[Samba] Replication issue after upgrade - 3221225524 / WERR_FILE_NOT_FOUND

[Rowland Penny]

On 28/05/2023 14:56, Alexandros Karypidis wrote:
> Hello,
> 
> Thank you, the requested info (see /etc/krb5.conf below) clearly shows 
> the issue: when setting up DC1 I must've pressed enter on the default 
> value for the domain...
> 
> Is this fixable by stopping the daemon, editing the file and restarting? 
> Should I make DC2 the FSMO, delete DC1 and then recreate it using DC2 as 
> the golden copy (with the proper domain)?
> 
> 
>     root at dc1 ~# cat /etc/hosts
>     127.0.0.1 localhost
>     127.0.1.1 dc1 dc1.default.lan

That is the wrong way around, it should be:

127.0.1.1 dc1.default.lan dc1

> 
>     #Required for IPv6 capable hosts
>     ::1 ip6-localhost ip6-loopback
>     fe00::0 ip6-localnet
>     ff00::0 ip6-mcastprefix
>     ff02::1 ip6-allnodes
>     ff02::2 ip6-allrouters
>     ff02::3 ip6-allhosts
>     # --- BEGIN PVE ---
>     192.168.9.201 dc1.ad.home.lan dc1

But then that is correct but possibly wrong as well

The 127.0.1.1 line shows 'default.lan' yet the one (with what I hope is 
the DC's true IP) shows 'ad.home.lan'

Which is correct ?

>     # --- END PVE ---
> 
>     root at dc2 ~# cat /etc/hosts
>     127.0.0.1 localhost
>     127.0.1.1 dc2 dc2.ad.home.lan
> 
>     #Required for IPv6 capable hosts
>     ::1 ip6-localhost ip6-loopback
>     fe00::0 ip6-localnet
>     ff00::0 ip6-mcastprefix
>     ff02::1 ip6-allnodes
>     ff02::2 ip6-allrouters
>     ff02::3 ip6-allhosts
>     # --- BEGIN PVE ---
>     192.168.42.201 dc2.ad.home.lan dc2
>     # --- END PVE ---
> 
>     ==============================================
> 
>     root at dc1 ~# cat /etc/hostname
>     dc1
> 
>     root at dc2 ~# cat /etc/hostname
>     dc2
> 
>     ==============================================
> 
>     root at dc1 ~# cat /etc/resolv.conf
>     # --- BEGIN PVE ---
>     search ad.home.lan
>     nameserver 127.0.0.1
>     # --- END PVE ---

Never use '127.0.0.1' as the nameserver, that points to 'localhost', use 
the DC's ipaddress.

> 
>     root at dc2 ~# cat /etc/resolv.conf
>     # --- BEGIN PVE ---
>     search ad.home.lan
>     nameserver 127.0.0.1
>     # --- END PVE ---
> 
>     ==============================================
> 
>     root at dc1 ~# cat /etc/krb5.conf
>     [libdefaults]
>              default_realm = DEFAULT.LAN
>              dns_lookup_realm = false
>              dns_lookup_kdc = true
> 
>     [realms]
>     DEFAULT.LAN = {
>              default_domain = default.lan
>     }
> 
>     [domain_realm]
>              dc1 = DEFAULT.LAN
> 
> 
>     root at dc2 ~# cat /etc/krb5.conf
>     [libdefaults]
>              default_realm = AD.HOME.LAN
>              dns_lookup_realm = false
>              dns_lookup_kdc = true
> 
>     [realms]
>     AD.HOME.LAN = {
>              default_domain = ad.home.lan
>     }
> 
>     [domain_realm]
>              DC2 = AD.HOME.LAN

One of those is wrong

Fix the errors and see if that helps.

Rowland