Hi All,

I currently have another thread open on squid authentication with Samba 4 and am going to try authenticating against kerberos instead of NTLM.

According to the docs for the web filter I'm using, it's essential for Kerberos to be able to resolve reverse DNS so I've spent the last weekend trying to get this working. Various different documents and howtos exist but none of them worked out of the box. The Samba wiki suggests creating the zones with the RSAT DNS tool and various people I've come across have commented that from that point onwards records were added by Windows clients joining. I couldn't get this working so I tried the script on Michael Kuron's site as it threw up messages about GSS failing before DHCP server would eventually hang. While it ran, it would add entries consisting of the mac address as it failed to pick up the name of the machine.

Is there an easy way to achieve this or do I carry on plugging away with the script? Should, as come people have claimed, reverse entries just happen if you manually create zones. It's tricy to get a definitive answer on this and where people claim it's worked, they don't seem to advertise the method.

Thanks,

Julian


<http://blog.michael.kuron-germany.de/2011/02/isc-dhcpd-dynamic-dns-updates-against-secure-microsoft-dns/>

--
Borden Grammar School,
Avenue of Remembrance,
Sittingbourne,
Kent,
ME10 4DB.

Tel: 01795 424192

****************************************************************************
This e-mail is from Borden Grammar School Trust.

This e-mail, together with any files transmitted with it, are confidential, and 
are intended solely for the use of the individual or entity to whom they are 
addressed. Any unauthorised dissemination or
copying of this e-mail or its attachments, and any use or disclosure of any 
information contained in them, is strictly prohibited, and may also be illegal. 
If you are not the intended recipient you must not use, disclose,
distribute, copy, print or relay this e-mail.

Please note that any views expressed by an individual within this e-mail, do 
not necessarily reflect the views of the Borden Grammar School Trust. Borden 
Grammar School Trust has taken reasonable precautions to ensure no
viruses are present in this e-mail, the Academy cannot accept responsibility 
for any loss or damage arising from the use of this e-mail and/or files 
attached.

Registered office: Borden Grammar School, Avenue of Remembrance, Sittingbourne, 
Kent, ME10 4DB

Registered in England: 07827591

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to