[Samba] Samba, AD, 'short' name resolving...

Marco Gaiarin gaio at sv.lnf.it
Fri Jun 15 14:03:15 UTC 2018

Mandi! L.P.H. van Belle via samba
  In chel di` si favelave...

> But thats a wild guess, but if a dev knows any reply may help here. 
> We cant know everything..  

Sorry, i was busy on other things...

I repeat: TSIG errors are ''sporadically'' and happen mostly on a DC
that have in these days some connectivity troubles.

My original post on this subject was an excuse, to simply try to

a) why client register itself on ''far DC'' and not on the DC in the
 site; Louis, you reply me on that, but that policy you point me are
still a bit mysterious...

b) i've noted that dns registration in my ''old'' DNS/DHCP setup tend
 to ''diverge'' from the AD DNS registration.

I've done some test now, and seems that b) was caused by a) and the
connectivity trouble; now all registration seems coherent...

Anyway... yes, i've no reverse zone (they are on my old setup), and mu
bind cnfiguration is simple:

 root at vdcsv1:~# less /etc/bind/named.conf.options | grep -v '//' | grep -v '^[[:space:]]*$'
 acl "trusted" {
 options {
	directory "/var/cache/bind";
	forwarders {;;
	forward only;
	allow-query { "any"; };
	allow-recursion { "trusted"; };
	allow-query-cache { "trusted"; };
	allow-notify { "none"; };
	auth-nxdomain yes;    # conform to RFC1035
	listen-on-v6 { any; };
	notify no;
	empty-zones-enable no;
	tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";

Thanks and happy WE!!!

dott. Marco Gaiarin				        GNUPG Key ID: 240A3D66
  Associazione ``La Nostra Famiglia''          http://www.lanostrafamiglia.it/
  Polo FVG   -   Via della Bontà, 7 - 33078   -   San Vito al Tagliamento (PN)
  marco.gaiarin(at)lanostrafamiglia.it   t +39-0434-842711   f +39-0434-842797

	(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)

More information about the samba mailing list