[Samba] Failed to modify SPNs

[Adam Xu]

Hi Rowland

I have no windows DC but only 2 samba AD DCs.

This error has been happening for years. I don't know what's the error 
means and what shoud I do in samba AD DC or Windows domain members.

在 2020/7/22 15:14, Rowland penny via samba 写道:
> On 22/07/2020 03:33, Adam Xu via samba wrote:
>> Hi all
>>
>> my samba version is 4.12.5 and when a sql server windows machine join 
>> the domain, It shows error in samba :
>>
>> Failed to modify SPNs on CN=SEC-CON03,CN=Computers,DC=domain,DC=com: 
>> acl: spn validation failed for 
>> spn[E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM/SEC-CON03:389] 
>> uac[0x1000] account[SEC-CON03$] hostname[SEC-Con03.domain.com] 
>> nbname[DOMAIN] ntds[(null)] forest[domain.com] domain[domain.com]
>
> You could have a bigger problem here, 
> 'E3514235-4B06-11D1-AB04-00C04FC2DCD2-ADAM' probably means AD LDS, 
> which means no global catalogue. Not sure this is meant to work, so 
> what Windows DC is this ?
>
> Rowland
>
>
>
-- 
Adam Xu
Phone: 86-512-8777-3585
Adagene (Suzhou) Limited
C14, No. 218, Xinghu Street, Suzhou Industrial Park