Jonathan Neuhauser
2022-Jul-11 08:17 UTC
[Samba] name resolve order parameter for security=ads
Dear Rowland, thanks for your response! I've tried your krb5.conf without better results. However I noticed that that this time after enabling "name resolve order = wins bcast" and restarting winbind, the error doesn't occur immediately, but requires a restart of the machine (however afterwards, the errors are the same as in my original email). Does this make a difference for you? Jonathan On 11.07.22 09:30, Rowland Penny via samba wrote:> On Mon, 2022-07-11 at 08:23 +0200, Jonathan Neuhauser via samba wrote: >> Dear Samba list, >> >> I noticed that the recommendation for the "name resolve order" >> parameter >> for security = ads, namely "wins bcast", breaks everything on my >> test >> domain client. [...] >> >> samba --version: Version 4.13.17-Ubuntu, Ubuntu 20.04 LTS, uname -r: >> 5.13.0-52-generic >> >> What is different between your set up and mine is krb5.conf, so can you >> try this one: >> >> [libdefaults] >> default_realm = EXAMPLE.ORG >> dns_lookup_realm = false >> dns_lookup_kdc = true >> >> Rowland
On Mon, 2022-07-11 at 10:17 +0200, Jonathan Neuhauser via samba wrote:> Dear Rowland, > > thanks for your response! I've tried your krb5.conf without better > results. However I noticed that that this time after enabling "name > resolve order = wins bcast" and restarting winbind, the error > doesn't > occur immediately, but requires a restart of the machine (however > afterwards, the errors are the same as in my original email). Does > this > make a difference for you? > > JonathanI am running Linux Mint LMDE 5 in a VM, just fully updated it (so Samba is probably very similar to your 4.13.17) and it still works. Can you go here: https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh Download the script and run it on your Samba server, post the output here in a reply to this, do not attach it, this list strips attachments. Rowland