opensuse:~ # kinit administrator kinit: Credential cache directory /run/user/0/krb5cc does not exist while getting default ccache opensuse:~ # mkdir /run/user/0/ opensuse:~ # kinit administrator Password for administrator@TEST.JP: opensuse:~ # net ads join -U administrator Enter administrator's password: Using short domain name -- TEST Joined 'OPENSUSE' to dns domain 'test.jp' No DNS domain configured for opensuse. Unable to perform DNS Update. DNS update failed: NT_STATUS_INVALID_PARAMETER opensuse:~ # systemctl restart winbind opensuse:~ # wbinfo -u TEST\guest TEST\administrator TEST\krbtgt TEST\chibi opensuse:~ # wbinfo -n chibi S-1-5-21-531816203-730215079-1526157293-1103 SID_USER (1) opensuse:~ # net ads info LDAP server: 192.168.1.143 LDAP server name: dc2.test.jp Realm: TEST.JP Bind Path: dc=TEST,dc=JP LDAP port: 389 Server time: Sat, 28 Nov 2020 11:57:22 JST KDC server: 192.168.1.143 Server time offset: 0 Last machine account password change: Sat, 28 Nov 2020 11:56:38 JST opensuse:~ # host -4 dc dc.test.jp has address 192.168.1.24 dc.test.jp has IPv6 address 2400:4052:46e0:b700:78ff:d4cf:8f24:c7aa opensuse:~ # host -4 dc1 dc1.test.jp has address 192.168.1.42 dc1.test.jp has IPv6 address 2400:4052:46e0:b700:8ca1:4fc6:8897:27c2 opensuse:~ # host -4 dc2 dc2.test.jp has address 192.168.1.143 dc2.test.jp has IPv6 address 2400:4052:46e0:b700:4187:ee03:b5e:34e1 opensuse:~ # smbclient //192.168.1.24/netlogon -Uadministrator Enter TEST\administrator's password: Try "help" to get a list of possible commands. smb: \> ls . D 0 Sat Nov 28 06:54:46 2020 .. D 0 Sat Nov 28 06:54:46 2020 124869119 blocks of size 4096. 110678709 blocks available smb: \> exit opensuse:~ # smbclient //192.168.1.24/sysvol -Uadministrator Enter TEST\administrator's password: Try "help" to get a list of possible commands. smb: \> ls . D 0 Sat Nov 28 06:54:46 2020 .. D 0 Sat Nov 28 06:54:46 2020 test.jp Dr 0 Sat Nov 28 06:54:46 2020 124869119 blocks of size 4096. 110678709 blocks available smb: \> exit opensuse:~ # cat /etc/os-release NAME="openSUSE Tumbleweed" # VERSION="20201124" ID="opensuse-tumbleweed" ID_LIKE="opensuse suse" VERSION_ID="20201124" PRETTY_NAME="openSUSE Tumbleweed" ANSI_COLOR="0;32" CPE_NAME="cpe:/o:opensuse:tumbleweed:20201124" BUG_REPORT_URL="https://bugs.opensuse.org" HOME_URL="https://www.opensuse.org/" DOCUMENTATION_URL="https://en.opensuse.org/Portal:Tumbleweed" LOGO="distributor-logo" opensuse:~ # samba -V Version 4.13.2-git.176.0a5e55b510cSUSE-oS15.5-x86_64 opensuse:~ # host -t SRV _ldap._tcp.test.jp _ldap._tcp.test.jp has SRV record 0 100 389 dc2.test.jp. _ldap._tcp.test.jp has SRV record 0 100 389 dc.test.jp. _ldap._tcp.test.jp has SRV record 0 100 389 dc1.test.jp. opensuse:~ # host -t SRV _kerberos._udp.test.jp _kerberos._udp.test.jp has SRV record 0 100 88 dc1.test.jp. _kerberos._udp.test.jp has SRV record 0 100 88 dc2.test.jp. _kerberos._udp.test.jp has SRV record 0 100 88 dc.test.jp. opensuse:~ # host -t A test.jp test.jp has address 192.168.1.34 test.jp has address 192.168.1.24 test.jp has address 192.168.1.143 test.jp has address 192.168.1.42 opensuse:~ # net ads lookup Information for Domain Controller: 192.168.1.143 Response Type: LOGON_SAM_LOGON_RESPONSE_EX GUID: feabb66c-dd8b-489d-8e9a-8c72474ce583 Flags: Is a PDC: no Is a GC of the forest: yes Is an LDAP server: yes Supports DS: yes Is running a KDC: yes Is running time services: yes Is the closest DC: yes Is writable: yes Has a hardware clock: no Is a non-domain NC serviced by LDAP server: no Is NT6 DC that has some secrets: no Is NT6 DC that has all secrets: yes Runs Active Directory Web Services: yes Runs on Windows 2012 or later: yes Forest: test.jp Domain: test.jp Domain Controller: dc2.test.jp Pre-Win2k Domain: TEST Pre-Win2k Hostname: DC2 Server Site Name: Default-First-Site-Name Client Site Name: Default-First-Site-Name NT Version: 5 LMNT Token: ffff LM20 Token: ffff opensuse:~ # dig test.jp ; <<>> DiG 9.16.7 <<>> test.jp ;; global options: +cmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 45535 ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 1 ;; OPT PSEUDOSECTION: ; EDNS: version: 0, flags:; udp: 4000 ;; QUESTION SECTION: ;test.jp. IN A ;; ANSWER SECTION: test.jp. 600 IN A 192.168.1.34 test.jp. 600 IN A 192.168.1.143 test.jp. 600 IN A 192.168.1.24 test.jp. 600 IN A 192.168.1.42 ;; Query time: 0 msec ;; SERVER: 192.168.1.24#53(192.168.1.24) ;; WHEN: Sat Nov 28 12:01:17 JST 2020 ;; MSG SIZE rcvd: 100 opensuse:~ # klist Ticket cache: DIR::/run/user/0/krb5cc/tkt Default principal: administrator@TEST.JP Valid starting Expires Service principal 11/28/20 11:56:06 11/28/20 21:56:06 krbtgt/TEST.JP@TEST.JP renew until 11/29/20 11:56:01 opensuse:~ # wbinfo -t checking the trust secret for domain TEST via RPC calls succeeded opensuse:~ # wbinfo -g TEST\domain computers TEST\cert publishers TEST\domain users TEST\domain guests TEST\ras and ias servers TEST\allowed rodc password replication group TEST\enterprise read-only domain controllers TEST\cloneable domain controllers TEST\protected users TEST\key admins TEST\enterprise key admins TEST\domain controllers TEST\read-only domain controllers TEST\denied rodc password replication group TEST\group policy creator owners TEST\enterprise admins TEST\domain admins TEST\schema admins TEST\dnsadmins TEST\dnsupdateproxy opensuse:~ #