[Samba] new DC preparation, nslookup and dig errors

[Paul Littlefield]

On 25/09/2023 13:09, Rowland Penny via samba wrote:
> Are you using Bind9 ?
> If you are, have you got 'allow-recursion' set ?


No, Samba internal DNS is being used.

Here is the config and /etc/resolv.conf from DC3 (192.168.0.218) ...


root at dc3.mydomain.com ~ $ cat /etc/samba/smb.conf
# Global parameters
[global]
	netbios name = DC3
	realm = mydomain.com
	server role = active directory domain controller
	workgroup = MYDOMAIN
	dns forwarder = 8.8.8.8 208.67.220.220
[netlogon]
	path = /var/lib/samba/sysvol/mydomain.com/scripts
	read only = No
[sysvol]
	path = /var/lib/samba/sysvol
	read only = No


root at dc3.mydomain.com ~ $ cat /etc/resolv.conf
search mydomain.com
nameserver 130.130.0.218
nameserver 130.130.0.219
options timeout:2
options attempts:3
options rotate


If I run that test on either 'DC3' or 'DC4' it works as expected ...


root at dc3.mydomain.com ~ $ nslookup
> set type=SRV
> _ldap._tcp.mydomain.com           
Server:		130.130.0.218
Address:	130.130.0.218#53
_ldap._tcp.mydomain.com	service = 0 100 389 dc3.mydomain.com.
_ldap._tcp.mydomain.com	service = 0 100 389 dc4.mydomain.com.
> exit



(I don't want to continue and try to join when there is this error :)


Thanks.

-- 

Paul Littlefield