[Samba] R: R: R: R: R: samba remote site client authentication and network browsing problem

Rowland Penny rpenny at samba.org
Fri Jan 3 10:46:02 UTC 2025


On Fri, 3 Jan 2025 10:28:53 +0000
Manzini Enrico <emanzini at zensistemi.com> wrote:

First, which part of 'PS: Please do not CC me' did you not understand ?

When you 'CC' me, it breaks my email flow and I have to manually move
your replies to the correct email folder.
Please do not 'CC' me, please just reply to the list.

> Hi Rowland,
> 
> i've modified, the dns like below:
> RODC-1:
>  - themself
>  - DC-1
>  - DC-2
> 
> DC-1 And DC-2 dns configuration not modified

I will say it again, from experience, each DC should have a
/etc/resolv.conf that looks like this:

search <ad.dns.domain>
nameserver <The.DCs.IP.Address>

Where '<ad.dns.domain> is the AD domains name and <The.DCs.IP.Address>
is the DCs IP address, not another DCs IP or '127.0.0.1'. This is known
to work in a Samba AD domain.

> 
> But the problems remains
>  - samba-tool drs replicate rodc-1 dc-2 dc=scratch,dc=lan -U
> administrator did not replicate
>  - network browsing anyway require authentication and not work
> 
> Enrico Manzini

It sounds like I will have to set up an RODC to understand your problem
better, but there is no 'network browsing' any longer, that requires
SMBv1, but I don't think you actually mean 'network browsing'.

In the mean time, please get level 10 logs and network traces etc of
your problem and open a bugzilla report.

Rowland



More information about the samba mailing list