[Samba] demote DC

[Andrey Repin]

Greetings, Fernando Rodriguez!

>>> VOLENDAM:
>>
>>> root at volendam:/home/newhang# ping
>>> cb1b21b6-e525-426d-a277-c86110644b38._msdcs.solid-optics.local
>>> ping: unknown host
>>> cb1b21b6-e525-426d-a277-c86110644b38._msdcs.solid-optics.local
>>
>>> root at volendam:/home/newhang# ping
>>> b8bbec55-2f48-47b5-b606-d22e318b7c1f._msdcs.solid-optics.local
>>> ping: unknown host
>>> b8bbec55-2f48-47b5-b606-d22e318b7c1f._msdcs.solid-optics.local
>>
>>> root at volendam:/home/newhang# ping
>>> 0799ccb2-20c6-4f32-999c-ddb7a48a0ed6._msdcs.solid-optics.local
>>> ping: unknown host
>>> 0799ccb2-20c6-4f32-999c-ddb7a48a0ed6._msdcs.solid-optics.local
>>> root at volendam:/home/newhang#
>>
>> This is quite easy. I wonder why noone see this yet. You use forbidden domain
>> suffix (.local). It is reserved for mDNS-type networks without a central
>> server. And of course, host names in your domain end up in mDNS resolver, and
>> gets rejected as unknown. I'm surprised your setup works at all in first place.
>> Change domain suffix and it'll work without a hitch.

> This is a private domain. Our internet domain is external.  I tought i 
> didn't matter the use of .local or .lan.

Well, as you can see, it matters... when you reuse reserved names for private
purposes.

> If this is the problem, is there any way to change the domain name 
> without the need of rejoin all the machines to the domain?

I've hit the same issue back in the days. I did change the suffix to .lan
afterward, but I can't recall, if I had to rejoin systems. Probably not.
Machine names are stored without suffix, to the best of my knowledge.


--
WBR,
Andrey Repin (anrdaemon at yandex.ru) 20.07.2014, <04:49>

Sorry for my terrible english...