[Samba] GPO infrastructure? -> 4.8.x to 4.9.x

[L.P.H. van Belle]

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Stefan G. Weichinger via samba
> Verzonden: vrijdag 12 juli 2019 10:24
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] GPO infrastructure? -> 4.8.x to 4.9.x
> 
> Am 10.07.19 um 08:40 schrieb Stefan G. Weichinger via samba:
> 
> > more of this:
> > 
> > Jul 10 08:16:36 pre01svdeb02 samba[25451]: task[dnsupdate][25451]:
> > [2019/07/10 08:16:36.662971,  0]
> > ../source4/dsdb/dns/dns_update.c:353(dnsupdate_spnupdate_done)
> > Jul 10 08:16:36 pre01svdeb02 samba[25451]: task[dnsupdate][25451]:
> > ../source4/dsdb/dns/dns_update.c:353: Failed SPN update - 
> with error code 1
> > Jul 10 08:26:36 pre01svdeb02 samba[25451]: task[dnsupdate][25451]:
> > [2019/07/10 08:26:36.544214,  0]
> > ../source4/dsdb/dns/dns_update.c:353(dnsupdate_spnupdate_done)
> > Jul 10 08:26:36 pre01svdeb02 samba[25451]: task[dnsupdate][25451]:
> > ../source4/dsdb/dns/dns_update.c:353: Failed SPN update - 
> with error code 1
> > 
> > 
> > Added A-record myself.
> > 
> > Still issues with RSAT and GPO editing (access denied etc)
> > 
> > -
> > 
> > network: it is set up as domain network ... firewall 
> activated. But it
> > seems I can't see all the other computers in Windows 
> Explorer, Network.
> > 
> > disabled firewall for a test ... reset to standards.
> 
> am I missing something, did I make some stupid mistake or is there any
> other reason why noone replies to this thread anymore?

Hai, a quick response.. 
Failed SPN update -  
Verify the dns.keytab files its location if you upgraded, you might need to move that from /var/lib/samba/private to /var/lib/samba/bind-dns
You need :  -rw-r-----  1 root bind  877 Apr 28  2015 dns.keytab

Verify if : /var/lib/samba/bind-dns/named.conf is updated to the correct bind version. 

And run : samba_dnsupdate --verbose 
Post that output. 

Network, the AD-DC dont run NMBD. If you want to "see" netbiosnames in the explorer, enable NMBD on one member server. 
See if that helps you. That is by design. 


Greetz, 

Louis