[Samba] Unable to access shares by server alias

[Andrew Bartlett]

I'm confused, the logs look like AD DC logs, but you say you were
configuring the separate Samba file-server. 

Can you clarify?

Andrew Bartlett

On Sat, 2020-05-09 at 00:30 +0200, Lorenzo Milesi wrote:
> Attaching logs during an attempt of browsing \\server from CM-WM-W7$
> 
> thanks
> 
> ----- Original Message -----
> > From: "samba" <samba at lists.samba.org>
> > To: "Alex MacCuish" <alex at maccuish.org.uk>, "samba" <
> > samba at lists.samba.org>
> > Sent: Saturday, May 9, 2020 12:03:58 AM
> > Subject: Re: [Samba] Unable to access shares by server alias
> > By default, we should just be doing 'match by key' based on our
> > secret
> > (machine account password), so I hope that isn't it.
> > 
> > The server logs may be enlightening.
> > 
> > Andrew Bartlett
> > 
> > On Fri, 2020-05-08 at 22:42 +0100, Alex MacCuish via samba wrote:
> > > Did you update the keytab on the fileserver after changing the
> > > SPNs
> > > on
> > > the computer object? If not, the fileserver won't have the
> > > correct
> > > SPNs
> > > in its keytab file so will fail at negotiating kerberos. NTLM
> > > should
> > > have still saved you however...
> > > 
> > > On 08/05/2020 22:27, Lorenzo Milesi via samba wrote:
> > > > Hi.
> > > > We migrated a S4 workgroup to S4 AD DC, I'm trying to allow
> > > > users
> > > > to access the new \\fileserver with the old host name \\server.
> > > > I
> > > > added a CNAME record to the AD DNS zone, created alias for
> > > > fileserver with
> > > > samba-tool  spn add ldap/SERVER fileserver$
> > > > samba-tool  spn add HOST/SERVER fileserver$
> > > > 
> > > > I also added
> > > >          netbios aliases = server
> > > > to smb.conf but this should be useless, as they're now all
> > > > using
> > > > Windows10 and 7. But I'm still unable to browse the server as
> > > > \\server.
> > > > 
> > > > Am I missing something?
> > > > thanks
> > > 
> > > 
> > 
> > --
> > Andrew Bartlett                       https://samba.org/~abartlet/
> > Authentication Developer, Samba Team  https://samba.org
> > Samba Developer, Catalyst IT
> > https://catalyst.net.nz/services/samba
> > 
> > 
> > 
> > 
> > --
> > To unsubscribe from this list go to the following URL and read the
> > instructions:  https://lists.samba.org/mailman/options/samba
> 
> 
-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba