[Samba] Possibly WERR_DS_DRA_ACCESS_DENIED or NT_STATUS_CANT_ACCESS_DOMAIN_INFO

[Rowland Penny]

On Mon, 6 May 2019 09:32:45 -0400
James Fowler <fowlerj at adst.org> wrote:

> Inline reply.
> 
> > > > There is also that word 'Zentyal', was/is this computer a
> > > > Zentyal DC ?  
> > >  Yes.  
> >
> > Which, is it a DC, or was it a DC
> >  
> It has never been a DC.  I even wiped the machine (again) at one
> point just to eliminate possible contamination

I asked about 'Zentyal' and was/if this was a DC, you answered 'Yes'.
I asked which, now you say it has never been a DC, so were did
'Zentyal' come from ?
 
> 
> >
> > If the former then you cannot join it to another DC, if it was a DC,
> > then you need to remove all traces of the old DC.
> >  
> It has never been a DC.  I've been trying to get it to become a DC

I believe you.



> >  
> I made the change to exactly reflect your recommended settings.
> 
> >  
> > >
> > >  
> > > > > root at DC2:/etc/bind# cat named.conf.local
> > > > > // Generated by Zentyal  
> > > >
> > > > Why? they seem to be making a right mess of it ;-)
> > > >  
> > > Tell me about it!   It is kind of crazy the proliferation of
> > > named.conf files, zones, etc.

There is that word 'Zentyal' again, where is it coming from ?

> > >  
> > > >
> > > > Mine is just:
> > > >
> > > > include "/var/lib/samba/bind-dns/named.conf";
> > > >  
> > >
> > > Presently, I have nothing in
> > > the /var/lib/samba/bind-dns/named.conf  
> >
> > Ah you wouldn't have, the path changed, yours would be:
> >
> > /var/lib/samba/private/named.conf
> >  
> I don't have anything like that in that path:

Mine is in /var/lib/samba/bind-dns , but I am using 4.9.6 and the path
changed recently, but it should be in /var/lib/samba/??? , so try
looking for it. If it isn't there, bind9 wasn't installed when you
provisioned and/or you didn't provision with
'--dns-backend=BIND9_DLZ' , or you need to run 'samba_upgradedns'

Rowland