[Samba] Unable to access shares by server alias

[Andrew Bartlett]

By default, we should just be doing 'match by key' based on our secret
(machine account password), so I hope that isn't it.

The server logs may be enlightening.

Andrew Bartlett

On Fri, 2020-05-08 at 22:42 +0100, Alex MacCuish via samba wrote:
> Did you update the keytab on the fileserver after changing the SPNs
> on 
> the computer object? If not, the fileserver won't have the correct
> SPNs 
> in its keytab file so will fail at negotiating kerberos. NTLM should 
> have still saved you however...
> 
> On 08/05/2020 22:27, Lorenzo Milesi via samba wrote:
> > Hi.
> > We migrated a S4 workgroup to S4 AD DC, I'm trying to allow users
> > to access the new \\fileserver with the old host name \\server. I
> > added a CNAME record to the AD DNS zone, created alias for
> > fileserver with
> > samba-tool  spn add ldap/SERVER fileserver$
> > samba-tool  spn add HOST/SERVER fileserver$
> > 
> > I also added
> >          netbios aliases = server
> > to smb.conf but this should be useless, as they're now all using
> > Windows10 and 7. But I'm still unable to browse the server as
> > \\server.
> > 
> > Am I missing something?
> > thanks
> 
> 
-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba