[Samba] access to share with dns alias hostname

[L.P.H. van Belle]

Hai,  


> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Rowland penny via samba
> Verzonden: donderdag 26 september 2019 11:54
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] access to share with dns alias hostname
> 
> On 26/09/2019 10:25, L.P.H. van Belle via samba wrote:
> > For this to work
> >
> > Below shows a A on the old hostname, correct ?
> > With the "netbios alias" used in samba.
> >
> > Setup like this :
> > The new server..
> > hostname => DNS A
> > IP	   => DNS PTR
> > Netbios Alias    => CNAME OLDSERVERNAME
> >
> > And try again.
> > Remove the A/PTR of the old hostname also.
> > Only a CNAME is sufficient..
> >
> > Note, the new server MUST have A and PTR setup.
> Will this work ? what about the kerberos ticket ?

Yes, if you access a server through its CNAME, the CNAME will resolve back 
to the original hostname and its A and PTR record, which makes kerberos work. 

> >
> > optional, set dns proxy = yes in smb.conf
> 
> If unset, that is the default, but it is an 'nmbd' thing and I am not 
> sure if 'nbt' on a DC has the required code.
As far i see here this only works on members. 

> 
> It sounds to me that the OP has classicupgraded an NT4-style 
> domain to 
> an AD domain. If so, then unless he has modified the 
> smb.conf, the old 
> machine will still be running as a PDC.
> 
> I think he needs to give us more info.
Yes, that also.. 

> 
> Starting with the smb.conf from the new AD DC and the old PDC.
> 
> Rowland
> 
> 
> >
> >
> >
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>