[Samba] Failed to modify SPNs

[Rowland penny]

On 22/07/2020 03:33, Adam Xu via samba wrote:
> Hi all
>
> my samba version is 4.12.5 and when a sql server windows machine join 
> the domain, It shows error in samba :
>
> Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: 
> acl: spn validation failed for 
> spn[E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SEC-CON03:389] 
> uac[0x1000] account[SEC-CON03$] hostname[SEC-Con03.domain.com] 
> nbname[DOMAIN] ntds[(null)] forest[domain.com] domain[domain.com]

You could have a bigger problem here, 
'E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM' probably means AD LDS, which 
means no global catalogue. Not sure this is meant to work, so what 
Windows DC is this ?

Rowland