[Samba] named will not start after upgrade of CentOS

[Marco Coli]

Il 16/05/2018 02:52, me at tdiehl.org ha scritto:
> On Tue, 15 May 2018, Marco Coli via samba wrote:
> 
>>
>> I have the same problem on 3 different machines, different location,
>> different AD domains.
>> For 2 (after the problem occurred on the first one),being Virtual, I did
>> a snapshot before, so I was able to reverse the problem.
>>
>> sernet-samba-ad-4.8.1-9.el7.x86_64 on all 3. 2 of them are CentOs, the
>> third RHEL. Same behavior.
> 
> I am not sure if it will help but I would try turning up the logging on
> kerberos
> and see it that shows anything interesting. see
> https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End#Debugging_the_BIND9_DLZ_Module
> 
> for details.
> 
> You might also want to review
> https://wiki.samba.org/index.php/Setting_up_Samba_as_an_Active_Directory_Domain_Controller#Configuring_Kerberos.
> 
> Does Sernet use 2 separate copies of krb5.conf? If yes, are they symlinked?
> The Wiki page specifically says don't do that.
> 
> Are the permissions on krb5.conf set so that users other then root can
> read them. 644?
> 
> I wonder if samba actually uses both copies or just the one in /etc?
> 
> Regards,
> 


I did find the problem is originating with kerberos upgrade. If I
upgrade everything except kerberos rpm to 7.5, dns has no problem.

I will find with log examination where is the problem.

Thank you ALL for the help and suggestions!