samba - Aug 2018 - Setting up new samba-ac-dc on Ubuntu 18.04 - KDC not FOUND

OK I'm back on this after a tour through firewalld and other issues.

I see Louis has posted his  how to on git-hub. It seems very helpful

I also see his method uses the Ubuntu resolver but also uses bind9 so 
I'm not sure whether his method can be adapted to using the internal DNS 
in Samba.

In setting this up one of my main goals is to limit the amount of 
customization I do as I have found it easier to accept a little less 
performance for ease of maintenance.
-- 
Rob Steinmetz

On Sun, 5 Aug 2018 15:27:29 -0500
Robert Steinmetz AIA via samba <samba at lists.samba.org> wrote:
> OK I'm back on this after a tour through firewalld and other issues.
> 
> I see Louis has posted his  how to on git-hub. It seems very helpful
> 
> I also see his method uses the Ubuntu resolver but also uses bind9 so 
> I'm not sure whether his method can be adapted to using the internal
> DNS in Samba.
> 
> In setting this up one of my main goals is to limit the amount of 
> customization I do as I have found it easier to accept a little less 
> performance for ease of maintenance.
If you are only going to have one DC, then the internal DNS server is
okay, it just doesn't work as well as Bind9. Once you have more than
one DC (which is the recommendation), then it is better to use Bind9.

Louis went down the same path as you, least amount of changes, I, on the
other hand, do not see the point in having a program just to change
something that will only get changed once, so I reverted Ubuntu 18.04
back to the old way of doing things and removed systemd-resolved etc.
You pays your money and makes your choices ;-)

Rowland

Rowland Penny via samba wrote:
> If you are only going to have one DC, then the internal DNS server is
> okay, it just doesn't work as well as Bind9. Once you have more than
> one DC (which is the recommendation), then it is better to use Bind9.
I have two other servers. Once the ad-cd server is up the I plan to have 
the other servers moved to ad and act as alternate dcs
> Louis went down the same path as you, least amount of changes,
Louis however also used Bind9 in his recent notes. I'm somewhat 
concerned that removing systemd-resolvd will create other
issues.
> You pays your money and makes your choices ;-)
You still have to live with them later. B-)
> Rowland
One question. Can I simply re-provision the server and overwrite the 
existing configuration if I decide to go to bind9?
-- 
Rob Steinmetz

Hai again, 

Well, you can remove the systemd-resolved, but its default in the ubuntu
installs.
That is why i use it. 

You can remove it and setup the resolving as you normaly should do. 
What would be something like:

systemctl disable systemd-resolved
systemctl stop systemd-resolved
rm /etc/resolv.conf  
and create a new one.

Or apt remove --autoremove --purge systemd-resolved 
and its completely gone. 

> Can I simply re-provision the server and overwrite the 
> existing configuration if I decide to go to bind9?
Yes, if your in testing fase thats an option, if your in production.
Have a look here for that.
https://wiki.samba.org/index.php/Changing_the_DNS_Back_End_of_a_Samba_AD_DC

Greetz, 

Louis


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Robert Steinmetz AIA via samba
> Verzonden: zondag 5 augustus 2018 23:22
> Aan: Rowland Penny; samba at lists.samba.org
> Onderwerp: Re: [Samba] Setting up new samba-ac-dc on Ubuntu 
> 18.04 - KDC not FOUND
> 
> Rowland Penny via samba wrote:
> > If you are only going to have one DC, then the internal DNS 
> server is
> > okay, it just doesn't work as well as Bind9. Once you have more
than
> > one DC (which is the recommendation), then it is better to 
> use Bind9.
> I have two other servers. Once the ad-cd server is up the I 
> plan to have 
> the other servers moved to ad and act as alternate dcs
> > Louis went down the same path as you, least amount of changes,
> Louis however also used Bind9 in his recent notes. I'm somewhat 
> concerned that removing systemd-resolvd will create other issues.
> > You pays your money and makes your choices ;-)
> You still have to live with them later. B-)
> > Rowland
> One question. Can I simply re-provision the server and overwrite the 
> existing configuration if I decide to go to bind9?
> -- 
> Rob Steinmetz
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>