[Samba] named will not start after upgrade of CentOS

[me at tdiehl.org]

On Tue, 15 May 2018, Marco Coli via samba wrote:

>
> I have the same problem on 3 different machines, different location,
> different AD domains.
> For 2 (after the problem occurred on the first one),being Virtual, I did
> a snapshot before, so I was able to reverse the problem.
>
> sernet-samba-ad-4.8.1-9.el7.x86_64 on all 3. 2 of them are CentOs, the
> third RHEL. Same behavior.

I am not sure if it will help but I would try turning up the logging on kerberos
and see it that shows anything interesting. see 
https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End#Debugging_the_BIND9_DLZ_Module
for details.

You might also want to review 
https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Configuring_Kerberos.
Does Sernet use 2 separate copies of krb5.conf? If yes, are they symlinked?
The Wiki page specifically says don't do that.

Are the permissions on krb5.conf set so that users other then root can
read them. 644?

I wonder if samba actually uses both copies or just the one in /etc?

Regards,

-- 
Tom			me at tdiehl.org