Created attachment 9005 [details]
Output from domain join

After joining a DC to a domain, it a number of SPNs are missing which in turn causes it to not function properly.

e.g.
Host with missing SPNs after joining it to a domain:

[root@c64]/usr/local/samba/bin# ./samba-tool spn list c64-2$
c64-2$
User CN=C64-2,OU=Domain Controllers,DC=test,DC=la has the following servicePrincipalName:
         HOST/C64-2
         HOST/C64-2.test.la
         GC/C64-2.test.la/test.la
         E3514235-4B06-11D1-AB04-00C04FC2DCD2/c3914caf-1b99-4cd5-aeec-19ce459ba970/test.la

Host with expected SPNs:
root@c64]/usr/local/samba/bin# ./samba-tool spn list c64$
c64$
User CN=C64,OU=Domain Controllers,DC=test,DC=la has the following servicePrincipalName:
         HOST/c64.test.la
         HOST/c64.test.la/COVE
         ldap/c64.test.la/COVE
         GC/c64.test.la/test.la
         ldap/c64.test.la
         HOST/c64.test.la/test.la
         ldap/c64.test.la/test.la
         HOST/C64
         E3514235-4B06-11D1-AB04-00C04FC2DCD2/f20e506a-f56e-41f7-93eb-dcaaf73155d2/test.la
         ldap/f20e506a-f56e-41f7-93eb-dcaaf73155d2._msdcs.test.la
         ldap/C64
         RestrictedKrbHost/C64
         RestrictedKrbHost/c64.test.la
         ldap/c64.test.la/DomainDnsZones.test.la
         ldap/c64.test.la/ForestDnsZones.test.la

Domain join command used:
samba-tool domain join test.la DC --realm=TEST.LA -Uadministrator