[Samba] DNS update failed: NT_STATUS_UNSUCCESSFUL

[peter knezel]

Hello Rowland,

smb.conf is the same that you sent me already. I have just installed
another server and trying to get samba running together with kerberos
and having possibility to login as ad users.
Kind regards,
Peter

[global]
        security = ads
        realm = MYDOMAINLAB.BTS.LAB
        workgroup = MYDOMAINLAB
        idmap config *:backend = tdb
#       idmap config *:range = 10000-20000
        idmap config *:range = 3000-4000
         idmap config MYDOMAINLAB:backend = rid
        idmap config MYDOMAINLAB:range = 5000-100000
        template shell = /bin/bash
        client ntlmv2 auth = yes
        winbind use default domain = yes
        restrict anonymous = 2
        vfs objects = acl_xattr
        map acl inherit = Yes
        store dos attributes = Yes

[Profiles]
     path = /srv/samba/Profiles/
     read only = no

[homes]
  comment = Home Directories
  browseable = no
  read only = no

create mask = 0700
  directory mask = 0700
  valid users = %S


Kind regards,
Peter

On Thu, 14 Oct 2021 at 15:43, Rowland Penny via samba <samba at lists.samba.org>
wrote:

> On Thu, 2021-10-14 at 15:25 +0200, peter knezel via samba wrote:
> > Hello All,
> >
> > having this error when installed kerberos and samba on new server
> > with debian 10.10.
> >
> > # cat /etc/debian_version
> > 10.10
> >
> > dpkg -l|grep samba
> > ii  python-samba                         2:4.9.5+dfsg-5+deb10u1
> >  amd64        Python bindings for Samba
> > ii  samba                                2:4.9.5+dfsg-5+deb10u1
> >  amd64        SMB/CIFS file, print, and login server for Unix
> > ii  samba-common                         2:4.9.5+dfsg-5+deb10u1
> >  all          common files used by both the Samba server and client
> > ii  samba-common-bin                     2:4.9.5+dfsg-5+deb10u1
> >  amd64        Samba common files used by both the server and the
> > client
> > ii  samba-dsdb-modules:amd64             2:4.9.5+dfsg-5+deb10u1
> >  amd64        Samba Directory Services Database
> > ii  samba-libs:amd64                     2:4.9.5+dfsg-5+deb10u1
> >  amd64        Samba core libraries
> > ii  samba-vfs-modules:amd64              2:4.9.5+dfsg-5+deb10u1
> >  amd64        Samba Virtual FileSystem plugins
> >
> >
> >
> >
> >
> > *# net ads join -U me at MYDOMAIN.xxxLAB.xxx.labEnter me at MYDOMAIN's
> > password:Using short domain name -- MYDOMAINJoined 'myserver2' to dns
> > domain 'MYDOMAIN.xxxLAB.xxx.lab'DNS update failed:
> > NT_STATUS_UNSUCCESSFUL*
> >
> >
> > Unfortunately my dns server went wrong (as a virtual machine), so i
> > cannot
> > at this moment use any.
>
> You need to fix your dns, kerberos requires dns.
>
> > I cheated by adding ip + hostnames of my 2 AD servers into /etc/hosts
> > on
> > server i have samba isntalled.
>
> Don't think that is going to work.
>
> >
> > Does somebode have solution for this issue?
>
> What are you trying to join ?
> Please post your smb.conf.
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>