Bug 15117 - Documentation of the name resolve order parameter for security=ads
Summary: Documentation of the name resolve order parameter for security=ads
Status: RESOLVED INVALID
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: Documentation (show other bugs)
Version: unspecified
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Samba Documentation QA Contact~
QA Contact: Samba Documentation QA Contact~
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2022-07-06 10:05 UTC by Jonathan Neuhauser
Modified: 2022-08-27 06:00 UTC (History)
0 users

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Jonathan Neuhauser 2022-07-06 10:05:11 UTC 
The recommendation of "name resolve order = wins bcast" for "security = ads" seems problematic to me. I'm using 4.13.17 on Ubuntu 20.04, connecting to a Windows Server 2016 domain (with RFC2307, but that shouldn't matter here).

With this recommendation, a flurry of errors occur on about everything, including wbinfo -P ("No logon servers") or wbinfo -i user ("WBC_ERR_DOMAIN_NOT_FOUND").

I suggest removing or at least restricting the recommendation.
Comment 1 Rowland Penny 2022-07-06 12:32:38 UTC 
(In reply to Jonathan Neuhauser from comment #0)

Setting 'name resolve order = wins bcast' on 4.13.13 (Debian 11) allows 'wbinfo -P' to work for myself, but I have to use 'wbinfo -i DOMAIN\username' to get correct output (I do not have 'winbind use default domain = yes' set)

This sounds like a misconfiguration in smb.conf, so would you like to drop around the samba mailing list with a copy of your smb.conf ?
Comment 2 Rowland Penny 2022-08-27 06:00:26 UTC 
(In reply to Rowland Penny from comment #1)
Closing this, it was misconfiguration.