samba - Apr 2021 - Samba 4.14: Windows Users and Computer / No contact with the following DC...

Here my /usr/local/samba/etc/smb.conf on both dc1 and dc2 servers

(netbios names with DC1 and DC2 each one)

[global]
        netbios name = DC2
        realm = DTCF.ETECSA.CU
        server role = active directory domain controller
        workgroup = DTCF
        log level = 1 auth_audit:3
        log file = /var/log/samba/samba.log


[sysvol]
        path = /usr/local/samba/var/locks/sysvol
        read only = No
[netlogon]
        path = /usr/local/samba/var/locks/sysvol/dtcf.etecsa.cu/scripts
        read only = No

> I got the following error:
> When I open Users and Computer It returns "No contact with the
following
> DC...Unknown Username or bad password"
>
> I will explain what I did.
> I had two DCs (dc1 and dc2) with Samba 4.7.4 on Debian 10. A Windows 7
> with RSAT installed
> and with access to DNS and Users and Computers ok.
>
> I demoted dc2, stopped samba server, rm -r /usr/local/samba, and installed
> Samba 4.14 (./configure && make && make install ok). After
that It was
> joined to the first dc ok, and started the service ok.
>
> After that, I did the same with the first dc (Always transfering fsmo
> roles).
>
> Up to this point all seams to be right. Domain users en Windows and Linux
> workstations can logon successfuly. And even DNS can be managed on my
> Windows 7 with RSAT, connecting to both dcs.
>
> I can do kinit administrator on both DCs. I logon to Windows 7 with
> administrator ok.
>
> But Users and Computers can't be opened with any of the DCs. It says:
> "No contact with the following DC...Unknown Username or bad
password"
>
> What's happening?
>
>
>
>
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On 02/04/2021 23:40, Denis Morejon via samba wrote:
> Here my /usr/local/samba/etc/smb.conf on both dc1 and dc2 servers
>
> (netbios names with DC1 and DC2 each one)
>
> [global]
>          netbios name = DC2
>          realm = DTCF.ETECSA.CU
>          server role = active directory domain controller
>          workgroup = DTCF
>          log level = 1 auth_audit:3
>          log file = /var/log/samba/samba.log
>
>
> [sysvol]
>          path = /usr/local/samba/var/locks/sysvol
>          read only = No
> [netlogon]
>          path = /usr/local/samba/var/locks/sysvol/dtcf.etecsa.cu/scripts
>          read only = No

I feel this must have something to do with your DC's as it works for me, 
Windows 7 in a VM to Samba 4.14.2 DC's.

Can you go here: 
https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh

Download the script and run it on both of your DC's, then post the 
output into a reply to this, do not add attachments, this list strips them.

You might want to see here: https://apt.van-belle.nl/

It will save you having to compile Samba yourself.

Rowland