samba - Aug 2020 - Windows 10 workstation won't register with DNS after Samba update

On 8/19/2020 12:02 PM, Rowland penny via samba wrote:
> On 19/08/2020 19:29, Barry Ralphs via samba wrote:
>> We recently upgraded Samba on our DC from 4.7.6-0 to 4.11.9-3.
>>
>> ??????? # samba BIND9_DLZ
>> ??????? tkey-gssapi-keytab
"/var/lib/samba/private/dns.keytab";
>>
>> Any suggestions on how to resolve this issue?
>
> Yes, change the 'tkey-gssapi-keytab' line to point to 
> '/var/lib/samba/bind-dns/dns.keytab'
>
> Rowland
>
Thanks for the reply Rowland.
The '/var/lib/samba/bind-dns' directory is empty.
Will 'dns.keytab' be generated automatically or should I copy it from 
'private'?

On 19/08/2020 20:27, Barry Ralphs via samba wrote:
> On 8/19/2020 12:02 PM, Rowland penny via samba wrote:
>> On 19/08/2020 19:29, Barry Ralphs via samba wrote:
>>> We recently upgraded Samba on our DC from 4.7.6-0 to 4.11.9-3.
>>>
>>> ??????? # samba BIND9_DLZ
>>> ??????? tkey-gssapi-keytab
"/var/lib/samba/private/dns.keytab";
>>>
>>> Any suggestions on how to resolve this issue?
>>
>> Yes, change the 'tkey-gssapi-keytab' line to point to 
>> '/var/lib/samba/bind-dns/dns.keytab'
>>
>> Rowland
>>
> Thanks for the reply Rowland.
> The '/var/lib/samba/bind-dns' directory is empty.
> Will 'dns.keytab' be generated automatically or should I copy it
from
> 'private'?
>
It should have been created and populated by the upgrade, which leads to 
the questions, what OS (looks like a red-hat variant) and are you using 
a self compiled Samba or packages ? if packages, are they distro 
packages or from where ?

Rowland

On 8/19/2020 12:40 PM, Rowland penny via samba wrote:
> On 19/08/2020 20:27, Barry Ralphs via samba wrote:
>> On 8/19/2020 12:02 PM, Rowland penny via samba wrote:
>>> On 19/08/2020 19:29, Barry Ralphs via samba wrote:
>>>> We recently upgraded Samba on our DC from 4.7.6-0 to 4.11.9-3.
>>>>
>>>> ??????? # samba BIND9_DLZ
>>>> ??????? tkey-gssapi-keytab
"/var/lib/samba/private/dns.keytab";
>>>>
>>>> Any suggestions on how to resolve this issue?
>>>
>>> Yes, change the 'tkey-gssapi-keytab' line to point to 
>>> '/var/lib/samba/bind-dns/dns.keytab'
>>>
>>> Rowland
>>>
>> Thanks for the reply Rowland.
>> The '/var/lib/samba/bind-dns' directory is empty.
>> Will 'dns.keytab' be generated automatically or should I copy
it from
>> 'private'?
>>
> It should have been created and populated by the upgrade, which leads 
> to the questions, what OS (looks like a red-hat variant) and are you 
> using a self compiled Samba or packages ? if packages, are they distro 
> packages or from where ?
>
> Rowland
The OS is CentOS 7.
The packages are from Tranquil: 
https://samba.tranquil.it/centos7/stable/x86_64/
There were to many conflicts with the in-place update, so I had to 
uninstall & reinstall Samba.
Maybe that's why it missing...

On 8/19/2020 12:40 PM, Rowland penny via samba wrote:
> On 19/08/2020 20:27, Barry Ralphs via samba wrote:
>> On 8/19/2020 12:02 PM, Rowland penny via samba wrote:
>>> On 19/08/2020 19:29, Barry Ralphs via samba wrote:
>>>> We recently upgraded Samba on our DC from 4.7.6-0 to 4.11.9-3.
>>>>
>>>> ??????? # samba BIND9_DLZ
>>>> ??????? tkey-gssapi-keytab
"/var/lib/samba/private/dns.keytab";
>>>>
>>>> Any suggestions on how to resolve this issue?
>>>
>>> Yes, change the 'tkey-gssapi-keytab' line to point to 
>>> '/var/lib/samba/bind-dns/dns.keytab'
>>>
>>> Rowland
>>>
>> Thanks for the reply Rowland.
>> The '/var/lib/samba/bind-dns' directory is empty.
>> Will 'dns.keytab' be generated automatically or should I copy
it from
>> 'private'?
>>
> It should have been created and populated by the upgrade, which leads 
> to the questions, what OS (looks like a red-hat variant) and are you 
> using a self compiled Samba or packages ? if packages, are they distro 
> packages or from where ?
>
> Rowland
>
Just an FYI, in case anyone else has this issue.
I was able to resolve my issue by running:
"samba_upgradedns --dns-backend=BIND9_DLZ"
This created/moved the needed files from "/var/lib/samba/private" to 
"/var/lib/samba/bind-dns".
I also updated my named.conf. to point to the new directory.