L.P.H. van Belle
2019-Jul-31 12:48 UTC
[Samba] GPO issues - getting SYSVOL cleaned up again
?? And we did compair this months ago.. You did say, everything is in sync now. Ahhh... ;-) If you really want to know if you DC's are setup the same. Tip.. Copy /etc of both server into a new folder. And runn diff -r /etc-dc1/ /etc-dc2/ > check-me.txt And check-me.txt I just did that on my brand new Buster proxy servers, 2 with keepalived. I'm almost done with this, you should only see hostname IP's as differences... Virtual ips, firewalling, added winbind, nfs, strongswan, kerberos SSO auths. Squid with 4 setups.. Pfew.. But guys, when done im posting this howto also. With squid 4.8 on buster, ( hint : repo buster-squid48 ssl enabled ) What a dragon this was, strongswan is last what im on now. If someone has a strongswan setup with user/ldap auth, pm me your config ;-) Ok, what you posted below. pre01svdeb03 : apt-get remove --purge --auroremove resolvconf Old dc: pre01svdeb02 : apt-get remove --purge --auroremove resolvconf Make these changes/verify them after the remove of resolvconf pre01svdeb03 /etc/resolv.conf search pilsbacher.at nameserver 192.168.16.206 nameserver 192.168.16.205 pre01svdeb02 /etc/resolv.conf search pilsbacher.at nameserver 192.168.16.206 nameserver 192.168.16.205 ^^ yes note that "NOT switching" the DC's. If want here the other DC first untill its all ok local on this server. Reboot pre01svdeb02 Backup your logs on this server and clear them. Yes, reboot! That clear cachings also, just to be sure. After boot, login, wait ... Wait ... klist -ke /var/lib/samba/private/secrets.keytab Verify the hostname Verify /var/lib/samba/private/dns_update_cache Does it show the correct hostname. Is it correct now ? Yes => run samba-tool dbcheck --cross-nc No errors? ( ignore tombstone objects ) samba_dnsupdate --verbose And if ok, now switch's DC's again in /etc/resolv.conf search pilsbacher.at nameserver 192.168.16.205 nameserver 192.168.16.206 And reboot once more, check logs again. Greetz, Louis> -----Oorspronkelijk bericht----- > Van: Stefan G. Weichinger [mailto:lists at xunil.at] > Verzonden: woensdag 31 juli 2019 14:24 > Aan: L.P.H. van Belle > Onderwerp: Re: [Samba] GPO issues - getting SYSVOL cleaned up again > > Am 31.07.19 um 14:17 schrieb L.P.H. van Belle: > > Can you post me the output also on of DC2 of that > samba_dnsupdate --verbose > > observation: > > resolv.conf differs: > > > > root at pre01svdeb03:~# cat /etc/resolv.conf > # Dynamic resolv.conf(5) file for glibc resolver(3) generated by > resolvconf(8) > # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE > OVERWRITTEN > nameserver 192.168.16.206 > nameserver 192.168.16.205 > search pilsbacher.at > > root at pre01svdeb02:~# cat /etc/resolv.conf > # Dynamic resolv.conf(5) file for glibc resolver(3) generated by > resolvconf(8) > # DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE > OVERWRITTEN > nameserver 192.168.16.205 > search pilsbacher.at > > so DC2=deb03 asks both DNS > > DC1=deb02 only itself > >
Stefan G. Weichinger
2019-Jul-31 13:40 UTC
[Samba] GPO issues - getting SYSVOL cleaned up again
Am 31.07.19 um 14:48 schrieb L.P.H. van Belle via samba:> ?? And we did compair this months ago.. > You did say, everything is in sync now. > Ahhh... ;-)I agree! ;-)> If you really want to know if you DC's are setup the same. > Tip.. Copy /etc of both server into a new folder. > And runn diff -r /etc-dc1/ /etc-dc2/ > check-me.txt > And check-me.txtyeah ...> I just did that on my brand new Buster proxy servers, 2 with keepalived. > I'm almost done with this, you should only see hostname IP's as differences... > Virtual ips, firewalling, added winbind, nfs, strongswan, kerberos SSO auths. > Squid with 4 setups.. Pfew.. But guys, when done im posting this howto also. > With squid 4.8 on buster, ( hint : repo buster-squid48 ssl enabled ) > What a dragon this was, strongswan is last what im on now. > If someone has a strongswan setup with user/ldap auth, pm me your config ;-) > > > Ok, what you posted below. > > pre01svdeb03 : apt-get remove --purge --auroremove resolvconf > Old dc: pre01svdeb02 : apt-get remove --purge --auroremove resolvconf > > Make these changes/verify them after the remove of resolvconf > > pre01svdeb03 > /etc/resolv.conf > search