Re: [Samba] Can't access DNS from RSAT
- Date: Tue, 12 Dec 2017 10:04:10 -0600
- From: Taylor Hammerling via samba <samba@xxxxxxxxxxxxxxx>
- Subject: Re: [Samba] Can't access DNS from RSAT
I cranked up the log level to 3 and found this in the log.samba file when
trying to open the DNS Manager RSAT from my client machine (which is joined
to the same domain as the DCs)
[2017/12/12 09:59:30.601170, 2]
dcesrv_request: restrict auth_level_connect access to [dnsserver] with
auth[type=0xa,level=0x2] on [ncacn_ip_tcp] from [ipv4:172.28.9.100:49960]
On Tue, Dec 12, 2017 at 9:47 AM, Taylor Hammerling <thammerling@xxxxxxxxxxxx
> Good morning all!
> I have two DCs, both running Samba 4.7.3. I have just joined the second
> DC to the domain. The second DC is replicating AD objects perfectly, I
> verified this by running "samba-tool drs showrepl" as well as using the
> ADUC RSAT snapin and adding a user to one DC, then switching the DC that
> ADUC connects to and verifying that the user was properly replicated.
> The DNS objects are alos replicating properly. I checked this by running
> "samba-dnsupdate" as well as by running nslookup, switching the server to
> the new DC and doing a couple of lookups.
> Unfortunately, I can't access the DNS on the new DC thru the DNS Manager
> RSAT snapin. I get an "access denied" error. There are no entries in any
> of the samba logs when I attempt to open the DNS Manager snapin either.
> I CAN access the DNS on the original DC using the DNS Manager RSAT snapin.
> I'm hoping (and suspecting) this will just be an easy fix of
> chmodding/chowing something...
> I've spent the last hour googling and have come up with nada.
> Any help you can provide would be VERY appreciated!
> *Taylor Hammerling* | *IT Manager*
> 2800 Laura Lane | Middleton, WI 53562
> *O *(608) 669-9070 *| C *(608) 512-7849
> tcsbasys.com | ubiquistat.com
*Taylor Hammerling* | *IT Manager*
2800 Laura Lane | Middleton, WI 53562
*O *(608) 669-9070 *| C *(608) 512-7849
tcsbasys.com | ubiquistat.com
To unsubscribe from this list go to the following URL and read the