.mydomain.com is an alias
> for dc02.mydomain.com.
> 
> host -t CNAME
> 04225dbe-d69c-4ea5-8930-eb8746790180._msdcs.mydomain.com.
> 04225dbe-d69c-4ea5-8930-eb8746790180._msdcs.mydomain.com is an alias
> for dc03.mydomain.com.
> 
Try restarting samba on dc02 and dc03, if that doesn't work, reboot
dc02 and then dc03

Rowland

Ok I'll try that in the morning and will get back with the resilt.

On 30 September 2016 at 21:22, Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Fri, 30 Sep 2016 20:24:45 +0100
> "Maton, Brett" <matonb at ltresources.co.uk> wrote:
>
> > Thanks for the suggestion Rowland, I had already tried that though
> > and both secondary DC's resolve....
> >
> > host -t CNAME
> > fbce444a-8707-4c69-8066-d75aacfb07f0._msdcs.mydomain.com.
> > fbce444a-8707-4c69-8066-d75aacfb07f0._msdcs.mydomain.com is an alias
> > for dc02.mydomain.com.
> >
> > host -t CNAME
> > 04225dbe-d69c-4ea5-8930-eb8746790180._msdcs.mydomain.com.
> > 04225dbe-d69c-4ea5-8930-eb8746790180._msdcs.mydomain.com is an alias
> > for dc03.mydomain.com.
> >
>
> Try restarting samba on dc02 and dc03, if that doesn't work, reboot
> dc02 and then dc03
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>