I'm still trying to figure out of my samba DC which has received by transfer all 7 FSMO roles is actually doing DNS.? When I do this serverinfo command it fails: athena:~# samba-tool dns serverinfo athena Password for [administrator at EDM-INC.COM]: ERROR(runtime): uncaught exception - (9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE') ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 177, in _run ??? return self.run(*args, **kwargs) ? File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 564, in run ??? None, 'ServerInfo') When I do the command on the other DC (which is a server 2003 machine), it works. Any ideas on what this means? -- Bob Wooldridge EDM Incorporated
On 24/07/2019 22:21, Robert A Wooldridge via samba wrote:> I'm still trying to figure out of my samba DC which has received by > transfer all 7 FSMO roles is actually doing DNS.? When I do this > serverinfo command it fails: > > > athena:~# samba-tool dns serverinfo athenaDo you have a user called 'athena' ?> Password for [administrator at EDM-INC.COM]:If you do have a user called 'athena', why are you being asked for the 'Administrator' password ? I ask these questions because if I log into Unix domain member as a normal user, I have to use '-U Administrator' to get asked for the Administrator password. If I use a user that isn't a domain user, I just get asked for password for 'DOMAIN\username' where 'username' is the local user, so this doesn't work. If I do use '-U Administrator', I get asked for the Administrator password and the command works. If I login as a Domain user with a valid kerberos ticket and run the command, the command works and produces output like this: dwVersion?????????????????? : 0xece0205 fBootMethod???????????????? : DNS_BOOT_METHOD_DIRECTORY fAdminConfigured??????????? : FALSE fAllowUpdate??????????????? : TRUE fDsAvailable??????????????? : TRUE pszServerName?????????????? : DC4.samdom.example.com pszDsContainer????????????? : CN=MicrosoftDNS,DC=DomainDnsZones,DC=samdom,DC=example,DC=com ......................... .................. .............. ........... ?Rowland
On 07/25/2019 02:33 AM, Rowland penny via samba wrote:> On 24/07/2019 22:21, Robert A Wooldridge via samba wrote: >> I'm still trying to figure out of my samba DC which has received by >> transfer all 7 FSMO roles is actually doing DNS.? When I do this >> serverinfo command it fails: >> >> >> athena:~# samba-tool dns serverinfo athena > > Do you have a user called 'athena' ? > >> Password for [administrator at EDM-INC.COM]: > If you do have a user called 'athena', why are you being asked for the > 'Administrator' password ?No, athena is the name of the samba DC. I did this to verify that there is no user athena: wbinfo -u | grep athena Nothing returns. If I do kinit administrator the command runs without prompting for administrator password. -- Bob Wooldridge EDM Incorporated