samba - Oct 2010 - net ads dns register failes (samba 3.4.7 on windows 2003 sp2)

Hi all,

I have some problems with dynamic DNS updating.
Samba 3.4.7
Windows 2003 sp2

# net ads dns register -P
DNS Update failed!

With debug ( -d9 ) I get this:
------
[2010/10/26 09:28:44,  3] libads/sasl.c:780(ads_sasl_spnego_bind)
  ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10
[2010/10/26 09:28:44,  3] libads/sasl.c:789(ads_sasl_spnego_bind)
  ads_sasl_spnego_bind: got server principal name = losdcc01$@LOS.NET
[2010/10/26 09:28:44,  3] libsmb/clikrb5.c:687(ads_krb5_mk_req)
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2010/10/26 09:28:44,  3] libsmb/clikrb5.c:620(ads_cleanup_expired_creds)
  ads_cleanup_expired_creds: Ticket in ccache[MEMORY:net_ads] expiration Tue, 26
Oct 2010 19:28:44 CEST
[2010/10/26 09:28:44,  3] libsmb/clikrb5.c:729(ads_krb5_mk_req)
  ads_krb5_mk_req: server marked as OK to delegate to, building forwardable TGT
[2010/10/26 09:28:44,  2] lib/interface.c:340(add_interface)
  added interface eth0 ip=fe80::223:7dff:fe1b:a87e%eth0
bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff::
[2010/10/26 09:28:44,  2] lib/interface.c:340(add_interface)
  added interface eth0 ip=10.128.64.57 bcast=10.154.64.255 netmask=255.255.255.0
[2010/10/26 09:28:44,  4] libads/dns.c:620(ads_dns_lookup_ns)
  ads_dns_lookup_ns: 23 records returned in the answer section.
DNS update failed!
[2010/10/26 09:28:48,  2] utils/net.c:779(main)
  return code = -1
-------

When I try to find some more info with wireshark I find that the server refuses
TKEY on the DNS request.

My current solution is to let DHCP do the update but it works poorly in a mixed
environment. We have about 1000 clients moving around all over the place so we
can't manually register.


Best regards
Emil Assarsson
Sony Ericsson Mobile Communications AB

"The information in this email, and attachment(s) thereto, is strictly
confidential and may be legally privileged. It is intended solely for the named
recipient(s), and access to this e-mail, or any attachment(s) thereto, by anyone
else is unauthorized. Violations hereof may result in legal actions. Any
attachment(s) to this e-mail has been checked for viruses, but please rely on
your own virus-checker and procedures. If you contact us by e-mail, we will
store your name and address to facilitate communications in the matter
concerned. If you do not consent to us storing your name and address for above
stated purpose, please notify the sender promptly. Also, if you are not the
intended recipient please inform the sender by replying to this transmission,
and delete the e-mail, its attachment(s), and any copies of it without,
disclosing it."