[Samba] missing dns records? _ldaps._tcp ?
Rowland Penny
rpenny at samba.org
Thu Aug 25 08:47:38 UTC 2016
On Thu, 25 Aug 2016 10:22:36 +0200
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> Ok thank you guys for you input.
>
>
>
>
>
> So we need tot add something here :
>
> cat /var/lib/samba/private/dns_update_list | grep ldap
>
> ${IF_RWDC}SRV
> _ldap._tcp.${DNSDOMAIN} ${HOSTNAME} 389
>
> ${IF_RWDC}SRV
> _ldap._tcp.dc._msdcs.${DNSDOMAIN} ${HOSTNAME} 389
>
> ${IF_RWDC}SRV
> _ldap._tcp.${DOMAINGUID}.domains._msdcs.${DNSFOREST} ${HOSTNAME} 389
>
> ${IF_DC}SRV
> _ldap._tcp.${SITE}._sites.${DNSDOMAIN}
> ${HOSTNAME} 389
>
> ${IF_DC}SRV
> _ldap._tcp.${SITE}._sites.dc._msdcs.${DNSDOMAIN} ${HOSTNAME} 389
>
> ${IF_PDC}SRV
> _ldap._tcp.pdc._msdcs.${DNSDOMAIN} ${HOSTNAME} 389
>
> ${IF_RWGC}SRV
> _ldap._tcp.gc._msdcs.${DNSFOREST} ${HOSTNAME} 3268
>
> ${IF_GC}SRV
> _ldap._tcp.${SITE}._sites.gc._msdcs.${DNSFOREST} ${HOSTNAME} 3268
>
> ${IF_RWDNS_DOMAIN}SRV
> _ldap._tcp.DomainDnsZones.${DNSDOMAIN} ${HOSTNAME} 389
>
> ${IF_DNS_DOMAIN}SRV
> _ldap._tcp.${SITE}._sites.DomainDnsZones.${DNSDOMAIN} ${HOSTNAME} 389
>
> ${IF_RWDNS_FOREST}SRV
> _ldap._tcp.ForestDnsZones.${DNSFOREST} ${HOSTNAME} 389
>
> ${IF_DNS_FOREST}SRV
> _ldap._tcp.${SITE}._sites.ForestDnsZones.${DNSFOREST} ${HOSTNAME} 389
>
>
>
>
>
> Ive added the SRV records now as followed, and my squid groups not
> repond better :-) great.
>
> Use these commands, handy for others..
>
> samba-tool dns add DC1.fqdn dns_zone _ldaps._tcp SRV 'dc1.dns_zone
> 636 0 100'
>
> samba-tool dns add DC1.fqdn dns_zone _ldaps._tcp SRV 'dc2.dns_zone
> 636 0 100'
>
>
>
> now i do believe, that this needs by default in the samba installs,
> if ssl/tls is enabled by default.
>
>
>
>
>
> Greetz,
>
>
>
> Louis
>
>
>
>
>
>
>
>
>
>
>
> > -----Oorspronkelijk bericht-----
>
> > Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland
> > Penny via
>
> > samba
>
> > Verzonden: woensdag 24 augustus 2016 18:10
>
> > Aan: samba at lists.samba.org
>
> > Onderwerp: Re: [Samba] missing dns records? _ldaps._tcp ?
>
> >
>
> > On Wed, 24 Aug 2016 11:56:06 -0400
>
> > lingpanda101--- via samba <samba at lists.samba.org> wrote:
>
> >
>
> > >
>
> > > I know you asked recently but I do have them from a long ago
>
> > > provisioned DC as reference.
>
> > >
>
> > >
>
> >
>
> > If you have them, I think you may be the only one who does ;-)
>
> >
>
> > A bit of searching doesn't turn up anything about _ldaps records,
> > just
>
> > _ldap.
>
> >
>
> > Rowland
>
> >
>
> >
>
> > --
>
> > To unsubscribe from this list go to the following URL and read the
>
> > instructions: https://lists.samba.org/mailman/options/samba
>
>
>
No, I think you need to fix squid or at the very least, ask squid where
they got _ldaps from, because it doesn't seem to exist on any AD DC.
Rowland
More information about the samba
mailing list