[Samba] smbclient ends in NT_STATUS_CONNECTION_REFUSED error

[Rowland Penny]

On Mon, 12 Jun 2017 14:01:45 +0200
"basti.mueller31--- via samba" <samba at lists.samba.org> wrote:



> >/etc/hosts
> 127.0.0.1       localhost server.example.com  server

I suggest you change /etc/hosts to this:

127.0.0.1 localhost
<your DCs ipaddress> server.example.com server

> zones:
> ---
> named.conf.local
> zone "hiperscan.com" {
>         type master;
>         file "/etc/bind/hiperscan.com.db";
>         notify no;
>         allow-update { localhost; };
> };
> 
> zone "15.168.192.in-addr.arpa" {
>         type master;
>         file "/etc/bind/192.168.15.db";
>         allow-update { localhost; };
> };
> ---

You should remove the above, by having them in your Bind conf files you
are using FLATFILES instead of BIND_DLZ

> named.conf.options:
> options {
>         directory "/var/cache/bind";
>         forwarders {
>                 193.189.250.99;
>                 192.168.15.1;
>         };
> 
>         auth-nxdomain no;    # conform to RFC1035
>         listen-on-v6 { any; };
> };
> 

This is my named.conf.options:

options {
        directory "/var/cache/bind";
        version "0.0.7";
        notify no;
        empty-zones-enable no;
        allow-query { 127.0.0.1; 192.168.0.0/24; };
        allow-recursion { 192.168.0.0/24;  127.0.0.1/32; };
        forwarders { 8.8.8.8; };
        allow-transfer { none; };
        dnssec-validation no;
        dnssec-enable no;

        listen-on-v6 { none; };
        listen-on port 53 { 192.168.0.2; 127.0.0.1; };
        tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab";
};

Unless '192.189.250.99' and '192.168.15.1' are DNS servers outside your
AD domain, you should change them.

You also need a line similar to this:

include "/usr/local/samba/private/named.conf";

in /etc/bind/named.conf.local

NOTE: I self compile Samba, so the paths in your named conf files may
be different, probably '/var/lib/samba' instead of '/usr/local/samba'

Rowland