thr3ads.net - samba - [Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates [Jan 2019]

If this information is useful, please help other people find it:
Share via:

Rowland Penny

2019-Jan-10 20:32 UTC

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

On Thu, 10 Jan 2019 20:18:37 +0000 (UTC)
Billy Bob <billysbobs at yahoo.com> wrote:
>  
> 
>     On Thursday, January 10, 2019 2:08 PM, Billy Bob via samba
> <samba at lists.samba.org> wrote: 
> >Do you want to change your scripts to match my scripts as found on
> >the wiki ?
> >I know they work, well they have for me for the last 6 years.
> 
> 
> I am dropping an unedited version in now. I really should have done
> that before asking you to look at it.
I cannot offer support for something that is known to work, if it is
heavily edited. This doesn't mean I am not open to suggestions on how to
make things better, but the changes must come from a working system
based on what is known to work.

Rowland

Billy Bob

2019-Jan-10 20:40 UTC

head link

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

On Thursday, January 10, 2019 2:33 PM, Rowland Penny via samba <samba at
lists.samba.org> wrote:
 

 >On Thu, 10 Jan 2019 20:18:37 +0000 (UTC)>>Billy Bob <billysbobs at yahoo.com> wrote:
>
>>  
>> 
>>    On Thursday, January 10, 2019 2:08 PM, Billy Bob via samba
>> <samba at lists.samba.org> wrote: 
>> >Do you want to change your scripts to match my scripts as found on
>> >the wiki ?
>> >I know they work, well they have for me for the last 6 years.
>> 
>> 
>> I am dropping an unedited version in now. I really should have done
>> that before asking you to look at it.>
>
>I cannot offer support for something that is known to work, if it is
>heavily edited. This doesn't mean I am not open to suggestions on how to
>make things better, but the changes must come from a working system
>based on what is known to work.
>
>RowlandI absolutely agree with you.
With the script dropped in straight off Wiki, the errors are now as follow.
NOTE: the script does, of course, provide at least an exit code here. Also,
nothing else was generated in samba-ad-dc or bind9 logs during this operation:
Jan 10 14:31:46 dc01 dhcpd[1123]: Commit: IP: 172.20.10.165 DHCID:
1:d4:be:d9:22:9f:7d Name: mgmt01
Jan 10 14:31:46 dc01 sh[1123]: /usr/local/bin/dhcp-dyndns.sh: line 10: samba:
command not found
Jan 10 14:31:46 dc01 dhcpd[1123]: execute_statement argv[0] =
/usr/local/bin/dhcp-dyndns.sh
Jan 10 14:31:46 dc01 dhcpd[1123]: execute_statement argv[1] = add
Jan 10 14:31:46 dc01 dhcpd[1123]: execute_statement argv[2] = 172.20.10.165
Jan 10 14:31:46 dc01 dhcpd[1123]: execute_statement argv[3] =
1:d4:be:d9:22:9f:7d
Jan 10 14:31:46 dc01 dhcpd[1123]: execute_statement argv[4] = mgmt01
Jan 10 14:31:46 dc01 sh[1123]: /usr/local/bin/dhcp-dyndns.sh: line 36: /wbinfo:
No such file or directory
Jan 10 14:31:46 dc01 sh[1123]: Reply from SOA query:
Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<- opcode: QUERY,
status: NXDOMAIN, id:  33781
Jan 10 14:31:46 dc01 sh[1123]: ;; flags: qr aa ra; QUESTION: 1, ANSWER: 0,
AUTHORITY: 1, ADDITIONAL: 0
Jan 10 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION:
Jan 10 14:31:46 dc01 sh[1123]: ;mgmt01.corp.wjci.com.                IN       
SOA
Jan 10 14:31:46 dc01 sh[1123]: ;; AUTHORITY SECTION:
Jan 10 14:31:46 dc01 sh[1123]: corp.wjci.com.                0        IN       
SOA        dc01.corp.wjci.com. hostmaster.corp.wjci.com. 38 900 600 86400 3600
Jan 10 14:31:46 dc01 sh[1123]: Found zone name: corp.wjci.com
Jan 10 14:31:46 dc01 sh[1123]: The master is: dc01.corp.wjci.com
Jan 10 14:31:46 dc01 sh[1123]: start_gssrequest
Jan 10 14:31:46 dc01 sh[1123]: send_gssrequest
Jan 10 14:31:46 dc01 sh[1123]: Outgoing update query:
Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  22771
Jan 10 14:31:46 dc01 sh[1123]: ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0,
ADDITIONAL: 1
Jan 10 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION:
Jan 10 14:31:46 dc01 sh[1123]: ;2934920924.sig-dc01.corp.wjci.com. ANY       
TKEY
Jan 10 14:31:46 dc01 sh[1123]: ;; ADDITIONAL SECTION:
Jan 10 14:31:46 dc01 sh[1123]: 2934920924.sig-dc01.corp.wjci.com. 0 ANY
TKEY        gss-tsig. 1547152306 1547152306 3 NOERROR 1397
YIIFcQYGKwYBBQUCoIIFZTCCBWGgDTALBgkqhkiG9xIBAgKiggVOBIIF
SmCCBUYGCSqGSIb3EgECAgEAboIFNTCCBTGgAwIBBaEDAgEOo
Jan 10 14:31:46 dc01 sh[1123]: recvmsg reply from GSS-TSIG query
Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  22771
Jan 10 14:31:46 dc01 sh[1123]: ;; flags: qr ra; QUESTION: 1, ANSWER: 1,
AUTHORITY: 0, ADDITIONAL: 0
Jan 10 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION:
Jan 10 14:31:46 dc01 sh[1123]: ;2934920924.sig-dc01.corp.wjci.com. ANY       
TKEY
Jan 10 14:31:46 dc01 sh[1123]: ;; ANSWER SECTION:
Jan 10 14:31:46 dc01 sh[1123]: 2934920924.sig-dc01.corp.wjci.com. 0 ANY
TKEY        gss-tsig. 0 0 3 BADKEY 0  0
Jan 10 14:31:46 dc01 sh[1123]: dns_tkey_gssnegotiate: TKEY is unacceptable
Jan 10 14:31:46 dc01 sh[1123]: Reply from SOA query:
Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<- opcode: QUERY,
status: NXDOMAIN, id:  15626
Jan 10 14:31:46 dc01 sh[1123]: ;; flags: qr aa ra; QUESTION: 1, ANSWER: 0,
AUTHORITY: 1, ADDITIONAL: 0
Jan 10 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION:
Jan 10 14:31:46 dc01 sh[1123]: ;165.10.20.172.in-addr.arpa.        IN        SOA
Jan 10 14:31:46 dc01 sh[1123]: ;; AUTHORITY SECTION:
Jan 10 14:31:46 dc01 sh[1123]: 10.20.172.in-addr.arpa.        0        IN       
SOA        dc01.corp.wjci.com. hostmaster.corp.wjci.com. 2 900 600 86400 3600
Jan 10 14:31:46 dc01 sh[1123]: Found zone name: 10.20.172.in-addr.arpa
Jan 10 14:31:46 dc01 sh[1123]: The master is: dc01.corp.wjci.com
Jan 10 14:31:46 dc01 sh[1123]: start_gssrequest
Jan 10 14:31:46 dc01 sh[1123]: send_gssrequest
Jan 10 14:31:46 dc01 sh[1123]: Outgoing update query:
Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  55177
Jan 10 14:31:46 dc01 sh[1123]: ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0,
ADDITIONAL: 1
Jan 10 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION:
Jan 10 14:31:46 dc01 sh[1123]: ;2939413633.sig-dc01.corp.wjci.com. ANY       
TKEY
Jan 10 14:31:46 dc01 sh[1123]: ;; ADDITIONAL SECTION:
Jan 10 14:31:46 dc01 sh[1123]: 2939413633.sig-dc01.corp.wjci.com. 0 ANY
TKEY        gss-tsig. 1547152306 1547152306 3 NOERROR 1397
YIIFcQYGKwYBBQUCoIIFZTCCBWGgDTALBgkqhkiG9xIBAgKiggVOBIIF
SmCCBUYGCSqGSIb3EgECAgEAboIFNTCCBTGgAwIBBaEDAgEOo
Jan 10 14:31:46 dc01 sh[1123]: recvmsg reply from GSS-TSIG query
Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  55177
Jan 10 14:31:46 dc01 sh[1123]: ;; flags: qr ra; QUESTION: 1, ANSWER: 1,
AUTHORITY: 0, ADDITIONAL: 0
Jan 10 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION:
Jan 10 14:31:46 dc01 sh[1123]: ;2939413633.sig-dc01.corp.wjci.com. ANY       
TKEY
Jan 10 14:31:46 dc01 sh[1123]: ;; ANSWER SECTION:
Jan 10 14:31:46 dc01 sh[1123]: 2939413633.sig-dc01.corp.wjci.com. 0 ANY
TKEY        gss-tsig. 0 0 3 BADKEY 0  0
Jan 10 14:31:46 dc01 sh[1123]: dns_tkey_gssnegotiate: TKEY is unacceptable
Jan 10 14:31:46 dc01 dhcpd[1123]: execute: /usr/local/bin/dhcp-dyndns.sh exit
status 2816
Jan 10 14:31:46 dc01 dhcpd[1123]: reuse_lease: lease age 6601 (secs) under 25%
threshold, reply with unaltered, existing lease for 172.20.10.165
Jan 10 14:31:46 dc01 dhcpd[1123]: DHCPREQUEST for 172.20.10.165 from
d4:be:d9:22:9f:7d (mgmt01) via eno1
Jan 10 14:31:46 dc01 dhcpd[1123]: DHCPACK on 172.20.10.165 to d4:be:d9:22:9f:7d
(mgmt01) via eno1




