[Samba] Fwd: Re: Samba 4.14: Windows Users and Computer / No contact with the following DC...

[Rowland penny]

On 05/04/2021 13:46, Denis Morejon wrote:
>
> Could you see any problem in my domain test?
>
> Note: zentyal3.dtcf.etecsa.cu and zentyal2.dtcf.etecsa.cu were the DC 
> names I had in Samba 4.7.4 (Because I had Zentyal DCs some years ago, 
> and I kept these names).
>
> So now, I decided to finally change the names. When I demoted the 
> second DC (Called zentyal2), I changed the hostname (In /etc/hostname 
> and /etc/resolv.conf, and rebooted)
>
> When I join this server again It's name was dc2. I did the same with 
> the first DC (Called zentyal3), so that It's name was dc1 when It 
> joined the domain again.
>
> After that, I removed those old names (zentyal*) from DNS "active 
> directory" zones. I hope these names in the test were not the cause of 
> my problem in Users and Computers management.
>

OK, you need to find and delete any AD records for zentyal2 & zentyal3, 
including any dns records.

Remove these lines from /etc/krb5.conf :

[realms]
DTCF.ETECSA.CU = {
     default_domain = dtcf.etecsa.cu
}

[domain_realm]
     DC1 = DTCF.ETECSA.CU

You do not need them and the last one is wrong.

Put the 'dns forwarder' line back into the DC's smb.conf

See if that helps.

Rowland