samba - Nov 2021 - Orphan SPN

Thank you!

I am on FreeBSD and my knowledge of sed is poor. Trying to adapt to my 
shell, I`ve butchered your line to this:

# samba-ldbsearch -H ldap://home.oml.su -P -b "dc=oml,dc=su" | grep
cifs

that lists some osX machines:

servicePrincipalName: cifs/air1411.oml.su
servicePrincipalName: cifs/macpro2008.oml.su
servicePrincipalName: cifs/macmini20151116.oml.su
servicePrincipalName: cifs/macbook-air-150.oml.su

But no sign of SPN cifs/oml.su, which I am looking for.

Is that because of bad interpretation of your line?

On 24.11.2021 22:43, Rowland Penny via samba wrote:
> Running this on a Samba AD DC, should show the SPN:
>
> ldbsearch -Hldap://"$(hostname -s)" -P -b "dc=$(echo
"$(hostname -d)"
> | sed 's/\./,dc=/g')" -s sub
"(servicePrincipalName=cifs/oml.su)"
> servicePrincipalName samAccountName

On Wed, 2021-11-24 at 23:24 +0300, Oljas Kuzembaev via samba
wrote:
> Thank you!
> 
> I am on FreeBSD and my knowledge of sed is poor. Trying to adapt to
> my 
> shell, I`ve butchered your line to this:
> 
> # samba-ldbsearch -H ldap://home.oml.su -P -b "dc=oml,dc=su" |
grep
> cifs
> 
> that lists some osX machines:
> 
> servicePrincipalName: cifs/air1411.oml.su
> servicePrincipalName: cifs/macpro2008.oml.su
> servicePrincipalName: cifs/macmini20151116.oml.su
> servicePrincipalName: cifs/macbook-air-150.oml.su
> 
> But no sign of SPN cifs/oml.su, which I am looking for.
> 
> Is that because of bad interpretation of your line?
No, I wouldn't have thought so. Your search dumps the entire AD and the
grep only prints the lines that contain 'cifs'.

Just as an aside, why is ldbsearch called samba-ldbsearch on freebsd ?
As far as I am aware, only Samba produces ldbsearch, so the 'samba-' is
a bit superfluous.

You could try it like this:

samba-ldbsearch -H ldap://home.oml.su -P -b "dc=oml,dc=su" -s sub
"(servicePrincipalName=cifs/oml.su)" servicePrincipalName
samAccountName

If that doesn't show the SPN, try adding '--cross-ncs' after
'samba-
ldbsearch ' and you could also try adding '--show-deleted' just in
case
it is deleted (though I don't think it is)

Rowland