[Samba] port 135 - NT_STATUS_CONNECTION_REFUSED

[Bob of Donelson Trophy]

I have two DC's running Samba 4.5.0 and the "dtdc03" log.samba is
showing the following: 

root at dtdc03:~# tail -f /usr/local/samba/var/log.samba
[2016/12/01 10:14:39.167794,  0]
../source4/librpc/rpc/dcerpc_sock.c:245(continue_ip_open_socket)
  Failed to connect host 192.168.16.50
(aa03011a-94c2-4c52-bc60-6fd2f75d35e5._msdcs.dtshrm.dt) on port 135 -
NT_STATUS_CONNECTION_REFUSED.
[2016/12/01 10:14:39.212551,  0]
../source4/librpc/rpc/dcerpc_sock.c:63(continue_socket_connect)
  Failed to connect host 192.168.16.50 on port 135 -
NT_STATUS_CONNECTION_REFUSED
[2016/12/01 10:14:39.212757,  0]
../source4/librpc/rpc/dcerpc_sock.c:245(continue_ip_open_socket)
  Failed to connect host 192.168.16.50
(aa03011a-94c2-4c52-bc60-6fd2f75d35e5._msdcs.dtshrm.dt) on port 135 -
NT_STATUS_CONNECTION_REFUSED.
[2016/12/01 10:14:39.258017,  0]
../source4/librpc/rpc/dcerpc_sock.c:63(continue_socket_connect)
  Failed to connect host 192.168.16.50 on port 135 -
NT_STATUS_CONNECTION_REFUSED
[2016/12/01 10:14:39.258234,  0]
../source4/librpc/rpc/dcerpc_sock.c:245(continue_ip_open_socket)
  Failed to connect host 192.168.16.50
(aa03011a-94c2-4c52-bc60-6fd2f75d35e5._msdcs.dtshrm.dt) on port 135 -
NT_STATUS_CONNECTION_REFUSED. 

So, I found the "Verifying_and_Creating_a_DC_DNS_Record" page of the
wiki and ran: 

root at dtdc03:~# ldbsearch -H /usr/local/samba/private/sam.ldb
'(invocationId=*)' --cross-ncs objectguid
# record 1
dn: CN=NTDS
Settings,CN=DTDC03,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dtshrm,DC=dt
objectGUID: d3298cdc-aed1-48e6-b8fc-f3cdb80b1066

# record 2
dn: CN=NTDS
Settings,CN=DTDC04,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=dtshrm,DC=dt
objectGUID: aa03011a-94c2-4c52-bc60-6fd2f75d35e5

# returned 2 records
# 2 entries
# 0 referrals 

And then ran: 

root at dtdc03:~# host -t CNAME
aa03011a-94c2-4c52-bc60-6fd2f75d35e5._msdcs.dtshrm.dt.
aa03011a-94c2-4c52-bc60-6fd2f75d35e5._msdcs.dtshrm.dt is an alias for
dtdc04.dtshrm.dt. 

The objectGUID string matches. How do I correct this log entry and
resolve the "NT_STATUS_CONNECTION_REFUSED?

-- 
_______________________________

Bob Wooden of Donelson Trophy

615.885.2846
www.donelsontrophy.com [1]

"Everyone deserves an award!!"
 

Links:
------
[1] http://www.donelsontrophy.com