[Samba] Join new DC to domain - advice to upgrade Samba 4.

[Rowland penny]

On 07/04/2020 15:07, Rowland penny via samba wrote:
> On 07/04/2020 14:51, Daniel Lopes de Carvalho wrote:
>> Hi Rowland, thanks for your email.
>>
>> The working DC was installed around 2 years ago. It is the reason to 
>> stick in Stretch. But if I can upgrade the working DC to Buster and 
>> Samba 4.9.5 without any problem, it is OK to me.
> I would upgrade Debian and once you get everything working correctly, 
> you can use Louis's repo:  http://apt.van-belle.nl/
>>
>>
>> Find below the output of samba-tool join command:
>>
>>  samba-tool domain join test.example.domain.br 
>> <http://test.example.domain.br> DC -U"test/administrator" -d3
>>
>> Finding a writeable DC for domain 'test.example.domain.br 
>> <http://test.example.domain.br>'
>> resolve_lmhosts: Attempting lmhosts lookup for name 
>> _ldap._tcp.test.example.domain.br 
>> <http://tcp.test.example.domain.br><0x0>
>> Found DC adc02.test.example.domain.br 
>> <http://adc02.test.example.domain.br>
>> resolve_lmhosts: Attempting lmhosts lookup for name 
>> adc02.test.example.domain.br <http://adc02.test.example.domain.br><0x20>
>> Password for [test\administrator]:
>> Cannot reach a KDC we require to contact 
>> ldap/adc02.test.example.domain.br@ : kinit for administrator at test 
>> failed (Cannot contact any KDC for requested realm)
>
> That looks like your problem, for some reason 
> 'adc02.example.domain.br' cannot be found.
>
> Can you run the attached script on the machine you are trying to join 
> as a DC and then post the output in a reply to the mailing list, do 
> not attach it, this mailing list strips attachments.
>
> Rowland
>
>
and again, but this time to you, with the attachment ;-)

Rowland