[Samba] After joining domain, Samba uses the workgroup name, not the FQDN when running the net ads command

[Rowland Penny]

On 01/12/15 16:36, Jonathan S. Fisher wrote:
> Checked with the network guy... yes, the main DNS is indeed dnsmasq. 
> He has a delegation though, so any query for WINDOWS.corp.XXX.com 
> <http://WINDOWS.corp.XXX.com> winds up going to to the correct place:

Why, in your deity's name, why?????

>
> domain=/windows.corp.XXX.com/192.168.127.141 
> <http://windows.corp.XXX.com/192.168.127.141>
> domain=/windows.corp.XXX.com/192.168.112.4 
> <http://windows.corp.XXX.com/192.168.112.4>
>
> The DC's (192.168.127.141, 192.168.112.4) are indeed running DNS (I 
> can dig at them). Would it just be easier to make this host have a 
> static IP? If so, what settings does samba need for DNS?
>
> Here's the other files as requested:
>
> /etc/resolv.conf
> # Dynamic resolv.conf(5) file for glibc resolver(3) generated by 
> resolvconf(8)
> #     DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
> nameserver 192.168.127.129

Replace '192.168.127.129' with '192.168.127.141' # i.e. one of your DCs

Mind you, until you get 'hostname -f' to return your FQDN, it will not 
work correctly.

Rowland

> search windows.corp.xxx.com <http://windows.corp.xxx.com>
>
> /etc/krb5.conf
> [libdefaults]
> default_realm = WINDOWS.CORP.XXX.COM <http://WINDOWS.CORP.XXX.COM>
>
> /etc/samba/smb.conf
> [global]
> netbios name=freeradius
> security=ADS
> workgroup=WINDOWS
> realm=WINDOWS.CORP.XXX.COM <http://WINDOWS.CORP.XXX.COM>
> local master=no
>
> log file=/var/log/samba/%m.log
> log level=3
>
> dedicated keytab file=/etc/krb5.keytab
> kerberos method=secrets and keytab
> winbind refresh tickets=yes
>
> winbind trusted domains only=no
> winbind enum users=yes
> winbind enum groups=yes
> winbind nested groups=yes
>
> load printers=no
> template shell=/bin/false
>
> idmap config WINDOWS:backend=autorid
> idmap config WINDOWS:range=10000-99999
>