各位先進
小弟最近在測試架設centos7整合DNS+SAMBA PDC+APACHE+POSTFIX
透由LDAP認證，但卻在SAMBA PDC這裡遭遇到問題，懇請協助排除，謝謝
這是未開啟SAMBA PDC時的smb.conf設定
[global]
workgroup = mydomain.com.tw
netbios name = centos7
ldap admin dn = "cn=root,dc=mydomain,dc=com,dc=tw"
passdb backend = ldapsam:ldap://localhost
ldap ssl = off
ldap suffix = "dc=mydomain,dc=com,dc=tw"
ldap passwd sync = yes
ldap user suffix = "ou=user"
ldap group suffix = "ou=group"
security = user
encrypt passwords = yes
interfaces = 192.168.1.0/24
hosts allow = 127. 192.168.1.
log file = /var/log/samba/log.%m
max log size = 500
Dos charset = CP950
Unix charset = UTF-8

============================ Share Definitions ==============================

[homes]
comment = Home Directories
browseable = no
writable = yes
; valid users = %S
; valid users = MYDOMAIN\%S

[share]
comment = share
path = /home/share
browseable = yes
guest ok = no
writable = yes
valid users = %S

#testparm //驗證正常
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[share]"
Loaded services file OK.
Server role: ROLE_STANDALONE

#smbclient -L mydomain.com.tw -U root
Enter root's password:
Domain=[MYDOMAIN.COM.TW] OS=[Unix] Server=[Samba 4.1.1]

Sharename Type Comment

share Disk share
IPC$ IPC IPC Service (Samba 4.1.1)
root Disk Home Directories
Domain=[MYDOMAIN.COM.TW] OS=[Unix] Server=[Samba 4.1.1]

Server Comment

Workgroup Master

MYDOMAIN CENTOS7

在xp工作站連接網路位置\\mydomain.com.tw\share輸入LDAP建立的帳號與密碼可正常連
接顯示資料夾內容

接著smb.conf加入PDC與WINS設定
[global]

workgroup = mydomain.com.tw
netbios name = centos7
ldap admin dn = "cn=root,dc=mydomain,dc=com,dc=tw"
passdb backend = ldapsam:ldap://localhost
ldap ssl = off
ldap suffix = "dc=mydomain,dc=com,dc=tw"
ldap passwd sync = yes
ldap user suffix = "ou=user"
ldap group suffix = "ou=group"
security = user
encrypt passwords = yes
interfaces = 192.168.123.0/24
hosts allow = 127. 192.168.123.
log file = /var/log/samba/log.%m
max log size = 500
Dos charset = CP950
Unix charset = UTF-8

admin users = root
local master = yes
os level = 255
domain master = yes
preferred master = yes
domain logons = yes
name resolve order = wins lmhosts hosts bcast
time server = yes
wins support = yes

#============================ Share Definitions ==============================

[homes]
comment = Home Directories
browseable = no
writable = yes
; valid users = %S
; valid users = MYDOMAIN\%S

[share]
comment = share
path = /home/share
browseable = yes
guest ok = no
writable = yes
valid users = %S

存檔並執行service smb restart
#testparm
Load smb config files from /etc/samba/smb.conf
Processing section "[homes]"
Processing section "[share]"
Loaded services file OK.
Server role: ROLE_DOMAIN_PDC

#smbclient -L mydomain.com.tw -U root
Enter root's password:
session setup failed: NT_STATUS_UNSUCCESSFUL

在xp工作站連接網路位置\\mydomain.com.tw\share則變成無法存取
另外要在工作站加入SAMBA PDC mydomain.com.tw網域也無法加入，顯示
DNS名稱不存在
(0x0000232B RCODE_NAME_ERROR)

_ldap._tcp.dc._msdcs.mydomain.com.tw 的SRV記錄查詢

1. DNS SRV 記錄並未登錄到DNS中

2.下列一些區域的子區域並未包含委派:
mydomain.com.tw
com.tw
tw

煩請各位提點如何排除以上狀況，謝謝^^