samba - Dec 2024 - Error when joining new DC

I know this file. But IP and HOSTNAME  are static in our case. So it just needs
to run once when the new DC is joined.

Br

________________________________
From: samba <samba-bounces at lists.samba.org> on behalf of Rowland Penny
via samba <samba at lists.samba.org>
Sent: Monday, December 16, 2024 4:51:50 PM
To: samba at lists.samba.org <samba at lists.samba.org>
Cc: Rowland Penny <rpenny at samba.org>
Subject: Re: [Samba] Error when joining new DC

On Mon, 16 Dec 2024 15:35:40 +0000
Peter Mittermayer via samba <samba at lists.samba.org> wrote:
> No, no. All our servers have static IPs. Therefore there is no need
> for dyndns update.
>
> Therefore I keep the line for the tkey-gssapi-keytab in bind
> commented, thus disabling all dyndns updates.
That isn't what it is only there for.

I suggest you find a file called 'dns_update_list', it is in two places
on Debian:

/usr/share/samba/setup/dns_update_list
/var/lib/samba/private/dns_update_list

Yours might be different.

Read the file, understand it is used every 10 minutes on a DC and then
uncomment the 'tkey' line in named.conf.

Rowland

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

On Mon, 16 Dec 2024 15:58:30 +0000
Peter Mittermayer via samba <samba at lists.samba.org> wrote:
> I know this file. But IP and HOSTNAME  are static in our case. So it
> just needs to run once when the new DC is joined.
> 
No it doesn't, what happens if someone deletes the DCs dns records ?
The file is checked every 10 minutes on a Samba AD DC and if required,
any missing dns records are created. Also what if you move the
PDC_Emulator FSMO role to another DC, what will create the new dns
record ?

Please just uncomment the 'tkey' line.

Rowland