Mandi! Rowland Penny via samba In chel di` si favelave...> It isn't a dns problem as such, it is a kerberos one, the program > tries to use the wrong ticket.Ok. Good. But it try to use the ''wrong ticket'' because i've (mis|un)configured something, or it is normal?! Still i don't understand why in the first DC is not needed, and in the second yes... Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797 Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA! http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000 (cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
On Thu, 26 Oct 2017 15:31:13 +0200 Marco Gaiarin via samba <samba at lists.samba.org> wrote:> Mandi! Rowland Penny via samba > In chel di` si favelave... > > > It isn't a dns problem as such, it is a kerberos one, the program > > tries to use the wrong ticket. > > Ok. Good. > > But it try to use the ''wrong ticket'' because i've (mis|un)configured > something, or it is normal?!It isn't a misconfiguration as such, it just (mostly) tries to use the ticket for another DC to update the dns of the DC it is running on.> > Still i don't understand why in the first DC is not needed, and in the > second yes...When you only have one DC, you cannot get the wrong ticket, there is only one. Rowland
On Thu, 2017-10-26 at 15:29 +0100, Rowland Penny via samba wrote:> On Thu, 26 Oct 2017 15:31:13 +0200 > Marco Gaiarin via samba <samba at lists.samba.org> wrote: > > > Mandi! Rowland Penny via samba > > In chel di` si favelave... > > > > > It isn't a dns problem as such, it is a kerberos one, the program > > > tries to use the wrong ticket. > > > > Ok. Good. > > > > But it try to use the ''wrong ticket'' because i've > > (mis|un)configured > > something, or it is normal?! > > It isn't a misconfiguration as such, it just (mostly) tries to use > the > ticket for another DC to update the dns of the DC it is running on. > > > > > Still i don't understand why in the first DC is not needed, and in > > the > > second yes... > > When you only have one DC, you cannot get the wrong ticket, there is > only one.This should be fixed in Samba 4.7 finally. Andrew Bartlett -- Andrew Bartlett https://samba.org/~abartlet/ Authentication Developer, Samba Team https://samba.org Samba Development and Support, Catalyst IT https://catalyst.net.nz/services/samba