Hello,
Am 17.07.2013 07:25, schrieb TI:
Hi Marc,
In the samba logs, I saw these errors:
/usr/local/samba/sbin/samba_dnsupdate: Error reading smb_krb5 reply packet:
NT_STATUS_CONNECTION_REFUSED from 10.1.1.12
/usr/local/samba/sbin/samba_dnsupdate: Error reading smb_krb5 reply packet:
NT_STATUS_CONNECTION_REFUSED from 10.1.1.200
/usr/local/samba/sbin/samba_dnsupdate: Traceback (most recent call last):
/usr/local/samba/sbin/samba_dnsupdate: File
"/usr/local/samba/sbin/samba_dnsupdate", line 509, in <module>
/usr/local/samba/sbin/samba_dnsupdate: get_credentials(lp)
/usr/local/samba/sbin/samba_dnsupdate: File
"/usr/local/samba/sbin/samba_dnsupdate", line 122, in get_credentials
/usr/local/samba/sbin/samba_dnsupdate: creds.get_named_ccache(lp,
ccachename)
/usr/local/samba/sbin/samba_dnsupdate: RuntimeError: kinit for
L01SAPP01$@INTRANET.ENXUTO.COM.BR failed (Cannot contact any KDC for requested
realm)
/usr/local/samba/sbin/samba_dnsupdate:
Child /usr/local/samba/sbin/samba_dnsupdate exited with status 1 - Operation
not permitted
../source4/dsdb/dns/dns_update.c:294: Failed DNS update -
NT_STATUS_ACCESS_DENIED
I think it happened because the new server has a different ip address. So, I
ran /usr/local/samba/sbin/samba_dnsupdate and it has added the new ip address
(10.1.1.150) to the list.
100%. I'll add this to the Wiki page, too. Make sure, you restore on a
machine, that is 100% like the old in important things (IP, Hostname,
Samba version, etc.)
host l01sapp01.intranet.enxuto.com.br.
l01sapp01.intranet.enxuto.com.br has address 10.1.1.12
l01sapp01.intranet.enxuto.com.br has address 10.1.1.200
l01sapp01.intranet.enxuto.com.br has address 10.1.1.150
After that, the error has disappear and I could login again (it seems that the
admin rights are back). However I couldn't run dsa.msc. I'll try translate the
message I'm receiving:
There is no User and Computer data available from Active Directory
[l01sapp01.intranet.enxuto.com.br] in Domain Controler
l01sapp01.intranet.enxuto.com.br. The server is reluctant in process your
request.
I think that the Windows Machine is trying to connect to 10.1.1.12 (which is
the first response received from the internal dns server) instead of 10.1.1.150
(the last and the correct one)
What do you think ?
Could we remove the old records from dns server ? I'm using the internal server.
I wrote an Howto
(http://wiki.samba.org/index.php/Change_IP_address_of_the_DC) about
changing the IP on a DC a while ago. But I would not combine this with a
restore. I think the highest priority should be to get your system
restored, so that it is like the one you backuped. Later you can do changes.
Regards,
Marc
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