pilsbacher.at > nameserver 192.168.16.206 > nameserver 192.168.16.205 > > pre01svdeb02 > /etc/resolv.conf > search pilsbacher.at > nameserver 192.168.16.206 > nameserver 192.168.16.205 > > ^^ yes note that "NOT switching" the DC's. > If want here the other DC first untill its all ok local on this server. > > Reboot pre01svdeb02 > Backup your logs on this server and clear them. > > Yes, reboot! That clear cachings also, just to be sure. > > After boot, login, wait ... Wait ... > > klist -ke /var/lib/samba/private/secrets.keytab > Verify the hostnameI waited a little bit ... That file is OLD root at pre01svdeb02:~# ls -l /var/lib/samba/private/secrets.keytab -rw------- 1 root root 1067 Mai 24 2017 /var/lib/samba/private/secrets.keytab and WRONG: root at pre01svdeb02:~# klist -ke /var/lib/samba/private/secrets.keytab Keytab name: FILE:/var/lib/samba/private/secrets.keytab KVNO Principal ---- -------------------------------------------------------------------------- 1 HOST/dc at PILSBACHER.AT (des-cbc-crc) 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (des-cbc-crc) 1 DC$@PILSBACHER.AT (des-cbc-crc) 1 HOST/dc at PILSBACHER.AT (des-cbc-md5) 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (des-cbc-md5) 1 DC$@PILSBACHER.AT (des-cbc-md5) 1 HOST/dc at PILSBACHER.AT (arcfour-hmac) 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (arcfour-hmac) 1 DC$@PILSBACHER.AT (arcfour-hmac) 1 HOST/dc at PILSBACHER.AT (aes128-cts-hmac-sha1-96) 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (aes128-cts-hmac-sha1-96) 1 DC$@PILSBACHER.AT (aes128-cts-hmac-sha1-96) 1 HOST/dc at PILSBACHER.AT (aes256-cts-hmac-sha1-96) 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (aes256-cts-hmac-sha1-96) 1 DC$@PILSBACHER.AT (aes256-cts-hmac-sha1-96) I wait some more and get myself a coffee ...> > Verify /var/lib/samba/private/dns_update_cache > Does it show the correct hostname. > > Is it correct now ? > Yes => run samba-tool dbcheck --cross-nc > > No errors? ( ignore tombstone objects ) > samba_dnsupdate --verbose > > And if ok, now switch's DC's again in /etc/resolv.conf > > search pilsbacher.at > nameserver 192.168.16.205 > nameserver 192.168.16.206 > > And reboot once more, check logs again.
L.P.H. van Belle
2019-Jul-31 13:59 UTC
[Samba] GPO issues - getting SYSVOL cleaned up again
Ok, after that reboot ! Note, atm dont care about secrets.keytab (yet) .. I was a bit ahead with things... One thing at a time, for the keytab to be corrected, you need a perfect correct working A PTR CNAME GUIDs for the DC(3) first then we start thinking in kerberos corrections. Run samba_dnsupdate --verbose ( on both DC's ) Post that output, ill have a look, and im getting a choco. :-) Greetz, Louis> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Stefan G. Weichinger via samba > Verzonden: woensdag 31 juli 2019 15:41 > Aan: samba at lists.samba.org > Onderwerp: Re: [Samba] GPO issues - getting SYSVOL cleaned up again > > Am 31.07.19 um 14:48 schrieb L.P.H. van Belle via samba: > > ?? And we did compair this months ago.. > > You did say, everything is in sync now. > > Ahhh... ;-) > > I agree! ;-) > > > If you really want to know if you DC's are setup the same. > > Tip.. Copy /etc of both server into a new folder. > > And runn diff -r /etc-dc1/ /etc-dc2/ > check-me.txt > > And check-me.txt > > yeah ... > > > I just did that on my brand new Buster proxy servers, 2 > with keepalived. > > I'm almost done with this, you should only see hostname > IP's as differences... > > Virtual ips, firewalling, added winbind, nfs, strongswan, > kerberos SSO auths. > > Squid with 4 setups.. Pfew.. But guys, when done im posting > this howto also. > > With squid 4.8 on buster, ( hint : repo buster-squid48 ssl > enabled ) > > What a dragon this was, strongswan is last what im on now. > > If someone has a strongswan setup with user/ldap auth, pm > me your config ;-) > > > > > > Ok, what you posted below. > > > > pre01svdeb03 : apt-get remove --purge --auroremove resolvconf > > Old dc: pre01svdeb02 : apt-get remove --purge --auroremove > resolvconf > > > > Make these changes/verify them after the remove of resolvconf > > > > pre01svdeb03 > > /etc/resolv.conf > > search pilsbacher.at > > nameserver 192.168.16.206 > > nameserver 192.168.16.205 > > > > pre01svdeb02 > > /etc/resolv.conf > > search pilsbacher.at > > nameserver 192.168.16.206 > > nameserver 192.168.16.205 > > > > ^^ yes note that "NOT switching" the DC's. > > If want here the other DC first untill its all ok local on > this server. > > > > Reboot pre01svdeb02 > > Backup your logs on this server and clear them. > > > > Yes, reboot! That clear cachings also, just to be sure. > > > > After boot, login, wait ... Wait ... > > > > klist -ke /var/lib/samba/private/secrets.keytab > > Verify the hostname > > I waited a little bit ... > > That file is OLD > root at pre01svdeb02:~# ls -l /var/lib/samba/private/secrets.keytab > -rw------- 1 root root 1067 Mai 24 2017 > /var/lib/samba/private/secrets.keytab > > and WRONG: > > root at pre01svdeb02:~# klist -ke /var/lib/samba/private/secrets.keytab > Keytab name: FILE:/var/lib/samba/private/secrets.keytab > KVNO Principal > ---- > -------------------------------------------------------------- > ------------ > 1 HOST/dc at PILSBACHER.AT (des-cbc-crc) > 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (des-cbc-crc) > 1 DC$@PILSBACHER.AT (des-cbc-crc) > 1 HOST/dc at PILSBACHER.AT (des-cbc-md5) > 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (des-cbc-md5) > 1 DC$@PILSBACHER.AT (des-cbc-md5) > 1 HOST/dc at PILSBACHER.AT (arcfour-hmac) > 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (arcfour-hmac) > 1 DC$@PILSBACHER.AT (arcfour-hmac) > 1 HOST/dc at PILSBACHER.AT (aes128-cts-hmac-sha1-96) > 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (aes128-cts-hmac-sha1-96) > 1 DC$@PILSBACHER.AT (aes128-cts-hmac-sha1-96) > 1 HOST/dc at PILSBACHER.AT (aes256-cts-hmac-sha1-96) > 1 HOST/dc.pilsbacher.at at PILSBACHER.AT (aes256-cts-hmac-sha1-96) > 1 DC$@PILSBACHER.AT (aes256-cts-hmac-sha1-96) > > > I wait some more and get myself a coffee ... > > > > > > > > > Verify /var/lib/samba/private/dns_update_cache > > Does it show the correct hostname. > > > > Is it correct now ? > > Yes => run samba-tool dbcheck --cross-nc > > > > No errors? ( ignore tombstone objects ) > > samba_dnsupdate --verbose > > > > And if ok, now switch's DC's again in /etc/resolv.conf > > > > search pilsbacher.at > > nameserver 192.168.16.205 > > nameserver 192.168.16.206 > > > > And reboot once more, check logs again. > > -- > To unsubscribe from this list go to the following URL and read the > instructions: https://lists.samba.org/mailman/options/samba > >
Stefan G. Weichinger
2019-Jul-31 14:08 UTC
[Samba] GPO issues - getting SYSVOL cleaned up again
Am 31.07.19 um 15:59 schrieb L.P.H. van Belle via samba:> Ok, after that reboot > > ! Note, atm dont care about secrets.keytab (yet) > .. I was a bit ahead with things... > > One thing at a time, for the keytab to be corrected, you need a perfect correct working > A PTR CNAME GUIDs for the DC(3) first then we start thinking in kerberos corrections. > > Run samba_dnsupdate --verbose ( on both DC's ) > Post that output, ill have a look, and im getting a choco. :-)Now look at all that fun: dc.pilsbacher.at entry has been magically created again, it seems: root at pre01svdeb02:~# samba_dnsupdate --verbose IPs: ['192.168.16.205'] Looking for DNS entry A dc.pilsbacher.at 192.168.16.205 as dc.pilsbacher.at. Looking for DNS entry A pilsbacher.at 192.168.16.205 as pilsbacher.at. Looking for DNS entry SRV _ldap._tcp.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.pilsbacher.at dc.pilsbacher.at 389 Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.pilsbacher.at dc.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.dc._msdcs.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 389 Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at dc.pilsbacher.at 389 Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at dc.pilsbacher.at 389 Looking for DNS entry SRV _kerberos._tcp.pilsbacher.at dc.pilsbacher.at 88 as _kerberos._tcp.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._tcp.pilsbacher.at dc.pilsbacher.at 88 Checking 0 100 88 dc.pilsbacher.at. against SRV _kerberos._tcp.pilsbacher.at dc.pilsbacher.at 88 Looking for DNS entry SRV _kerberos._udp.pilsbacher.at dc.pilsbacher.at 88 as _kerberos._udp.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._udp.pilsbacher.at dc.pilsbacher.at 88 Checking 0 100 88 dc.pilsbacher.at. against SRV _kerberos._udp.pilsbacher.at dc.pilsbacher.at 88 Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 88 as _kerberos._tcp.dc._msdcs.