[Samba] error connecting to Samba4 AD from the Windows DNS client

Wed Jan 25 15:37:04 UTC 2017

----- Original Message -----

| Hi Felipe,

| Am 25.01.2017 um 14:16 schrieb Felipe_G0NZÁLEZ_SANTIAG0 via samba:
| > I provisioned a server with Samba4.3 from repo ubuntu16.04.
| > I tested some things, but I can NOT connect to my Samba DC from the Windows
| > DNS client.
| > ADUC, AD Sites and services, and AD Domain & Trusts, connects Ok.
| > But DNS [" Acces is Denied "] does not connect to the Samba4 DC.

| * Which account do you use? The domain administrator?
yes, I use the user 'Administrator'. But also I tried with other user I created. 

| * Anything appears in the logs when it fails? Increase log level, if
| necessary.
Well, I don't know if this is useful, but only I see is this in the /var/log/syslog file: 
Jan 25 01:15:08 ubuntus samba[27351]: [2017/01/25 01:15:08.780106, 0] ../source4/dsdb/dns/dns_update.c:294(dnsupdate_nameupdate_done) 
Jan 25 01:15:08 ubuntus samba[27351]: ../source4/dsdb/dns/dns_update.c:294: Failed DNS update - NT_STATUS_IO_TIMEOUT 

| * What is your DNS back end?
I am using Bind9_DLZ. 

OTHER problem I'm having is that I can't authenticate proftpd service against my Samba4 AD, however I installed a Windows Server AD and then this works perfectly. So I authenticated Okay against Windows AD. 

In my Samba4.3 AD everythings work fine 'apparently', in fact I joined a Windows client to my domain. 
#samba-tool processes returns this: 
root at ubuntus:~# samba-tool processes 
Service: PID 
----------------------------- 
dnsupdate 1572 
cldap_server 1565 
rpc_server 1560 
nbt_server 1561 
winbind_server 1570 
kdc_server 1566 
notify-daemon 1609 
ldap_server 1563 
ldap_server 1563 
kccsrv 1571 
samba 0 

Any idea? 

| Regards,
| Marc

La @universidad_uci es Fidel. Los jóvenes no fallaremos.
#HastaSiempreComandante
#HastalaVictoriaSiempre