[Samba] Samba trying to connect to a non-existant DC for NTP?

[Rowland Penny]

On Thu, 15 Feb 2024 17:07:11 -0500
"James B. Byrne via samba" <samba at lists.samba.org> wrote:

> I found these:
> 
>  samba-ldbsearch --cross-ncs --show-binary   -H
> /var/db/samba4/private/sam.ldb -b 'DC=brockley,DC=harte-lyne,DC=ca' |
> grep smb4-1 mname                    : smb4-1.brockley.harte-lyne.ca
>         ns                       : smb4-1.brockley.harte-lyne.ca
>         ns                       : smb4-1.brockley.harte-lyne.ca
> dn:
> DC=smb4-1,DC=brockley.harte-lyne.ca,CN=MicrosoftDNS,DC=DomainDnsZones,DC=brockley,DC=harte-lyne,DC=ca
> name: smb4-1
> dc: smb4-1
> distinguishedName:
> DC=smb4-1,DC=brockley.harte-lyne.ca,CN=MicrosoftDNS,DC=DomainDnsZones,DC=brockley,DC=harte-lyne,DC=ca

The first one is simple and straight forward, you can remove it with
'samba-tool dns delete', where the usage is:

samba-tool dns delete <server> <zone> <name> <A|AAAA|PTR|CNAME|NS|MX|SRV|TXT> <data>

If running on a Samba DC <server> can be 127.0.0.1 or localhost or the
DCs hostname The <zone> and <name> can be found from the 'dn:', the
<name> is the first part 'DC=smb4-1' without the 'DC=' and the <zone>
is the second part 'DC=brockley.harte-lyne.ca', again without the
'DC='. The record type will be 'A' The <data> for an 'A' record is an
'ipv4_address_string', probably '192.168.18.161' from what have posted
earlier, but please check.

Which will give the command:

samba-tool dns delete 127.0.0.1 brockley.harte-lyne.ca smb4-1 A 192.168.18.161 -Uadministrator

The next can also be removed with samba-tool:

samba-tool spn delete <name>
Where <name> will be the part after 'servicePrincipalName: '
You will also probably have to add '-U administrator' at the end of the
command.

> servicePrincipalName: HOST/smb4-1c-testfmso.brockley.harte-lyne.ca
> servicePrincipalName:
> HOST/smb4-1c-testfmso.brockley.harte-lyne.ca/BROCKLEY
> servicePrincipalName:
> ldap/smb4-1c-testfmso.brockley.harte-lyne.ca/BROCKLEY
> servicePrincipalName:
> GC/smb4-1c-testfmso.brockley.harte-lyne.ca/brockley.harte-lyne.ca
> servicePrincipalName: ldap/smb4-1c-testfmso.brockley.harte-lyne.ca
> servicePrincipalName:
> HOST/smb4-1c-testfmso.brockley.harte-lyne.ca/brockley.harte-lyne.ca
> servicePrincipalName:
> ldap/smb4-1c-testfmso.brockley.harte-lyne.ca/brockley.harte-lyne.ca
> servicePrincipalName:
> RestrictedKrbHost/smb4-1c-testfmso.brockley.harte-lyne.ca
> servicePrincipalName:
> ldap/smb4-1c-testfmso.brockley.harte-lyne.ca/DomainDnsZones.brockley.harte-lyne.ca
> servicePrincipalName:
> ldap/smb4-1c-testfmso.brockley.harte-lyne.ca/ForestDnsZones.brockley.harte-lyne.ca
> 
> 
> How do I get rid of them?
> 

Rowland