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 88 Checking 0 100 88 dc.pilsbacher.at. against SRV _kerberos._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 88 Looking for DNS entry SRV _kpasswd._tcp.pilsbacher.at dc.pilsbacher.at 464 as _kpasswd._tcp.pilsbacher.at. Checking 0 100 464 pre01svdeb03.pilsbacher.at. against SRV _kpasswd._tcp.pilsbacher.at dc.pilsbacher.at 464 Checking 0 100 464 dc.pilsbacher.at. against SRV _kpasswd._tcp.pilsbacher.at dc.pilsbacher.at 464 Looking for DNS entry SRV _kpasswd._udp.pilsbacher.at dc.pilsbacher.at 464 as _kpasswd._udp.pilsbacher.at. Checking 0 100 464 pre01svdeb03.pilsbacher.at. against SRV _kpasswd._udp.pilsbacher.at dc.pilsbacher.at 464 Checking 0 100 464 dc.pilsbacher.at. against SRV _kpasswd._udp.pilsbacher.at dc.pilsbacher.at 464 Looking for DNS entry CNAME e5922d4b-9bf0-4c79-b256-ff5f75a3e4f4._msdcs.pilsbacher.at dc.pilsbacher.at as e5922d4b-9bf0-4c79-b256-ff5f75a3e4f4._msdcs.pilsbacher.at. Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 389 Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at dc.pilsbacher.at 389 Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at dc.pilsbacher.at 389 Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 88 as _kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 88 Checking 0 100 88 dc.pilsbacher.at. against SRV _kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 88 Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at dc.pilsbacher.at 88 as _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at dc.pilsbacher.at 88 Checking 0 100 88 dc.pilsbacher.at. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at dc.pilsbacher.at 88 Looking for DNS entry SRV _ldap._tcp.pdc._msdcs.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.pdc._msdcs.pilsbacher.at. Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.pdc._msdcs.pilsbacher.at dc.pilsbacher.at 389 Looking for DNS entry A gc._msdcs.pilsbacher.at 192.168.16.205 as gc._msdcs.pilsbacher.at. Looking for DNS entry SRV _gc._tcp.pilsbacher.at dc.pilsbacher.at 3268 as _gc._tcp.pilsbacher.at. Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV _gc._tcp.pilsbacher.at dc.pilsbacher.at 3268 Checking 0 100 3268 dc.pilsbacher.at. against SRV _gc._tcp.pilsbacher.at dc.pilsbacher.at 3268 Looking for DNS entry SRV _ldap._tcp.gc._msdcs.pilsbacher.at dc.pilsbacher.at 3268 as _ldap._tcp.gc._msdcs.pilsbacher.at. Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.gc._msdcs.pilsbacher.at dc.pilsbacher.at 3268 Checking 0 100 3268 dc.pilsbacher.at. against SRV _ldap._tcp.gc._msdcs.pilsbacher.at dc.pilsbacher.at 3268 Looking for DNS entry SRV _gc._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 3268 as _gc._tcp.Default-First-Site-Name._sites.pilsbacher.at. Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV _gc._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 3268 Checking 0 100 3268 dc.pilsbacher.at. against SRV _gc._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 3268 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at dc.pilsbacher.at 3268 as _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at. Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at dc.pilsbacher.at 3268 Checking 0 100 3268 dc.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at dc.pilsbacher.at 3268 Looking for DNS entry A DomainDnsZones.pilsbacher.at 192.168.16.205 as DomainDnsZones.pilsbacher.at. Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.DomainDnsZones.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.DomainDnsZones.pilsbacher.at dc.pilsbacher.at 389 Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.DomainDnsZones.pilsbacher.at dc.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at dc.pilsbacher.at 389 Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at dc.pilsbacher.at 389 Looking for DNS entry A ForestDnsZones.pilsbacher.at 192.168.16.205 as ForestDnsZones.pilsbacher.at. Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.ForestDnsZones.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.ForestDnsZones.pilsbacher.at dc.pilsbacher.at 389 Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.ForestDnsZones.pilsbacher.at dc.