On Tue, 2019-05-21 at 20:30 +0100, Sérgio Basto via samba wrote:> On Tue, 2019-05-21 at 20:53 +0200, Maurizio Caloro via samba wrote: > > Hello Dear Members > > > > Please i have here the following error if i do the samba_dnsupdate > > --verbose > > > > the problem are that i can't join any new machine to me Samba AD > > machine. > > > > PLEASE ..... Thanks for any possible Help > > Are you using MIT kerberos ? if yes try compile samba with the old > kerberos > > -- > Sérgio M. B.Also, can you please detail OS, version and smb.conf. Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Catalyst IT http://catalyst.net.nz/services/samba
Hello
# uname -rsa
Linux srvcar018 4.4.0-148-generic #174~14.04.1-Ubuntu SMP Thu May 9
08:17:37 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux
# /usr/sbin/smbd -V
Version 4.2.4-SerNet-Ubuntu-7.trusty
smb.conf
# Global parameters
[global]
netbios aliases = SRVCAR018
security = ADS
server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
winbindd, ntp_signd, kcc, dnsupdate
winbind trusted domains only = yes
write raw = no
encrypt passwords = true
dns forwarder = 192.168.201.92
workgroup = CARAG
load printers = yes
winbind use default domain = yes
read raw = no
kerberos method = system keytab
realm = CARAG.LOCAL
netbios name = SRVCAR018
log file = /var/log/samba/loglog.smbdmon
os level = 20
[netlogon]
path = /var/lib/samba/sysvol/carag.local/scripts
read only = No
[sysvol]
path = /var/lib/samba/sysvol
read only = No
>
>Also, can you please detail OS, version and smb.conf.
>
>Thanks,
>
>Andrew Bartlett
>
>--
>Andrew Bartlett http://samba.org/~abartlet/
>Authentication Developer, Samba Team http://samba.org
>Samba Developer, Catalyst IT
http://catalyst.net.nz/services/samba>
On 21/05/2019 21:19, Maurizio Caloro via samba wrote:> Hello > > # uname -rsa > Linux srvcar018 4.4.0-148-generic #174~14.04.1-Ubuntu SMP Thu May 9 > 08:17:37 UTC 2019 x86_64 x86_64 x86_64 GNU/Linux > > # /usr/sbin/smbd -V > Version 4.2.4-SerNet-Ubuntu-7.trustyOuch, that is old ;-)> > smb.conf > # Global parameters > [global] > netbios aliases = SRVCAR018 > security = ADS > server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, > winbindd, ntp_signd, kcc, dnsupdate > winbind trusted domains only = yes > write raw = no > encrypt passwords = true > dns forwarder = 192.168.201.92 > workgroup = CARAG > load printers = yes > winbind use default domain = yes > read raw = no > kerberos method = system keytab > realm = CARAG.LOCAL > netbios name = SRVCAR018 > log file = /var/log/samba/loglog.smbdmon > os level = 20 > > [netlogon] > path = /var/lib/samba/sysvol/carag.local/scripts > read only = No > > [sysvol] > path = /var/lib/samba/sysvol > read only = NoTry resetting your smb.conf, there are various problems with it, try this: [global] netbios name = SRVCAR018 realm = CARAG.LOCAL server role = active directory domain controller server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbindd, ntp_signd, kcc, dnsupdate workgroup = CARAG idmap_ldb:use rfc2307 = yes log file = /var/log/samba/loglog.smbdmon dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool [netlogon] path = /var/lib/samba/sysvol/carag.local/scripts read only = No [sysvol] path = /var/lib/samba/sysvol read only = No Ubuntu Trusty (12.04) is now EOL, Samba 4.2.x is EOL, so I would suggest that when you get things working again, you start to upgrade. Rowland