[Samba] does samba need heimdal or something else

David Bear dwbear75 at gmail.com
Wed Mar 26 19:51:09 MDT 2014

I'm trying to understand what is definitive about samba 4.x as an AD DC.

First, does samba need to have heimdal or mit kerb installed? Following the
how to at


I don't see that it does.

After getting samba to work in its plain defaults, I then proceeded to
configure it to use bind9 as shown in the bind howto -

But I then found I was getting errors running samba_dnsupdate --verbose

so then I installed hiemdal and configured the /etc/krb5.conf to have the
realm name of may samba domain.

This probably was superfluous as I still go the same error.

So I investigated further and modified /etc/resolv.conf so that in pointed
to the host I'm workinging on -- where I installed bind.

Then running samba_dnsupdate --verbose --all I get lots of errors the
common one is

_gc._tcp.bearfam.org.   900     IN      SRV     0 100 3268 b11.bearfam.org.

; Communication with failed: operation canceled
; Communication with failed: unexpected error
could not talk to any default name server
Failed nsupdate: 1
Calling nsupdate for SRV _gc._tcp.default-first-site-name._sites.bearfam.org
b11.bearfam.org 3268

So I conclude my first error was a failure to get /etc/resolv.conf correct.

What what do I do about the 'operation canceled' message ? Is samba still
unable to talk wtih bind? do I still need some kind of config for heimdal ?

The bind migration guide mentions running kinit and getting admin tokens
for the domain -- but I'm still wondering about the requirement for heimdal

Please advise.

David Bear
mobile: (602) 903-6476

More information about the samba mailing list