[Samba] Cannot contact any KDC for requested realm

[Rowland Penny]

On Tue, 24 Jul 2018 23:22:52 +0200
Anton Blau via samba <samba at lists.samba.org> wrote:

> Am 23.07.2018 um 23:27 schrieb Rowland Penny via samba:
> > On Mon, 23 Jul 2018 23:09:58 +0200
> > Anton Blau via samba <samba at lists.samba.org> wrote:
> >
> >> Am 19.07.2018 um 17:50 schrieb Rowland Penny via samba:
> >>> On Thu, 19 Jul 2018 17:33:46 +0200
> >>> Anton Blau via samba <samba at lists.samba.org> wrote:
> >>>
> >>>> Am 19.07.2018 um 10:03 schrieb Rowland Penny via samba:
> >>>>> On Wed, 18 Jul 2018 23:21:41 +0200
> >>>>> Anton Blau via samba <samba at lists.samba.org> wrote:
> >>>>>
> >>>>>> Am 18.07.2018 um 14:17 schrieb Rowland Penny via samba:
> >>>>>>
> >>>>>
> > Is there some reason why you are using an EOL version of Samba ?
> > Not saying this is your problem, but you stand more chance of
> > getting help if you use a much more recent version of Samba.
> > As you seem to be using Debian, you can a very recent version here:
> >
> > http://apt.van-belle.nl/
> O. K. I updated sambe with theese packages.
> 
> > You know seem to be able to provision Samba correctly, but is the OS
> > set up correctly to use it ?
> >
> > can you post:
> > /etc/hosts
> 127.0.0.1 localhost
> 127.0.1.1 domain-controller

Remove the 127.0.1.1 line and dnsmasq if it is installed

> 
> #Required for IPv6 capable hosts
> ::1 ip6-localhost ip6-loopback
> fe00::0 ip6-localnet
> ff00::0 ip6-mcastprefix
> ff02::1 ip6-allnodes
> ff02::2 ip6-allrouters
> ff02::3 ip6-allhosts
> # --- BEGIN PVE ---
> 192.168.1.221 domcon.duck.tld domcon
> # --- END PVE ---
> 
> > /etc/hostname
> domcon
> 
> > /etc/resolv.conf
> # --- BEGIN PVE ---
> search duck
> nameserver 192.168.1.254

if the DC ipaddress is 192.168.1.221 as show above, the name server
should be '192.168.1.221' not '192.168.1.254'

> # --- END PVE ---
> 
> > /etc/krb5.conf
> [libdefaults]
>          default_realm = DOMCON.DUCK.TLD
>          dns_lookup_realm = false
>          dns_lookup_kdc = true
> 
> > /etc/samba/smb.conf
> # Global parameters
> [global]
>          workgroup = DUCK.TLD
>          realm = DOMCON.DUCK.TLD
>          netbios name = DOMCON
>          server role = active directory domain controller
>          dns forwarder = 192.168.1.254
>          idmap_ldb:use rfc2307 = yes
> 
> [netlogon]
>          path = /var/lib/samba/sysvol/domcon.duck.tld/scripts
>          read only = No
> 
> [sysvol]
>          path = /var/lib/samba/sysvol
>          read only = No
> 
> 
> /var/log/syslog:
> 
> Jul 24 21:17:21 domcon samba[2339]:   samba version 4.5.12-Debian
> started. Jul 24 21:17:21 domcon samba[2339]:   Copyright Andrew
> Tridgell and the Samba Team 1992-2016
> Jul 24 21:17:21 domcon samba[2340]: [2018/07/24 21:17:21.205327,  0] 
> ../source4/smbd/server.c:479(binary_smbd_main)
> Jul 24 21:17:21 domcon samba[2340]:   samba: using 'standard' process
> model Jul 24 21:17:21 domcon samba[2340]: [2018/07/24
> 21:17:21.219655,  0] ../lib/util/become_daemon.c:124(daemon_ready)
> Jul 24 21:17:21 domcon samba[2340]:   STATUS=daemon 'samba' finished 
> starting up and ready to serve connections
> Jul 24 21:17:21 domcon winbindd[2384]: [2018/07/24 21:17:21.317117,
> 0] ../source3/winbindd/winbindd_cache.c:3244(initialize_winbindd_cache)
> Jul 24 21:17:21 domcon winbindd[2384]:   initialize_winbindd_cache: 
> clearing cache and re-creating with version number 2
> Jul 24 21:17:21 domcon winbindd[2384]: [2018/07/24 21:17:21.502653,
> 0] ../lib/util/become_daemon.c:124(daemon_ready)
> Jul 24 21:17:21 domcon winbindd[2384]:   STATUS=daemon 'winbindd' 
> finished starting up and ready to serve connections
> Jul 24 21:17:21 domcon smbd[2372]: [2018/07/24 21:17:21.606980,  0] 
> ../lib/util/become_daemon.c:124(daemon_ready)
> Jul 24 21:17:21 domcon smbd[2372]:   STATUS=daemon 'smbd' finished 
> starting up and ready to serve connections
> Jul 24 21:17:21 domcon samba[2382]: [2018/07/24 21:17:21.994630,  0] 
> ../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
> Jul 24 21:17:21 domcon samba[2382]:   /usr/sbin/samba_dnsupdate:
> ERROR: Record already exists
> Jul 24 21:17:22 domcon samba[2382]: [2018/07/24 21:17:22.003849,  0] 
> ../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
> Jul 24 21:17:22 domcon samba[2382]:   /usr/sbin/samba_dnsupdate:
> ERROR: Record already exists
> Jul 24 21:17:22 domcon samba[2382]: [2018/07/24 21:17:22.014071,  0] 
> ../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
> Jul 24 21:17:22 domcon samba[2382]:   /usr/sbin/samba_dnsupdate:
> ERROR: Record already exists
> Jul 24 21:17:22 domcon samba[2382]: [2018/07/24 21:17:22.023499,  0] 
> ../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
> Jul 24 21:17:22 domcon samba[2382]:   /usr/sbin/samba_dnsupdate:
> ERROR: Record already exists
> Jul 24 21:17:22 domcon samba[2382]: [2018/07/24 21:17:22.033289,  0] 
> ../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
> Jul 24 21:17:22 domcon samba[2382]:   /usr/sbin/samba_dnsupdate:
> ERROR: Record already exists
> Jul 24 21:17:22 domcon samba[2382]: [2018/07/24 21:17:22.043316,  0] 
> ../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
> Jul 24 21:17:22 domcon samba[2382]:   /usr/sbin/samba_dnsupdate:
> ERROR: Record already exists
> Jul 24 21:17:22 domcon samba[2382]: [2018/07/24 21:17:22.050817,  0] 
> ../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
> Jul 24 21:17:22 domcon samba[2382]:   /usr/sbin/samba_dnsupdate:
> ERROR: Record already exists

You do not need to worry about those errors.

Rowland