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at dc.pilsbacher.at 389 as _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at dc.pilsbacher.at 389 Checking 0 100 389 dc.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at dc.pilsbacher.at 389 No DNS updates needed root at pre01svdeb03:~# samba_dnsupdate --verbose IPs: ['192.168.16.206'] Looking for DNS entry A pre01svdeb03.pilsbacher.at 192.168.16.206 as pre01svdeb03.pilsbacher.at. Looking for DNS entry NS pilsbacher.at pre01svdeb03.pilsbacher.at as pilsbacher.at. Looking for DNS entry NS _msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at as _msdcs.pilsbacher.at. Looking for DNS entry A pilsbacher.at 192.168.16.206 as pilsbacher.at. Looking for DNS entry SRV _ldap._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.dc._msdcs.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 389 Looking for DNS entry SRV _kerberos._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 88 as _kerberos._tcp.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 88 Looking for DNS entry SRV _kerberos._udp.pilsbacher.at pre01svdeb03.pilsbacher.at 88 as _kerberos._udp.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._udp.pilsbacher.at pre01svdeb03.pilsbacher.at 88 Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 88 as _kerberos._tcp.dc._msdcs.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._tcp.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 88 Looking for DNS entry SRV _kpasswd._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 464 as _kpasswd._tcp.pilsbacher.at. Checking 0 100 464 pre01svdeb03.pilsbacher.at. against SRV _kpasswd._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 464 Looking for DNS entry SRV _kpasswd._udp.pilsbacher.at pre01svdeb03.pilsbacher.at 464 as _kpasswd._udp.pilsbacher.at. Checking 0 100 464 pre01svdeb03.pilsbacher.at. against SRV _kpasswd._udp.pilsbacher.at pre01svdeb03.pilsbacher.at 464 Looking for DNS entry CNAME a60fbb5f-926b-484d-992c-c1ef5cc0936d._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at as a60fbb5f-926b-484d-992c-c1ef5cc0936d._msdcs.pilsbacher.at. Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at pre01svdeb03.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 389 Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at pre01svdeb03.pilsbacher.at 88 as _kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at pre01svdeb03.pilsbacher.at 88 Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 88 as _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at. Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 88 Looking for DNS entry A gc._msdcs.pilsbacher.at 192.168.16.206 as gc._msdcs.pilsbacher.at. Looking for DNS entry SRV _gc._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 3268 as _gc._tcp.pilsbacher.at. Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV _gc._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 3268 Looking for DNS entry SRV _ldap._tcp.gc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 3268 as _ldap._tcp.gc._msdcs.pilsbacher.at. Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.gc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 3268 Looking for DNS entry SRV _gc._tcp.Default-First-Site-Name._sites.pilsbacher.at pre01svdeb03.pilsbacher.at 3268 as _gc._tcp.Default-First-Site-Name._sites.pilsbacher.at. Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV _gc._tcp.Default-First-Site-Name._sites.pilsbacher.at pre01svdeb03.pilsbacher.at 3268 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 3268 as _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at. Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 3268 Looking for DNS entry A DomainDnsZones.pilsbacher.at 192.168.16.206 as DomainDnsZones.pilsbacher.at. Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.DomainDnsZones.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.DomainDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389 Looking for DNS entry A ForestDnsZones.pilsbacher.at 192.168.16.206 as ForestDnsZones.pilsbacher.at. Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.ForestDnsZones.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.ForestDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at. Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389 No DNS updates needed