samba - Sep 2017 - Server GC/name.dom/dom is not registered with our KDC: Miscellaneous failure (see text): Server (GC/name/dom@DOM) unknown

Thanks Rowland, 

Very appriciated. 
The dnsmasq servers are explained, these are no problem in his setup sofar i
could tell/see.


Greetz, 

Louis
 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland Penny via samba
> Verzonden: vrijdag 8 september 2017 10:50
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] Server GC/name.dom/dom is not 
> registered with our KDC: Miscellaneous failure (see text): 
> Server (GC/name/dom at DOM) unknown
> 
> On Fri, 8 Sep 2017 10:37:56 +0200
> "L.P.H. van Belle via samba" <samba at lists.samba.org>
wrote:
> 
> 
> > > Neither of the two return any results on any DC (or on 
> the dnsmasq 
> > > servers), but the GUIDs for the 4 currently existing DCs 
> work fine. 
> > > This matches the data from the RSAT tools.
> > 
> > 
> > Now, last, which is an option. 
> > If one server hold a good and correct database, you can 
> sync that one 
> > to the other servers. But the database must be correct. ( 
> and backuped 
> > 2 x )
> > 
> > samba-tool dbcheck --help gives also few extra options but i never 
> > used them so i cant tell much of these are usefull.
> > --reindex             force database re-index 
> --reset-well-known-acls
> >   --cross-ncs
> > 
> > Rowland, can you give a educated answer on these also. 
> > 
> 
> You seem to have covered everything Louis, except I noticed 
> the mention of 'dnsmasq servers', I think the OP needs to 
> expand on where these are being used.
> 
> Rowland
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On Fri, 8 Sep 2017 12:03:53 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> Thanks Rowland, 
> 
> Very appriciated. 
> The dnsmasq servers are explained, these are no problem in his setup
> sofar i could tell/see.
> 
> 
Yes, but do the dnsmasq servers hold all the AD records ?

Rowland

On 2017-09-08 12:26, Rowland Penny via samba wrote:
> On Fri, 8 Sep 2017 12:03:53 +0200
> "L.P.H. van Belle via samba" <samba at lists.samba.org>
wrote:
> 
>> Thanks Rowland, 
>>
>> Very appriciated. 
>> The dnsmasq servers are explained, these are no problem in his setup
>> sofar i could tell/see.
>>
> Yes, but do the dnsmasq servers hold all the AD records ?
Define "hold"; they're used as caching servers, but all queries
for
ad.tao.at and subdomains are forwarded to the DCs:
> server=/ad.tao.at/192.168.x #repeated for all DCs
> server=/x.168.192.in-addr.arpa/x # repeated for all DCs
filterwin2k etc. is **not** enabled in dnsmasq, so no queries are
blocked, everything is forwarded.

-- 
Mit freundlichen Grüßen, / Best Regards,
Sven Schwedas, Systemadministrator
Mail/XMPP sven.schwedas at tao.at | Skype sven.schwedas
TAO Digital | Lendplatz 45 | A8020 Graz
https://www.tao-digital.at | Tel +43 680 301 7167