[Samba] Samba4 ClassicUpgrade post-migration issues

[Rowland Penny]

On 18/06/14 22:30, Rowland Penny wrote:
> On 18/06/14 22:08, Benjamin Arntzen wrote:
>> Nothing that jumps out at me.
>>
>> My primary concern right now is that the internal DNS server returns 
>> %h.ad.digipen.edu instead of the real hostname. Even this fails:
>>
>> dpadmin at samba4-dev0:~$ ping samba4-dev0.ad.digipen.edu
>> ping: unknown host samba4-dev0.ad.digipen.edu
>>
>> ~ B
>>
>> On 06/18/2014 01:52 PM, Rowland Penny wrote:
>>> On 18/06/14 21:38, Benjamin Arntzen wrote:
>>>> Nothing :( It claims to have started successfully, but all my 
>>>> problems still persist.
>>>>
>>>> ~ B
>>>>
>>>> On 06/18/2014 12:47 PM, Rowland Penny wrote:
>>>>> On 18/06/14 20:14, Benjamin Arntzen wrote:
>>>>>> Done all suggestions, no change detected.
>>>>>>
>>>>>> And nope, no DNSmasq.
>>>>>>
>>>>>> On 06/18/2014 12:07 PM, Rowland Penny wrote:
>>>>>>> On 18/06/14 19:59, Benjamin Arntzen wrote:
>>>>>>>> Hi Rowland,
>>>>>>>>
>>>>>>>>
>>>>>>>> On 06/18/2014 11:49 AM, Rowland Penny wrote:
>>>>>>>>> On 18/06/14 19:28, Benjamin Arntzen wrote:
>>>>>>>>>> Hi there,
>>>>>>>>>>
>>>>>>>>>> I've successfully migrated an extremely large Samba3 domain 
>>>>>>>>>> to Samba4.
>>>>>>>>>> The platforms involved:
>>>>>>>>>> Samba files (/var/lib/samba) copied from a Debian 6-based 
>>>>>>>>>> Samba3 PDC with an LDAP backend
>>>>>>>>>> Debian 7 with Samba4 installed from backports, with slapd 
>>>>>>>>>> installed locally (and now disabled).
>>>>>>>>>>
>>>>>>>>>> However, a number of things appear to be wrong:
>>>>>>>>>>
>>>>>>>>>> dpadmin at samba4-dev0:~$ host -t SRV _ldap._tcp.ad.digipen.edu
>>>>>>>>>> _ldap._tcp.ad.digipen.edu has SRV record 0 100 389 
>>>>>>>>>> %h.ad.digipen.edu.
>>>>>>>>>>
>>>>>>>>>> dpadmin at samba4-dev0:~$ sudo service samba restart
>>>>>>>>>> [ ok ] Stopping NetBIOS name server: nmbd.
>>>>>>>>>> [ ok ] Stopping SMB/CIFS daemon: smbd.
>>>>>>>>>> [....] Stopping Samba AD DC daemon: sambastart-stop-daemon: 
>>>>>>>>>> *warning: failed to kill 10121: No such process*
>>>>>>>>>> . ok
>>>>>>>>>> [ ok ] Starting Samba AD DC daemon: samba.
>>>>>>>>>>
>>>>>>>>>> dpadmin at samba4-dev0:~$ kinit administrator at AD.DIGIPEN.EDU
>>>>>>>>>> kinit: Cannot contact any KDC for realm 'AD.DIGIPEN.EDU' 
>>>>>>>>>> while getting initial credentials
>>>>>>>>>>
>>>>>>>>>> This is the current contents of my /etc/samba/smb.conf:
>>>>>>>>>> ####SOF####
>>>>>>>>>> # Global parameters
>>>>>>>>>> [global]
>>>>>>>>>>         workgroup = DIGIPEN.EDU
>>>>>>>>>>         realm = ad.digipen.edu
>>>>>>>>>>         netbios name = %H
>>>>>>>>>>         server role = active directory domain controller
>>>>>>>>>>         idmap_ldb:use rfc2307 = yes
>>>>>>>>>>         # Only allow signed updates
>>>>>>>>>>         #allow dns updates = signed
>>>>>>>>>>
