[Samba] User names not replicating to secondary DC

Rowland penny rpenny at samba.org
Mon Mar 2 19:49:42 UTC 2020

On 02/03/2020 18:59, Durwin via samba wrote:
>> Can you run this script on both DC's.

OK, dc0 seems to have the ipaddress:

        dc1 seems to have the ipaddress:

So why does dc1 use as its nameserver ? and what is ?

The /etc/krb5.conf files should be the same on both machines, I prefer 
this format:

         default_realm = MSI.MYDOMAIN.COM
         dns_lookup_realm = false
         dns_lookup_kdc = true

You are missing:

include "/var/lib/samba/bind-dns/named.conf";

 From '/etc/bind/named.conf.local' on dc1

Which leads us to this in '/etc/bind/named.conf.options' (on both DCs):

tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";

If you do have '/var/lib/samba/bind-dns' , then you are using the wrong 
dns.keytab, you should be using:



More information about the samba mailing list