Displaying 5 results from an estimated 5 matches for "samba_dnsserv".
Did you mean:
samba_dnsserver
2019 Jan 11
5
samba-tool auth in scripts
Am 10.01.19 um 14:09 schrieb Rowland Penny via samba:
> You don't ;-)
> You do what the script should have done (I feel version 0.8.10 will
> soon make an appearance), export the cache to use <export
> KRB5CCNAME="/tmp/dhcp-dyndns.cc"> and then use '$KRB5CCNAME' wherever
> '/tmp/dhcp-dyndns.cc' appears, except for:
> [...]
Yes, that worked.
2019 Jan 14
0
dehydrated hook for LetsEncrypt certs and samba dns (was: samba-tool auth in scripts)
...YOUR.REALM ( to keep some confusion away and in CAPS )
Even when (dnsdomain) primary.dnsdomain.tld has the same REALM DOMAIN PRIMARY.DNSDOMAIN.TLD ( == YOUR.REALM )
These are not the same things.
I suggest :
SAMBA_PRINCIPAL=dehydrated-service at YOUR.REALM
SAMBA_DOMAIN=primary.dnsdomain.tld
SAMBA_DNSSERVER=dc.${SAMBA_DOMAIN}
Since its running on the DC your updateing.
You should be able to use :
SAMBA_DOMAIN=$(hostname -d)
SAMBA_DNSSERVER=$(hostname -f)
Keep REALM always in CAPS. Show the difference between the primary.dnsdomain.tld and REALMs.
And tip,
SAMBA_TICKETCACHE=/home/dehydrated/tm...
2019 Jan 14
4
dehydrated hook for LetsEncrypt certs and samba dns (was: samba-tool auth in scripts)
..., but preventing it works for me.
Almost, look at these three.. ( look at the order here also. )
# The domain under which the entries will be created, usually $(hostname -d)
SAMBA_DNSDOMAIN=your.dnsdomain
SAMBA_REALMDOMAIN=${SAMBA_DNSDOMAIN^^}
# your Samba-AD-DNS server, usually $(hostname -f)
SAMBA_DNSSERVER=dc.${SAMBA_DNSDOMAIN}
# User principal name.
SAMBA_PRINCIPAL=dehydrated-service@${SAMBA_REALMDOMAIN}
> > And tip,
> >
> > SAMBA_TICKETCACHE=/home/dehydrated/tmp/ticket-cache
> > Create that one on ramdisk.
>
> Why? I delete it directly afterwards, is that a...
2019 Jan 14
2
dehydrated hook for LetsEncrypt certs and samba dns (was: samba-tool auth in scripts)
...ouis says.
>
> Even when (dnsdomain) primary.dnsdomain.tld has the same REALM DOMAIN
> PRIMARY.DNSDOMAIN.TLD ( == YOUR.REALM ) These are not the same
> things.
>
> I suggest :
> SAMBA_PRINCIPAL=dehydrated-service at YOUR.REALM
> SAMBA_DOMAIN=primary.dnsdomain.tld
> SAMBA_DNSSERVER=dc.${SAMBA_DOMAIN}
>
> Since its running on the DC your updateing.
> You should be able to use :
> SAMBA_DOMAIN=$(hostname -d)
> SAMBA_DNSSERVER=$(hostname -f)
>
>
> Keep REALM always in CAPS. Show the difference between the
> primary.dnsdomain.tld and REALMs. And...
2019 Jan 14
0
dehydrated hook for LetsEncrypt certs and samba dns (was: samba-tool auth in scripts)
...IN^^}
>
> Wouldn't this have the same problem ?
> Not trying to be argumentative, just trying to understand the problem.
Just avoiding possible problems and keep it clear that dnsdomain != REALM.
>
> >
> > # your Samba-AD-DNS server, usually $(hostname -f)
> > SAMBA_DNSSERVER=dc.${SAMBA_DNSDOMAIN}
> >
> > # User principal name.
> > SAMBA_PRINCIPAL=dehydrated-service@${SAMBA_REALMDOMAIN}
> >
> >
> >
> > > > And tip,
> > > >
> > > > SAMBA_TICKETCACHE=/home/dehydrated/tmp/ticket-cache
> &g...