Displaying 2 results from an estimated 2 matches for "broadcase".
Did you mean:
broadcast
2023 Jan 31
1
The link (or more particularity the lack of a link) between AD SPNs and DNS
...> /mjt
To be clear, you need both the CNAME or alternate A records AND the
SPN, DNS is not managed by samba-tool spn.
The client doesn't resolve what the CNAME or A points to to find a
canonical name as DNS is untrusted in AD, but by the same token the
choice of naming technology (NetBIOS broadcase, local hosts file, DNS
A, AAAA or CNAME) doesn't impact on the use of SPNs.
So essentially, both DNS and SPNs need to be set up, and to match.
Andrew Bartlett
--
Andrew Bartlett (he/him) https://samba.org/~abartlet/
Samba Team Member (since 2001) https://samba.org
Samba Team Lead, Ca...
2023 Jan 31
2
Upgrading from Samba 4.8.2 to 4.15.5
31.01.2023 08:55, Matt Savin via samba ?????:
> In group policies use DNS aliases, then you'll need to change only DNS
> entries for these aliases to point to a new host(s).
I'd say don't use simple dns aliases (cnames) in a DC, but use SPNs instead
(see samba-tool spn). This will manage CNAMEs too, and also manages the KRB
tickets and proper autentication of the server to the