[Samba] "failed to lookup DC info for domain over rpc" when joining samba4 domain

Tim lists at kiuni.de
Tue Mar 10 01:18:36 MDT 2015

Hey Richard,

first of all I personally think it is better to post logfiles in plain text on the list so that it keeps readable for later users. Just my two cents :-)

What I first saw in your smb.conf is that the netlogon share is named netlogin.

Beside this, I will send you a list of DNS entries I have under _msdcs later. Perhaps it is worth to compare.

Am 10. März 2015 00:19:53 MEZ, schrieb Richard Connon <richard at connon.me.uk>:
>On 09/03/2015 22:36, Rowland Penny wrote:
>> Hmm, everything looks ok and it shouldn't matter whether you use the 
>> standard 3.6 from debian or 4.1.17 from backports except for the fact
>> that 3.6 isn't just old, it is EOL , so you may have to rely on
>> backporting any security updates themselves.
>> I take it that the three nameservers in the clients resolv.conf are 
>> all DC's, if not, I suggest you remove any that aren't, could you
>> have a look here:
>>  https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server
>> Rowland
>Hi Rowland,
>I'm aware of 3.6's security status. I'm planning to count on debian 
>backporting fixes for now and move to 4.1 (or 4.2) if and when
>I have just tried, as an experiment, upgrading this failing client to 
>4.1.17 to no avail.
>The nameservers in resolv.conf are just forwarders. They forward to my 
>DCs for anything under ads.connon.me.uk.
>As an experiment I tried changing the resolv.conf on both the DC and
>client to contain just the DC for this site rather than my normal 
>recursive servers. Again, this didn't change the behaviour.
>I'm not familiar with the RPC protocol very much. Are there some tools
>can use to perform some test queries against this DC?
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba

More information about the samba mailing list