samba - Apr 2015 - debian wheezy sernet samba 4.2.1 : DC Joined and : samba_dnsupdate:update failed: NOTAUTH

Hai, 
?
I just installed a clean sernet samba 4.2.1 with just 2 dc's, used my
scripts, all went ok, but when i check the logs.
Im see-ing the following..?? ( with every start of restart ) 
?
[2015/04/22 13:50:40.622537,? 0] ../source4/smbd/server.c:370(binary_smbd_main)
? samba version 4.2.1-SerNet-Debian-7.wheezy started.
? Copyright Andrew Tridgell and the Samba Team 1992-2014
[2015/04/22 13:50:40.957993,? 0] ../source4/smbd/server.c:488(binary_smbd_main)
? samba: using 'standard' process model
[2015/04/22 13:50:41.245892,? 0] ../lib/util/become_daemon.c:124(daemon_ready)
? STATUS=daemon 'samba' finished starting up and ready to serve
connections
[2015/04/22 13:50:42.410197,? 0]
../lib/util/util_runcmd.c:324(samba_runcmd_io_handler)
? /usr/sbin/samba_dnsupdate: update failed: NOTAUTH
[2015/04/22 13:50:42.453299,? 0]
../lib/util/util_runcmd.c:324(samba_runcmd_io_handler)
? /usr/sbin/samba_dnsupdate: update failed: NOTAUTH
[2015/04/22 13:50:42.498516,? 0]
../lib/util/util_runcmd.c:324(samba_runcmd_io_handler)

?
running : 
samba_dnsupdate --verbose
?
update failed: NOTAUTH
Failed nsupdate: 2
Failed update of 26 entries

?
my resolv.conf was set as followed on DC2 
?
search internal.domain.tld.
nameserver ip_DC1
nameserver ip_DC2 
?
After changing this to.. first itself again..? 
?
search internal.domain.tld.
nameserver ip_DC2
nameserver ip_DC1 
?
rerun : samba_dnsupdate --verbose --all-names
and im getting now..?? 0 errors..? ..
?
as test change back to 
search internal.domain.tld.
nameserver ip_DC1
nameserver ip_DC2 
?
update failed: NOTAUTH
Failed nsupdate: 2
Failed update of 26 entries

running : klist 
?

Valid starting??? Expires?????????? Service principal
22/04/2015 13:50? 22/04/2015 23:50? krbtgt/internal.domain.tld at
INTERNAL.DOMAIN.TLD
??????? renew until 23/04/2015 13:50
22/04/2015 13:54? 22/04/2015 23:50? DNS/dc1.internal.domain.tld at
INTERNAL.DOMAIN.TLD
??????? renew until 23/04/2015 13:50
22/04/2015 14:04? 22/04/2015 23:50? host/DC2.internal.domain.tld at
INTERNAL.DOMAIN.TLD

so now im bit confused.. 

?
We are adviced to avoid dns inlanding..? 
but if i so set it now to avoid im getting NOTAUTH message.. 
?
Anyone any insight in this? 
?
Greetz, 
?
Louis
?


?
?

additional.. 

my DC1 also errors.. running : 
samba_dnsupdate --verbose --all-names 

update failed: NOTAUTH
Failed nsupdate: 2
Failed update of 27 entries

my resolv.conf was set as followed on DC1
?
search internal.domain.tld.
nameserver ip_DC1


now the strangest thing.. 

i did set the resolv.conf on DC1 to
nameserver ip_DC2 
nameserver ip_DC1 

and DC2 to 
nameserver ip_DC1 
nameserver ip_DC2 

and rebooted both servers. 

and.. ... 

Gone are the errors.... 
Very strange... or was i to quick with checking.. 
checked also with: 
samba-tool ldapcmp --filter='whenChanged' ldap://dc1 ldap://dc2
samba-tool drs showrepl 

no errors found.. 
wel all ok now.. time to format the server and do it again.. 


Louis

 
>-----Oorspronkelijk bericht-----
>Van: belle at bazuin.nl [mailto:samba-bounces at lists.samba.org] 
>Namens L.P.H. van Belle
>Verzonden: woensdag 22 april 2015 14:12
>Aan: samba at lists.samba.org
>Onderwerp: [Samba] debian wheezy sernet samba 4.2.1 : DC 
>Joined and : samba_dnsupdate:update failed: NOTAUTH
>
>Hai, 
>?
>I just installed a clean sernet samba 4.2.1 with just 2 dc's, 
>used my scripts, all went ok, but when i check the logs. 
>Im see-ing the following..?? ( with every start of restart ) 
>?
>[2015/04/22 13:50:40.622537,? 0] 
>../source4/smbd/server.c:370(binary_smbd_main)
>? samba version 4.2.1-SerNet-Debian-7.wheezy started.
>? Copyright Andrew Tridgell and the Samba Team 1992-2014
>[2015/04/22 13:50:40.957993,? 0] 
>../source4/smbd/server.c:488(binary_smbd_main)
>? samba: using 'standard' process model
>[2015/04/22 13:50:41.245892,? 0] 
>../lib/util/become_daemon.c:124(daemon_ready)
>? STATUS=daemon 'samba' finished starting up and ready to 
>serve connections
>[2015/04/22 13:50:42.410197,? 0] 
>../lib/util/util_runcmd.c:324(samba_runcmd_io_handler)
>? /usr/sbin/samba_dnsupdate: update failed: NOTAUTH
>[2015/04/22 13:50:42.453299,? 0] 
>../lib/util/util_runcmd.c:324(samba_runcmd_io_handler)
>? /usr/sbin/samba_dnsupdate: update failed: NOTAUTH
>[2015/04/22 13:50:42.498516,? 0] 
>../lib/util/util_runcmd.c:324(samba_runcmd_io_handler)
>
>?
>running : 
>samba_dnsupdate --verbose
>?
>update failed: NOTAUTH
>Failed nsupdate: 2
>Failed update of 26 entries
>
>?
>my resolv.conf was set as followed on DC2 
>?
>search internal.domain.tld.
>nameserver ip_DC1
>nameserver ip_DC2 
>?
>After changing this to.. first itself again..? 
>?
>search internal.domain.tld.
>nameserver ip_DC2
>nameserver ip_DC1 
>?
>rerun : samba_dnsupdate --verbose --all-names
>and im getting now..?? 0 errors..? ..
>?
>as test change back to 
>search internal.domain.tld.
>nameserver ip_DC1
>nameserver ip_DC2 
>?
>update failed: NOTAUTH
>Failed nsupdate: 2
>Failed update of 26 entries
>
>running : klist 
>?
>
>Valid starting??? Expires?????????? Service principal
>22/04/2015 13:50? 22/04/2015 23:50? 
>krbtgt/internal.domain.tld at INTERNAL.DOMAIN.TLD
>??????? renew until 23/04/2015 13:50
>22/04/2015 13:54? 22/04/2015 23:50? 
>DNS/dc1.internal.domain.tld at INTERNAL.DOMAIN.TLD
>??????? renew until 23/04/2015 13:50
>22/04/2015 14:04? 22/04/2015 23:50? 
>host/DC2.internal.domain.tld at INTERNAL.DOMAIN.TLD
>
>so now im bit confused.. 
>
>?
>We are adviced to avoid dns inlanding..? 
>but if i so set it now to avoid im getting NOTAUTH message.. 
>?
>Anyone any insight in this? 
>?
>Greetz, 
>?
>Louis
>?
>
>
>?
>?
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>