[Samba] Failed to modify SPNs

[L.P.H. van Belle]

Hai, 

Any windows event ID's related to this? These might be handy. 
I suggest you read : http://www.scomgod.com/?p=155 

On the SQL server, to add the SPN, use: 
setspn –A <SPN> <Account>
Example: setspn -A MSSQLSvc/SCMVPSCOM01.test.COM:1433 TEST\SVCACCOUNT

Does the SQL server has an A and PTR record in the DNS? Do verify that.

And there is bit more explained .
https://thoughtsonopsmgr.blogspot.com/2012/04/scom-r2-alert-sql-server-cannot.html

I think these should help you to fix this. 


Greetz, 

Louis



> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Adam 
> Xu via samba
> Verzonden: woensdag 22 juli 2020 4:33
> Aan: sambalist
> Onderwerp: [Samba] Failed to modify SPNs
> 
> Hi all
> 
> my samba version is 4.12.5 and when a sql server windows machine join 
> the domain, It shows error in samba :
> 
> Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: 
> acl: spn validation failed for 
> spn[E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SEC-CON03:389] 
> uac[0x1000] 
> account[SEC-CON03$] hostname[SEC-Con03.domain.com] nbname[DOMAIN] 
> ntds[(null)] forest[domain.com] domain[domain.com]
> 
> There was a discussion on this issue in 2018, but no 
> conclusion was given.
> 
> https://lists.samba.org/archive/samba/2018-August/217570.html
> 
> Is there any solution to this problem now?
> 
> -- 
> yours Adam
> 
> 
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>