samba - Jan 2017 - error connecting to Samba4 AD from the Windows DNS client

I provisioned a server with Samba4.3 from repo ubuntu16.04. 
I tested some things, but I can NOT connect to my Samba DC from the Windows DNS
client.
ADUC, AD Sites and services, and AD Domain & Trusts, connects Ok. 
But DNS [" Acces is Denied "] does not connect to the Samba4 DC. 

Any idea? What happens? 

_________________________________________ 
Ing. Felipe_ González_Santiago 

La @universidad_uci es Fidel. Los jóvenes no fallaremos.
#HastaSiempreComandante
#HastalaVictoriaSiempre

Hi Felipe,

Am 25.01.2017 um 14:16 schrieb Felipe_G0NZÁLEZ_SANTIAG0 via
samba:
> I provisioned a server with Samba4.3 from repo ubuntu16.04. 
> I tested some things, but I can NOT connect to my Samba DC from the Windows
DNS client.
> ADUC, AD Sites and services, and AD Domain & Trusts, connects Ok. 
> But DNS [" Acces is Denied "] does not connect to the Samba4 DC. 
* Which account do you use? The domain administrator?
* Anything appears in the logs when it fails? Increase log level, if
necessary.
* What is your DNS back end?


Regards,
Marc

----- Original Message -----

| Hi Felipe,

| Am 25.01.2017 um 14:16 schrieb Felipe_G0NZÁLEZ_SANTIAG0 via samba:
| > I provisioned a server with Samba4.3 from repo ubuntu16.04.
| > I tested some things, but I can NOT connect to my Samba DC from the
Windows
| > DNS client.
| > ADUC, AD Sites and services, and AD Domain & Trusts, connects Ok.
| > But DNS [" Acces is Denied "] does not connect to the Samba4
DC.

| * Which account do you use? The domain administrator?
yes, I use the user 'Administrator'. But also I tried with other user I
created.

| * Anything appears in the logs when it fails? Increase log level, if
| necessary.
Well, I don't know if this is useful, but only I see is this in the
/var/log/syslog file:
Jan 25 01:15:08 ubuntus samba[27351]: [2017/01/25 01:15:08.780106, 0]
../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done)
Jan 25 01:15:08 ubuntus samba[27351]: ../source4/dsdb/dns/dns_update.c:294:
Failed DNS update - NT_STATUS_IO_TIMEOUT

| * What is your DNS back end?
I am using Bind9_DLZ. 

OTHER problem I'm having is that I can't authenticate proftpd service
against my Samba4 AD, however I installed a Windows Server AD and then this
works perfectly. So I authenticated Okay against Windows AD.

In my Samba4.3 AD everythings work fine 'apparently', in fact I joined a
Windows client to my domain.
#samba-tool processes returns this: 
root at ubuntus:~# samba-tool processes 
Service: PID 
----------------------------- 
dnsupdate 1572 
cldap_server 1565 
rpc_server 1560 
nbt_server 1561 
winbind_server 1570 
kdc_server 1566 
notify-daemon 1609 
ldap_server 1563 
ldap_server 1563 
kccsrv 1571 
samba 0 

Any idea? 

| Regards,
| Marc

La @universidad_uci es Fidel. Los jóvenes no fallaremos.
#HastaSiempreComandante
#HastalaVictoriaSiempre