>>>>>>>>>>         # If recursive queries = yes is set, the following is 
>>>>>>>>>> also needed
>>>>>>>>>>         dns forwarder = 204.174.42.68
>>>>>>>>>>
>>>>>>>>>> [netlogon]
>>>>>>>>>>         path = /var/lib/samba/sysvol/ad.digipen.edu/scripts
>>>>>>>>>>         read only = No
>>>>>>>>>>
>>>>>>>>>> [sysvol]
>>>>>>>>>>         path = /var/lib/samba/sysvol
>>>>>>>>>>         read only = No
>>>>>>>>>>
>>>>>>>>>> ####EOF####
>>>>>>>>>>
>>>>>>>>>> How do I get Samba to start returning valid values for DNS?
>>>>>>>>>> ~ Benjamin
>>>>>>>>> Hi, what's in /etc/resolv.conf , /etc/krb5.conf , 
>>>>>>>>> /etc/hostname and /etc/hosts
>>>>>>>>>
>>>>>>>>> Rowland
>>>>>>>>>
>>>>>>>>
>>>>>>>> dpadmin at samba4-dev0:~$ cat /etc/resolv.conf
>>>>>>>> domain ad.digipen.edu
>>>>>>>> search ad.digipen.edu
>>>>>>>> nameserver 10.1.20.137
>>>>>>>> #nameserver 204.174.42.68
>>>>>>>> #nameserver 204.174.42.88
>>>>>>>
>>>>>>> I take it 10.1.20.137 is the ipaddress of the samba4 server, if 
>>>>>>> so, this is ok.
>>>>>>>
>>>>>>>> dpadmin at samba4-dev0:~$ cat /etc/krb5.conf
>>>>>>>> [libdefaults]
>>>>>>>>         default_realm = ad.digipen.edu
>>>>>>>>         dns_lookup_realm = false
>>>>>>>>         dns_lookup_kdc = true
>>>>>>>
>>>>>>> Change the lowercase 'ad.digipen.edu' to uppercase 'AD.DIGIPEN.EDU'
>>>>>>>
>>>>>>>> dpadmin at samba4-dev0:~$ cat /etc/hostname
>>>>>>>> samba4-dev0
>>>>>>>
>>>>>>> OK
>>>>>>>
>>>>>>>> dpadmin at samba4-dev0:~$ cat /etc/hosts
>>>>>>>> 127.0.0.1    localhost
>>>>>>>> 127.0.1.1    samba4-dev0.digipen.edu    samba4-dev0
>>>>>>>>
>>>>>>>> # The following lines are desirable for IPv6 capable hosts
>>>>>>>> ::1     localhost ip6-localhost ip6-loopback
>>>>>>>> ff02::1 ip6-allnodes
>>>>>>>> ff02::2 ip6-allrouters
>>>>>>>>
>>>>>>> This should be ok, but you could try changing 127.0.1.1 to 
>>>>>>> 10.1.20.137
>>>>>>>
>>>>>>> One last thought, dnsmasq isn't running in any form is it ?
>>>>>>>
>>>>>>> Rowland
>>>>>>>
>>>>>>>
>>>>>>
>>>>> ok, I totally missed this in your original post:
>>>>> sudo service samba restart
>>>>>
>>>>> try
>>>>> sudo service smbd stop
>>>>> sudo service nmbd stop
>>>>> sudo service samba-ad-dc start
>>>>>
>>>>> The last one is what starts the samba AD DC on my debian 7 server.
>>>>>
>>>>> Rowland
>>>>>
>>>>
>>> Is there anything in the logs ?
>>>
>>> Rowland
>>>
>>
> Just how did you do the upgrade and what is in smb.conf
>
> Rowland
>
>
OK, replying to myself, just after my last post, I remembered that the 
smb.conf was in the first post, so I had a look at it properly and found 
this:

         workgroup = DIGIPEN.EDU
         realm = ad.digipen.edu
         netbios name = %H

The workgroup shouldn't (as far as I am aware) have a dot in it, also 
how did the netbios name get set to '%H' ?

So I go back to the remaining question, how did you do the upgrade?

Rowland