On 12/01/08 14:20, LEES, Cooper wrote: > SMB Devs, > > In regards to my problem in staying 'joined' to a domain our DNS here at > ANSTO only allows the domain controllers to do DDNS with BIND. Could > this cause any problems? > > I have ddns_enable set to false in sharectl: > ddns_enable=false
That shouldn't make any difference or cause a problem. Provided the forward and reverse lookup entries for the host are present in your DNS, it shouldn't matter how they got there. Alan > I have not rebooted or restarted the server since last email to the list > but when I last checked it was still not a member of the domain after a > reboot etc. > > Regards, > --- > Cooper Ry Lees > UNIX Evangelist - Information Management Services (IMS) > Australian Nuclear Science and Technology Organisation > T +61 2 9717 3853 > F +61 2 9717 9273 > M +61 403 739 446 > E [EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]> > www.ansto.gov.au <http://www.ansto.gov.au> > > **Important****: ***This transmission is intended only for the use of > the addressee. It is confidential and may contain privileged information > or copyright material. If you are not the intended recipient, any use or > further disclosure of this communication is strictly forbidden. If you > have received this transmission in error, please notify me immediately > by telephone and delete all copies of this transmission as well as any > attachments.* > > On 02/12/2008, at 7:48 AM, Ross Smith wrote: > >> No major mistakes then, cool :-) >> >> I'll add the ddns stuff to my notes and test it out, I can definately >> see that being useful to know. >> >> Regarding the hostname, I think it is done with the OpenSolaris >> installer, but not with the one currently included in snv. That >> installer doesn't prompt for a host name at any point although it does >> create a (blank) hostname.e1000g0 file. >> >> And I'll look forward to the Kerberos updates. CIFS is certainly >> pretty smooth these days, much easier than it was to begin with, and >> really not much more complicated than setting up a windows server. I >> just thought I'd best check my notes since I aware I'm testing a >> moving target here :) >> >> Ross >> >> >> On Mon, Dec 1, 2008 at 8:26 PM, Alan M Wright <[EMAIL PROTECTED] >> <mailto:[EMAIL PROTECTED]>> wrote: >>> I thought step 2 was done by the installer but I could be wrong. >>> >>> Step 3 shouldn't be necessary if you enable dynamic DNS updates >>> prior to enabling the CIFS service: >>> >>> sharectl set -p ddns_enable=true smb >>> svcadm enable -r smb/server >>> >>> There appears to be a bug in BIND, which prevents it from making >>> dynamic DNS updates on ADS. There is an open bug with ISC. >>> So we perform the updates from within the CIFS service. >>> >>> We are looking into ways of handling the Kerberos situation more >>> elegantly. >>> >>> Alan >>> -- >>> >>> On 12/01/08 06:36, Ross wrote: >>>> >>>> Just wanted to check if my experience of joining a domain with >>>> snv_103 is >>>> correct. Am I making any obvious mistakes here, and are there plans to >>>> simplify any of these steps (2, 3 & 5 look to me like they could be >>>> covered >>>> by the installer)? >>>> >>>> 1. Install Solaris, configuring kerberos, DNS, etc. >>>> >>>> 2. Configure a hostname, since this doesn't appear to be covered by the >>>> install. >>>> edit /etc/hostname.e1000g0 >>>> >>>> 3. Load your AD DNS tool and add the hostname and IP address since >>>> Solaris >>>> doesn't appear to register it's IP with the server. >>>> >>>> 4. Synchronise time with the domain with: >>>> # ntpdate server >>>> >>>> 5. Edit the krb5.conf file, since there appear to be settings missed >>>> here >>>> too. Ensure the default realm is in CAPS, and set [domain_realm] as >>>> .domain >>>> = REALM, eg: >>>> [domain_realm] >>>> .domain.local = DOMAIN.LOCAL >>>> >>>> 6. Start the service >>>> # svcadm enable -r smb/server >>>> >>>> 7. Join the domain >>>> # smbadm join -u user domain >>> >>> >> _______________________________________________ >> cifs-discuss mailing list >> [email protected] <mailto:[email protected]> >> http://mail.opensolaris.org/mailman/listinfo/cifs-discuss > > > ------------------------------------------------------------------------ > > _______________________________________________ > cifs-discuss mailing list > [email protected] > http://mail.opensolaris.org/mailman/listinfo/cifs-discuss _______________________________________________ cifs-discuss mailing list [email protected] http://mail.opensolaris.org/mailman/listinfo/cifs-discuss
