[Samba] migrating NT-style domain SID-error

[Rowland Penny]

On Mon, 14 May 2018 20:29:18 +0200
Stefan Kania <stefan at kania-online.de> wrote:

> Lt's go for it :-)
> 
> Am 14.05.2018 um 17:59 schrieb Rowland Penny via samba:
> > OK, lets start with the obvious things, can you post the contents
> > of: /etc/resolv.conf
> ------------
> nameserver 192.168.224.4
> search example.net
> ------------

> That's it :-) I hope we can find the problem.
> 
> Stefan

The only thing I can comment on is, I would have expected more
in /etc/bind/named.conf.options, mine is:

 options {
        directory "/var/cache/bind";
        version "0.0.7";
        forwarders { 8.8.8.8; 8.8.4.4; };
        dnssec-validation no;
        auth-nxdomain yes;    # conform to RFC1035 =no
        listen-on-v6 { none; };
        listen-on port 53 { 192.168.0.6; 127.0.0.1; };
        notify no;
        empty-zones-enable no;
        allow-query { 192.168.0.0/24; 127.0.0.1/32; };
        allow-recursion {  192.168.0.0/24; 127.0.0.1/32; };
        tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
};

Every thing else looks okay.

Have you checked if apparmor is running and possibly blocking things
Have you checked AD with samba-tool dbcheck

Rowland