[Samba] DNS problems (still) with Linux domain members - using Samba's internal DNS backend

[Gary Dale]

On 2023-04-25 07:30, Rowland Penny via samba wrote:
>
>
> On 25/04/2023 04:56, Gary Dale via samba wrote:
>>
>> which is owned by root:Domain Admins. This shows up in Linux as:
>> root at TheLibrarian:~# ls -l /srv/
>> total 4
>> drwxr-xr-x 2 root 110512 4096 Apr 23 11:30 taxes
>
> Why is the group being shown as a number rather than by name (which 
> ends in '512' so is probably Domain Admins, which shouldn't have a 
> gidNumber, it breaks sysvol when using the 'ad idmap backend)
> Is /etc/nsswitch.conf setup correctly ? arre libpam-winbind and 
> libnss-winbind installed ?
>
> Rowland
>
going back through the DNS testing, I get on my workstation:

root at transponder:~# nslookup
 > set type=SRV
 > _ldap._tcp.home.rahim-dale.org
;; communications error to 192.168.1.13#53: timed out
Server:         192.168.1.13
Address:        192.168.1.13#53

_ldap._tcp.home.rahim-dale.org  service = 0 100 389 dc1.home.rahim-dale.org.
 > exit

root at transponder:~# host -t SRV _ldap._tcp.home.rahim-dale.org
_ldap._tcp.home.rahim-dale.org has SRV record 0 100 389 
dc1.home.rahim-dale.org.

and from the file & print server:
root at TheLibrarian:~# nslookup
 > set type=SRV
 >  _ldap._tcp.home.rahim-dale.org
Server:         192.168.1.13
Address:        192.168.1.13#53

_ldap._tcp.home.rahim-dale.org  service = 0 100 389 dc1.home.rahim-dale.org.
 > exit

root at TheLibrarian:~# host -t SRV _ldap._tcp.home.rahim-dale.org
_ldap._tcp.home.rahim-dale.org has SRV record 0 100 389 
dc1.home.rahim-dale.org.

As previously noted, on both machines wbinfo seems to be contacting the 
correct DC:
root at TheLibrarian:~# wbinfo --ping-dc
checking the NETLOGON for domain[HOME] dc connection to 
"dc1.home.rahim-dale.org" succeeded