samba - Jan 2017 - error connecting to Samba4 AD from the Windows DNS client

----- Original Message -----

| Hi Felipe,

| Am 25.01.2017 um 14:16 schrieb Felipe_G0NZÁLEZ_SANTIAG0 via samba:
| > I provisioned a server with Samba4.3 from repo ubuntu16.04.
| > I tested some things, but I can NOT connect to my Samba DC from the
Windows
| > DNS client.
| > ADUC, AD Sites and services, and AD Domain & Trusts, connects Ok.
| > But DNS [" Acces is Denied "] does not connect to the Samba4
DC.

| * Which account do you use? The domain administrator?
yes, I use the user 'Administrator'. But also I tried with other user I
created.

| * Anything appears in the logs when it fails? Increase log level, if
| necessary.
Well, I don't know if this is useful, but only I see is this in the
/var/log/syslog file:
Jan 25 01:15:08 ubuntus samba[27351]: [2017/01/25 01:15:08.780106, 0]
../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done)
Jan 25 01:15:08 ubuntus samba[27351]: ../source4/dsdb/dns/dns_update.c:294:
Failed DNS update - NT_STATUS_IO_TIMEOUT

| * What is your DNS back end?
I am using Bind9_DLZ. 

OTHER problem I'm having is that I can't authenticate proftpd service
against my Samba4 AD, however I installed a Windows Server AD and then this
works perfectly. So I authenticated Okay against Windows AD.

In my Samba4.3 AD everythings work fine 'apparently', in fact I joined a
Windows client to my domain.
#samba-tool processes returns this: 
root at ubuntus:~# samba-tool processes 
Service: PID 
----------------------------- 
dnsupdate 1572 
cldap_server 1565 
rpc_server 1560 
nbt_server 1561 
winbind_server 1570 
kdc_server 1566 
notify-daemon 1609 
ldap_server 1563 
ldap_server 1563 
kccsrv 1571 
samba 0 

Any idea? 

| Regards,
| Marc

La @universidad_uci es Fidel. Los jóvenes no fallaremos.
#HastaSiempreComandante
#HastalaVictoriaSiempre

Hi,

Am 25.01.2017 um 16:37 schrieb Felipe_G0NZÁLEZ_SANTIAG0 via
samba:
> | * Anything appears in the logs when it fails? Increase log level, if
> | necessary.
> Well, I don't know if this is useful, but only I see is this in the
/var/log/syslog file:
> Jan 25 01:15:08 ubuntus samba[27351]: [2017/01/25 01:15:08.780106, 0]
../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done)
> Jan 25 01:15:08 ubuntus samba[27351]: ../source4/dsdb/dns/dns_update.c:294:
Failed DNS update - NT_STATUS_IO_TIMEOUT
> 
> | * What is your DNS back end?
> I am using Bind9_DLZ. 
Can you try:
https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End#Reconfiguring_the_BIND9_DLZ_Back_End



> OTHER problem I'm having is that I can't authenticate proftpd
service against my Samba4 AD, however I installed a Windows Server AD and then
this works perfectly. So I authenticated Okay against Windows AD.
What Windows version is it?
What appears in the logs when you try to authenticate using LDAP?


Regards,
Marc

----- Original Message -----

| Hi,
| Am 25.01.2017 um 16:37 schrieb Felipe_G0NZÁLEZ_SANTIAG0 via samba:
| > | * Anything appears in the logs when it fails? Increase log level, if
| > | necessary.
| > Well, I don't know if this is useful, but only I see is this in the
| > /var/log/syslog file:
| > Jan 25 01:15:08 ubuntus samba[27351]: [2017/01/25 01:15:08.780106, 0]
| > ../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done)
| > Jan 25 01:15:08 ubuntus samba[27351]:
../source4/dsdb/dns/dns_update.c:294:
| > Failed DNS update - NT_STATUS_IO_TIMEOUT
| >
| > | * What is your DNS back end?
| > I am using Bind9_DLZ.

| Can you try:
|
https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End#Reconfiguring_the_BIND9_DLZ_Back_End

Yes, this command runs perfectly. 

| > OTHER problem I'm having is that I can't authenticate proftpd
service
| > against my Samba4 AD, however I installed a Windows Server AD and then
| > this works perfectly. So I authenticated Okay against Windows AD.

| What Windows version is it?
I've tried this with W2K3 and W2k8. 

| What appears in the logs when you try to authenticate using LDAP?
I guess I'm not so good looking into the logs. 
First, do you ask me about the logs in W2k, right? Could you guide me? 
Well, I take a look into Control Panel > Administrative Tools > Events
Viewer. but I don't see any error here.

As I said before, everythings work 'apparently' fine. But, no other
services (proftpd, owncloud) can authenticate against my Samba4 AD.

| Regards,
| Marc

Thanks a lot for helping, 
Felipe. 

La @universidad_uci es Fidel. Los jóvenes no fallaremos.
#HastaSiempreComandante
#HastalaVictoriaSiempre