samba - Feb 2020 - Why are ForeignSecurityPrincipals and Managed Service Accounts empty with no entries?

Hi Rowland,

I tried your suggested /etc/named.conf. ForeignSecurityPrincipals and Managed
Service Accounts are still empty in Active Directory Users and Computers. Is it
more of an integrated LDAP issue than a DNS issue??

I also noticed that Network Manager keeps overwriting my /etc/resolv.conf. Is
there a way to solve this secondary issue?

Thank you.



________________________________
From: samba <samba-bounces at lists.samba.org> on behalf of Rowland penny
via samba <samba at lists.samba.org>
Sent: Wednesday, February 19, 2020 5:37 PM
To: sambalist <samba at lists.samba.org>
Subject: Re: [Samba] Why are ForeignSecurityPrincipals and Managed Service
Accounts empty with no entries?

On 19/02/2020 00:07, Turritopsis Dohrnii Teo En Ming
wrote:
> Hi Rowland,
>
> This is my full /etc/named.conf:
>
Try it like this:


options {
     directory "/var/named";
     notify no;
     empty-zones-enable no;
     allow-query { 127.0.0.1; 192.168.0.0/24; };
     allow-recursion { 127.0.0.1/32; 192.168.0.0/24; };
     forwarders { 8.8.8.8; 8.8.4.4; };
     allow-transfer { none; };
     dnssec-validation no;
     dnssec-enable no;
     dnssec-lookaside no;
     listen-on port 53 { any; };
     listen-on-v6 port 53 { any; };
     pid-file "/run/named/named.pid";
     tkey-gssapi-keytab "/usr/local/samba/bind-dns/dns.keytab";
     minimal-responses yes;
};

logging {
         channel default_debug {
                 file "data/named.run";
                 severity dynamic;
         };
};

zone "." IN {
type hint;
file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/usr/local/samba/bind-dns/named.conf";


Replace '192.168.0.0' with your networks address.

You may also want to change the forwarders.


Rowland



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of
U.S. Embassy Workers

Link:
https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************


Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United
Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and
Australia (25 Dec 2019 to 9 Jan 2020):

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----

On 19/02/2020 13:24, Turritopsis Dohrnii Teo En Ming
wrote:
>
> Hi Rowland,
>
> I tried your suggested /etc/named.conf. ForeignSecurityPrincipals and 
> Managed Service Accounts are still empty in Active Directory Users and 
> Computers. Is it more of an integrated LDAP issue than a DNS issue??
>
> I also noticed that Network Manager keeps overwriting my 
> /etc/resolv.conf. Is there a way to solve this secondary issue?
>
I think you have just one error, DNS

What does 'ps ax | grep dnsmasq' produce on the Centos 8 DC ?

Please do not say 'I haven't got dnsmasq installed', please run the 
command and post the output.


Rowland

[teo-en-ming at dc1 ~]$ ps ax | grep dnsmasq
 2406 pts/0    R+     0:00 grep --color=auto dnsmasq

________________________________
From: samba <samba-bounces at lists.samba.org> on behalf of Rowland penny
via samba <samba at lists.samba.org>
Sent: Wednesday, February 19, 2020 9:33 PM
To: sambalist <samba at lists.samba.org>
Subject: Re: [Samba] Why are ForeignSecurityPrincipals and Managed Service
Accounts empty with no entries?

On 19/02/2020 13:24, Turritopsis Dohrnii Teo En Ming
wrote:
>
> Hi Rowland,
>
> I tried your suggested /etc/named.conf. ForeignSecurityPrincipals and
> Managed Service Accounts are still empty in Active Directory Users and
> Computers. Is it more of an integrated LDAP issue than a DNS issue??
>
> I also noticed that Network Manager keeps overwriting my
> /etc/resolv.conf. Is there a way to solve this secondary issue?
>
I think you have just one error, DNS

What does 'ps ax | grep dnsmasq' produce on the Centos 8 DC ?

Please do not say 'I haven't got dnsmasq installed', please run the
command and post the output.


Rowland



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba


-----BEGIN EMAIL SIGNATURE-----

The Gospel for all Targeted Individuals (TIs):

[The New York Times] Microwave Weapons Are Prime Suspect in Ills of
U.S. Embassy Workers

Link:
https://www.nytimes.com/2018/09/01/science/sonic-attack-cuba-microwave.html

********************************************************************************************


Singaporean Mr. Turritopsis Dohrnii Teo En Ming's Academic
Qualifications as at 14 Feb 2019 and refugee seeking attempts at the United
Nations Refugee Agency Bangkok (21 Mar 2017), in Taiwan (5 Aug 2019) and
Australia (25 Dec 2019 to 9 Jan 2020):

[1] https://tdtemcerts.wordpress.com/

[2] https://tdtemcerts.blogspot.sg/

[3] https://www.scribd.com/user/270125049/Teo-En-Ming

-----END EMAIL SIGNATURE-----