similar to: bug in samba 4.1.17 ? changed CNAME record to other host

Hello, we successfully migrated from a Samba 3.x NT Domain to a Samba AD Domain using Samba 4.7.x. However, there are still some issues and I hope for your help. The biggest problem so far follows: For historical reasons our Samba file servers carry a lot of aliases. Now that they have become AD Members I did set a lot of CNAMEs in the AD DNS (using the Windows DNS Tool). Most of the aliases

Hi, Has any one had problems with mail clients were your DNS is like this; doman.com MX 50 mail.domain.com domain.com MX 100 mail2.domain.com domain.com CNAME www.domain.com -aurf

I am currently in the progress of testing the replacement of a Windows 2003 DC with a Samba4-based one. In the DNS of old Windows DC we had CNAME entries to alias www.domain.com to serverX.domain.com and ftp.domain.com to serverY.domain.com. This is working and can be tested successfully with dig The CNAME entries were correctly replicated across to the internal DNS server on the new Samba4 DC

Ok, we might have found something here. I created a small script, see below, easy to adapt. So, after running this i see the same problem as in : https://bugzilla.samba.org/show_bug.cgi?id=14268 If i do it manualy everything works fine. But if i "past the commands or run the script" Then i see this problem.. So im thinking here, the speed of adding is creating somekind or

Not sure if this is the best place to ask this question (and if so, please point me to a better listserv), but is there anything "wrong" RFC or best practice wise with pointing a CNAME record to a DNS server? (I'm using EveryDNS.net, and I'd like to make my CNAME records ns1-> 4.myDomain.com correspond to ns1->ns4.EveryDNS.net.) -------------- next part -------------- An

Hi, I'm testing: $ sudo nsd-control status version: 4.0.1 verbosity: 2 I found a loop problem with this record: * IN CNAME none ("none" means no matching record in zone and therefore match * again) Queries that use "* CNAME" will result in a loop. The response will use TCP and will be limited to 65k bytes $ dig @127.0.0.1 sdfgsfg.test.com ;; Truncated,

I need to implement split horizon DNS, as I have just one external IP address (dynamic.lindenberg.one in external DNS) but multiple internal ones. External requests are distributed by port or using sniproxy (in particular 443), and all externally visible names are in a distinct zone then my domain, but with an additional indirection: names like backup.lindenberg.one resolve to CNAME

Ok, new test. Besides that i dont like the python errors shown, this still looks good. So i dont know.. See below, i can not make it error. for x in 0 1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 ; do samba-tool dns add dc1.internal.dom.tld $x.249.10.in-addr.arpa 158 PTR host-test.extrazone.dom.tld ; done Record added successfully Record added successfully Record added successfully Record added

Hai   After my squid group adventure, i have a remaining question here.   The problem was as followed. ( and this probely dont applie to squid kerberos helpers only. )   samba-tool setup for squid i used, was as followed.   samba-tool user create squid1-service --description="Unprivileged user for SQUID1-Proxy Services" --random-password samba-tool user setexpiry

[ Rowland, i know, i need to upgrade. ;-) ] Some month ago, with a relative big bunch of fix&tweaks, i was able to put a Win10 1903 client in join to a 'NT mode' Samba domain. Now i'm trying to do the same with a 1909 version; all seems to work as before, BUT netlogon script (defined in smb.conf with: logon script = startup.bat ) simply seems does not run. No log event in

We are not much off. But you have mixed "samba/window" and "windows/windows" settings. Samba/windows \\%logonserver%\home\%username%\desktop Windows/windows \\hostname.fqdn.tld\users\%username%\desktop Guess, which one i use. ;-) Now, do get where this is coming from. So use this (add CNAME for you member server ), Note, you MUST setup PTR records.

(please reply to the list) If the record does not exist, then you have an other problem. Because samba does support this : cat /var/lib/samba/private/named.conf.update /* this file is auto-generated - do not edit */ update-policy { grant INTERNAL.DOMAIN.TLD ms-self * A AAAA; grant Administrator at INTERNAL.DOMAIN.TLD wildcard * A AAAA SRV CNAME; grant

On Thu, Feb 20, 2020 at 10:56 AM L.P.H. van Belle via samba < samba at lists.samba.org> wrote: > > A setup on howto improve your samba network and simplify it. > This is how i setup, sure looks dificult but its all about DNS setup and > what you add to it. > > For AD-DC.s ( AD, TIME, NS, LDAP ) > Hostname.FQDN.TLD : max 63chars, incl the .'s allowed chars: a-Z 0-9

So I had dhcp, radvd and bind working together nicely and now I threw in a wrench of setting up an AD DC I want to change my dhcp server setting to put client's into the new AD Domain but am a little hesitant as it is all working so nicely with DDNS I'm starting to think all I need to do is edit just my dhcpd.conf and change occurrences of DOMAIN1.SUBDOMAIN.TLD to

I had left my config alone for now and dhcp still writes to DOMAIN1.SUBDOMAIN.TLD. But samba has been complaining about not being able to write to bind in its zone. [2016/05/27 07:30:06.738434, 0] ../source4/dsdb/dns/dns_update.c:295(dnsupdate_nameupdate_done) ../source4/dsdb/dns/dns_update.c:295: Failed DNS update - NT_STATUS_UNSUCCESSFUL If you are right about it using kerberos I think I am

https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD helped me find that I needed to add options { [...] tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; [...] }; That seems to have fixed my errors with DNS On Fri, May 27, 2016 at 9:26 AM, Rowland penny <rpenny at samba.org> wrote: > On 27/05/16 14:37, Jeff Sadowski wrote: >

Why would I do that? This is a *computer* not *user* adding the record. It is supposed to match the "grant INTERNAL.DOMAIN.TLD ms-self * A AAAA;" rule but it does not. For some mystical reason. Aki On Tue, Sep 08, 2015 at 10:18:03AM +0200, L.P.H. van Belle wrote: > Did you add the user that adds the dns setting in the dnsadmins group in the ad? > > > > >

On 10/12/15 14:40, Ole Traupe wrote: > >>> However, my 2nd DC is not that new, I restarted it many times, just >>> again (samba service). No DNS records are created anywhere. >>> >>> If I go through the DNS console, in each and every container there >>> is some entry for the 1st DC, but none for the 2nd (except on the >>> top levels: FQDN

On Fri, May 27, 2016 at 10:23 AM, Rowland penny <rpenny at samba.org> wrote: > On 27/05/16 17:11, Jeff Sadowski wrote: > >> https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD >> helped me find that I needed to add >> >> options { >> [...] >> tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; >>

On Wed, Feb 26, 2020 at 10:20 AM Philippe LeCavalier < support at plecavalier.com> wrote: > On Wed, Feb 26, 2020 at 10:09 AM Philippe LeCavalier < > support at plecavalier.com> wrote: > >> On Thu, Feb 20, 2020 at 10:56 AM L.P.H. van Belle via samba < >> samba at lists.samba.org> wrote: >> >>> >>> A setup on howto improve your samba