[Samba] dns.keytab doesn't exist

[Rowland penny]

On 11/12/2020 09:26, Dan Egli wrote:
>  I ran the samba_dnsupgrade and it created TWO dns.keytab files. You 
> said it won't create one in /var/lib/samba/bind-dns directory, but it 
> did. At least, SOMETHING put a file there. Still, if you say it 
> shouldn't be there, then perhaps I should rm it and point my bind 
> config to the other.
>
No, I didn't say that, I said that you do not get the keytab in the 
bind-dns dir when you join a DC, but you do when you provision a new DC 
or run samba_dnsupdate. What the code actually does is to create the 
keytab in the private dir and then copy it to the bind-dns dir, so yes, 
you do end up with two keytabs.

There is a bug report about this: 
https://bugzilla.samba.org/show_bug.cgi?id=14535

And here is my fix: 
https://gitlab.com/samba-team/samba/-/merge_requests/1642

Which unfortunately was rejected even though it works.

Rowland