Hi Rowland
I have no windows DC but only 2 samba AD DCs.
This error has been happening for years. I don't know what's the error
means and what shoud I do in samba AD DC or Windows domain members.
? 2020/7/22 15:14, Rowland penny via samba ??:> On 22/07/2020 03:33, Adam Xu via samba wrote:
>> Hi all
>>
>> my samba version is 4.12.5 and when a sql server windows machine join
>> the domain, It shows error in samba :
>>
>> Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com:
>> acl: spn validation failed for
>> spn[E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SEC-CON03:389]
>> uac[0x1000] account[SEC-CON03$] hostname[SEC-Con03.domain.com]
>> nbname[DOMAIN] ntds[(null)] forest[domain.com] domain[domain.com]
>
> You could have a bigger problem here,
> 'E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM' probably means AD LDS,
> which means no global catalogue. Not sure this is meant to work, so
> what Windows DC is this ?
>
> Rowland
>
>
>
--
Adam Xu
Phone: 86-512-8777-3585
Adagene (Suzhou) Limited
C14, No. 218, Xinghu Street, Suzhou Industrial Park