similar to: FreeBSD: net/samba43's NSUPDATE

On 05/03/16 22:55, Rowland penny wrote: > Don't use freebsd, but Samba 4, when run as an AD DC, uses nsupdate to > update a computers DNS records in AD. First off, thanks for answering. Alas, I don't really understand what you mean... Is it used to dynamically add A records for clients that connect to the AD? >> Is it intended to work with BIND (like the other two in

On 03/05/16 14:15, Andrea Venturoli wrote: > Hello. > > Forgive me, but I'm quite new to AD and I've been searching the web > for a couple of days, but found nothing relevant... > > What's exaclty the NSUPDATE option of this port? Don't use freebsd, but Samba 4, when run as an AD DC, uses nsupdate to update a computers DNS records in AD. > Is it intended to

On 05/04/16 21:28, Rowland penny wrote: >> Choosing NSUPDATE brings in another port/package, named samba-nsupdate >> and described as "nsupdate utility with GSS-TSIG support", which >> installs "/usr/local/bin/samba-nsupdate". > > Is this a BSD thing ? I have heard of the python script 'samba-dnsupdate'. My understanding is that it's a

On 05/04/16 20:23, Rowland penny wrote: (I understand this might be specific to FreeBSD, but I asked on its mailing list and got no answer...) >> Then why is it an option *in alternative* to BIND? > > What do you mean '*in alternative*' ?? I mean when I build Samba port, I can choose NSUPDATE *or* BIND99 *or* BIN910 (where "or" means "exclusive or",

On 04/05/16 19:07, Andrea Venturoli wrote: > On 05/03/16 22:55, Rowland penny wrote: > >> Don't use freebsd, but Samba 4, when run as an AD DC, uses nsupdate to >> update a computers DNS records in AD. > > First off, thanks for answering. > > Alas, I don't really understand what you mean... > > Is it used to dynamically add A records for clients that

On 04/05/16 20:06, Andrea Venturoli wrote: > On 05/04/16 20:23, Rowland penny wrote: > > (I understand this might be specific to FreeBSD, but I asked on its > mailing list and got no answer...) > > > > > >>> Then why is it an option *in alternative* to BIND? >> >> What do you mean '*in alternative*' ?? > > I mean when I build Samba

FreeBSD-12.1p6 IOCage thick jails on ZFS, samba-4.10.15: On Fri, July 10, 2020 02:29, Andrea Venturoli wrote: > On 2020-07-09 21:36, James B. Byrne via samba wrote: >> set_nt_acl_no_snum: fset_nt_acl returned NT_STATUS_INVALID_PARAMETER. >> ERROR(runtime): uncaught exception - (3221225485, 'An invalid parameter was >> passed to a service or function.') > > What

On 8/17/18 11:03 AM, Rowland Penny via samba wrote: > I know you say two IP ranges, but are you also thinking of two dns > domains ? No: one DNS domain. > If you are only going to have one dns domain, then it should work, you > will just have to create the required reverse zones and you will > probably be better off using Bind9 instead of the internal dns server. Why? I'm

Dear all, Could I use the tool "nsupdate" from the "dnsutils" package to update my zone/record in NSD ? http://docs.freebsd.org/doc/8.0-RELEASE/usr/share/doc/bind9/arm/man.nsupdate.html Thanks by advance.

On 2023-05-18 11:24 p.m., Rowland Penny via samba wrote: > On 19/05/2023 03:57, Steven Monai via samba wrote: >> To be concrete: What do you recommend should be the contents of the >> respective /etc/resolv.conf files in my test? > In resolv.conf, 'domain' and 'search' are mutually exclusive and the > last one wins, as you need 'search', I would

On 19/05/2023 03:57, Steven Monai via samba wrote: > Thanks for your reply. > > On 2023-05-18 12:29 a.m., Rowland Penny via samba wrote: > >> On 18/05/2023 04:31, Steven Monai via samba wrote: > >>> Successfully obtained Kerberos ticket to DNS/dc33.ttwo.ad.example.org >>> as DC34$ >> >> That's one misconfiguration you probably have there,

On Sat, July 11, 2020 04:32, Andrea Venturoli wrote: > On 2020-07-10 14:47, James B. Byrne wrote: >> FreeBSD-12.1p6 IOCage thick jails on ZFS, samba-4.10.15: > > Can you post the smb.conf of both DCs? > > Just out of curiosity, are you also using vfs_zfsacl? Yes. smb.confs DC1 and DC2: /zroot/iocage/jails/smb4-1a/root/usr/local/etc/smb4.conf [root at vhost04 ~ (master)]#

Hi I know that this has been addressed before but I couldn't find a solution. Summary: when attempting to write a dns record using nsupdate, nothing gets written to the zone due to the error: ; TSIG error with server: tsig verify failure Everything is working. We can login to the domain from the same client and we have sssd sending the dyndns update requests which also produce the same

I have a dc configured to use the samba internal dns service. The version of samba I am using is 4.10.15 packaged for FreeBSD. Its build options state this: BIND911 : off BIND916 : off , , , GSSAPI_BUILTIN : on GSSAPI_MIT : off LDAP : on . . . NSUPDATE : off My smb4.conf file contains this: [global] bind interfaces only = Yes dns forwarder =

Thank you for your patience. On Tue, June 30, 2020 16:48, Rowland penny wrote: > > From 'man smb.conf': > > nsupdate command (G) > > This option sets the path to the nsupdate command which is used for > GSS-TSIG dynamic DNS updates. > > Default: nsupdate command = /usr/bin/nsupdate -g > > dns update command (G) > > This

Hello. I've got a Samba server and I'd like it to be master browser and everything else except domain controller (the customers wants a workgroup, not a domain). Lately a Windows 2003 server was added to the net and then I guess it was removed. I keep getting messages like the following in the logs: > Apr 10 03:07:51 apocalypse nmbd[57552]: [2005/04/10 03:07:51, 0]

Hi Juan, I reply below but information requested by Rowland are still needed (or at least they will be helpful). 2016-03-22 8:44 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 22/03/16 05:24, Juan Garcia wrote: > >> Hi There, >> >> I have an odd issue with my samba4 infrastructure, I have two servers >> both replicating fine. >> DC1 passes all

On 8/17/18 11:58 AM, Rowland Penny via samba wrote: > That's a problem to start with, you really are better off with multiple > DC's. I personally would use at least three in your case, one main DC > and another DC in each site. This would ensure that you would have > some fall back if a DC died. Let's for a moment assume: _ this is a test setup; _ my network is very

I understand that the difference between "server" and "domain" mode is that in "domain" mode"Samba fully uses the domain capabilities. He behaves like another NT Server or Windows 9x do by participating in domain trust relationships." Could someone please explain me 1. What is it exaclty that "domain" mode does, that "server" mode

Hi There, I have an odd issue with my samba4 infrastructure, I have two servers both replicating fine. DC1 passes all tests documented here: https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller Except the following test: # kinit administrator # kinit: krb5_get_init_creds: Client (administrator at DOMAIN.NAME.COM.AU) unknown And in the logs I have found the