-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Rowland Penny

2019-Jan-10 20:55 UTC

head link

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

On Thu, 10 Jan 2019 20:40:30 +0000 (UTC)
Billy Bob <billysbobs at yahoo.com> wrote:
> 
>  
> 
>     On Thursday, January 10, 2019 2:33 PM, Rowland Penny via samba
> <samba at lists.samba.org> wrote: 
> 
>  >On Thu, 10 Jan 2019 20:18:37 +0000 (UTC)>
> >Billy Bob <billysbobs at yahoo.com> wrote:
> >
> >>  
> >> 
> >>    On Thursday, January 10, 2019 2:08 PM, Billy Bob via samba
> >> <samba at lists.samba.org> wrote: 
> >> >Do you want to change your scripts to match my scripts as
found on
> >> >the wiki ?
> >> >I know they work, well they have for me for the last 6 years.
> >> 
> >> 
> >> I am dropping an unedited version in now. I really should have
done
> >> that before asking you to look at it.>
> >
> >I cannot offer support for something that is known to work, if it is
> >heavily edited. This doesn't mean I am not open to suggestions on
> >how to make things better, but the changes must come from a working
> >system based on what is known to work.
> >
> >Rowland
> I absolutely agree with you.
> With the script dropped in straight off Wiki, the errors are now as
> follow. NOTE: the script does, of course, provide at least an exit
> code here. Also, nothing else was generated in samba-ad-dc or bind9
> logs during this operation: 
It only logs to syslog
>Jan 10 14:31:46 dc01 dhcpd[1123]: Commit:
> IP: 172.20.10.165 DHCID: 1:d4:be:d9:22:9f:7d Name: mgmt01 
From here on the script should be run

