search for: appmgmt

Hi! I'm not sure I understand how SPNs are registered in the AD domain. I know when a regular samba server is joined to an AD domain, a few SPNs are registered - namely, CIFS/$netbios_name and each for CIFS/$netbios_aliases (where netbios name and netbios aliases are the parameters in smb.conf - yes I know these are obsolete, but in this case they're actually used for non-obsolete task).

...9; -s base sPNMappings That should be all on one line and replace 'DC=samdom,DC=example,DC=com' with your dns domain details. You should get something like this back: dn: CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=samdom,DC=example,DC=com sPNMappings: host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicat or,eventlog,eventsystem,policyagent,oakley,dmserver,dns,mcsvc,fax,msiserver,i as,messenger,netlogon,netman,netdde,netddedsm,nmagent,plugplay,protectedstora ge,rasman,rpclocator,rpc,rpcss,remoteaccess,rsvp,samss,scardsvr,scesrv,seclog on,scm,dcom,cifs...

whoops, i didn't have much luck attaching the entire file, hopefully this link will work. http://www.lebox.org/u/milan/samba/userenv-clip.txt here's a piece of the log that looks interesting, any hints? USERENV(a0.80) 15:42:18:872 MyGetDomainDNSName: MyGetUserName failed for dns domain name with 1355 USERENV(a0.80) 15:42:18:872 CheckUserInMachineForest: MyGetDomainName failed with 1355.

...nChanged: 20150416065542.0Z uSNCreated: 1723 tombstoneLifetime: 180 uSNChanged: 1723 showInAdvancedViewOnly: TRUE name: Directory Service objectGUID: 638831d2-9190-40ee-b566-248ad6f781fd objectCategory: CN=NTDS-Service,CN=Schema,CN=Configuration,DC=<domain>,DC=c orp sPNMappings: host=alerter,appmgmt,cisvc,clipsrv,browser,dhcp,dnscache,replicat or,eventlog,eventsystem,policyagent,oakley,dmserver,dns,mcsvc,fax,msiserver,i as,messenger,netlogon,netman,netdde,netddedsm,nmagent,plugplay,protectedstora ge,rasman,rpclocator,rpc,rpcss,remoteaccess,rsvp,samss,scardsvr,scesrv,seclog on,scm,dcom,cifs...

Hai,   I've checked out the log you send and i re-read the complete thread.   Based on thats done and what i did see in you logs now, looks like a  * (wildcard)  entry is giving the problem. But i am not sure of that, the wildcard bugs should be fixed, when i look in bugzilla.  (#10435 #12952 )   I've forwarded the mail to Rowland also before we go throw things at you again. ;-)