[Samba] Samba unable to find SRV record during join

William Edwards wedwards at cyberfusion.nl
Thu Sep 8 16:11:39 UTC 2022

The issue has been fixed.

I tried joining a new Samba 4.13.13 DC (from Debian stable). Using that 
version/repository did not help either.

On each of my previous attempts, the `samba-tool domain join` command 
failed instantly*. To confirm that the problem is in userland, I closed 
port 53 on all existing DCs (the ones in /etc/resolv.conf of the new 
DC), and ran the `samba-tool domain join` command. As was the case for 
all earlier attempts, it failed instantly. This seems strange to me, 
because I'd expect there to be a timeout of some sort.

My initial hunch -that the IPv6-onliness of these DCs was the problem- 
was correct. Unfortunately, adding an IPv4 address to all existing DCs 
fixed the issue.

It should be possible to run an IPv6-only Samba infrastructure.

Thanks for the assistance, Rowland.

*: Instantly = without any noticeable delay.

William Edwards via samba schreef op 2022-09-07 21:17:
> William Edwards via samba schreef op 2022-09-07 20:39:
>> Rowland Penny via samba schreef op 2022-09-07 19:59:
>>> On Wed, 2022-09-07 at 19:39 +0200, William Edwards via samba wrote:
>>>> Although the join succeeded, no replication happens. Also, on the
>>>> existing DCs, the following errors are logged when using several
>>>> `samba-tool` commands such as `dns zonelist`:
>>>>      Cannot reach a KDC we require to contact (null) : kinit for
>>>> Administrator at CYBERFUSION failed (Cannot contact any KDC for
>>>> requested
>>>> realm)
>>> That is definitely a dns problem and you posted this as part of your
>>> join command in your intial post:
>>> samba-tool domain join cyberfusion.cloud DC -k yes
>>> Which would make your realm CYBERFUSION.CLOUD , so why are you 
>>> getting
>>> 'ADMINISTRATOR at CYBERFUSION' above ? Hopefully it is just a
>>> cut&paste/typo error.
>> I used the down-level logon name (DOMAIN\username) notation. I wasn't
>> aware that's not supported. I do not get these errors when using the
>> User Principal Name.
>>> As for upgrading, I would hold off on that, it seems that there may 
>>> be
>>> problems with the Debian Samba packages when used as a DC.
>> Could you elaborate? I wasn't able to find such reports.
> I might have answered my own question. I installed Samba and all its
> dependencies[1] from bullseye-backports. Having done this, the `host`
> command, which is provided by dnsutils, fails with:
>     host: error while loading shared libraries:
> libdns-9.16.27-Debian.so: cannot open shared object file: No such file
> or directory
> I fixed this by re-installing bind9-host from stable instead of
> bullseye-backports. That does not fix the joining issue, by the way.
> Am I supposed to install all of Samba's dependencies from
> bullseye-backports, or just Samba? Or do you not recommend using
> bullseye-backports at all? If so, does the Samba team officially
> recommend using Louis's repository to get recent versions?
> [1]:
> https://wiki.samba.org/index.php/Distribution-specific_Package_Installation#Debian
>>> Rowland
>> --
>> With kind regards,
>> William Edwards
> --
> With kind regards,
> William Edwards

With kind regards,

William Edwards

More information about the samba mailing list