> Jan 10 14:31:46 dc01 sh[1123]: /usr/local/bin/dhcp-dyndns.sh: line 10:
> samba: command not found 
Ah, you are (if I remember correctly) using a self compiled Samba, did
you read line 9 in the script ?
Uncomment line 10, adjust it for prefix if Samba isn't in /usr/local
and then try again.
>Jan 10 14:31:46 dc01 dhcpd[1123]:
> execute_statement argv[0] = /usr/local/bin/dhcp-dyndns.sh Jan 10
> 14:31:46 dc01 dhcpd[1123]: execute_statement argv[1] = add Jan 10
> 14:31:46 dc01 dhcpd[1123]: execute_statement argv[2] = 172.20.10.165
> Jan 10 14:31:46 dc01 dhcpd[1123]: execute_statement argv[3] >
1:d4:be:d9:22:9f:7d Jan 10 14:31:46 dc01 dhcpd[1123]:
> execute_statement argv[4] = mgmt01 Jan 10 14:31:46 dc01
> sh[1123]: /usr/local/bin/dhcp-dyndns.sh: line 36: /wbinfo: No such
> file or directory 
From here on has nothing to do with dhcp-dyndns.sh
>Jan 10 14:31:46 dc01 sh[1123]: Reply from SOA
> query: Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<- opcode:
QUERY,
> status: NXDOMAIN, id:  33781 Jan 10 14:31:46 dc01 sh[1123]: ;; flags:
> qr aa ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 Jan 10
> 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;mgmt01.corp.wjci.com.                IN        SOA Jan 10
> 14:31:46 dc01 sh[1123]: ;; AUTHORITY SECTION: Jan 10 14:31:46 dc01
> sh[1123]: corp.wjci.com.                0        IN        SOA
> dc01.corp.wjci.com. hostmaster.corp.wjci.com. 38 900 600 86400 3600
> Jan 10 14:31:46 dc01 sh[1123]: Found zone name: corp.wjci.com Jan 10
> 14:31:46 dc01 sh[1123]: The master is: dc01.corp.wjci.com Jan 10
> 14:31:46 dc01 sh[1123]: start_gssrequest Jan 10 14:31:46 dc01
> sh[1123]: send_gssrequest Jan 10 14:31:46 dc01 sh[1123]: Outgoing
> update query: Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<-
opcode:
> QUERY, status: NOERROR, id:  22771 Jan 10 14:31:46 dc01 sh[1123]: ;;
> flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 Jan 10
> 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;2934920924.sig-dc01.corp.wjci.com. ANY        TKEY Jan 10
> 14:31:46 dc01 sh[1123]: ;; ADDITIONAL SECTION: Jan 10 14:31:46 dc01
> sh[1123]: 2934920924.sig-dc01.corp.wjci.com. 0 ANY TKEY
> gss-tsig. 1547152306 1547152306 3 NOERROR 1397
> YIIFcQYGKwYBBQUCoIIFZTCCBWGgDTALBgkqhkiG9xIBAgKiggVOBIIF
> SmCCBUYGCSqGSIb3EgECAgEAboIFNTCCBTGgAwIBBaEDAgEOo Jan 10 14:31:46
> dc01 sh[1123]: recvmsg reply from GSS-TSIG query Jan 10 14:31:46 dc01
> sh[1123]: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 
22771
> Jan 10 14:31:46 dc01 sh[1123]: ;; flags: qr ra; QUESTION: 1, ANSWER:
> 1, AUTHORITY: 0, ADDITIONAL: 0 Jan 10 14:31:46 dc01 sh[1123]: ;;
> QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;2934920924.sig-dc01.corp.wjci.com. ANY        TKEY Jan 10
> 14:31:46 dc01 sh[1123]: ;; ANSWER SECTION: Jan 10 14:31:46 dc01
> sh[1123]: 2934920924.sig-dc01.corp.wjci.com. 0 ANY TKEY
> gss-tsig. 0 0 3 BADKEY 0  0 Jan 10 14:31:46 dc01 sh[1123]:
> dns_tkey_gssnegotiate: TKEY is unacceptable Jan 10 14:31:46 dc01
> sh[1123]: Reply from SOA query: Jan 10 14:31:46 dc01 sh[1123]: ;;
> ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:  15626 Jan 10
> 14:31:46 dc01 sh[1123]: ;; flags: qr aa ra; QUESTION: 1, ANSWER: 0,
> AUTHORITY: 1, ADDITIONAL: 0 Jan 10 14:31:46 dc01 sh[1123]: ;;
> QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;165.10.20.172.in-addr.arpa.        IN        SOA Jan 10
> 14:31:46 dc01 sh[1123]: ;; AUTHORITY SECTION: Jan 10 14:31:46 dc01
> sh[1123]: 10.20.172.in-addr.arpa.        0        IN
> SOA        dc01.corp.wjci.com. hostmaster.corp.wjci.com. 2 900 600
> 86400 3600 Jan 10 14:31:46 dc01 sh[1123]: Found zone name:
> 10.20.172.in-addr.arpa Jan 10 14:31:46 dc01 sh[1123]: The master is:
> dc01.corp.wjci.com Jan 10 14:31:46 dc01 sh[1123]: start_gssrequest
> Jan 10 14:31:46 dc01 sh[1123]: send_gssrequest Jan 10 14:31:46 dc01
> sh[1123]: Outgoing update query: Jan 10 14:31:46 dc01 sh[1123]: ;;
> ->>HEADER<<- opcode: QUERY, status: NOERROR, id:  55177 Jan 10
> 14:31:46 dc01 sh[1123]: ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY:
> 0, ADDITIONAL: 1 Jan 10 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION:
> Jan 10 14:31:46 dc01 sh[1123]: ;2939413633.sig-dc01.corp.wjci.com.
> ANY        TKEY Jan 10 14:31:46 dc01 sh[1123]: ;; ADDITIONAL SECTION:
> Jan 10 14:31:46 dc01 sh[1123]: 2939413633.sig-dc01.corp.wjci.com. 0
> ANY TKEY        gss-tsig. 1547152306 1547152306 3 NOERROR 1397
> YIIFcQYGKwYBBQUCoIIFZTCCBWGgDTALBgkqhkiG9xIBAgKiggVOBIIF
> SmCCBUYGCSqGSIb3EgECAgEAboIFNTCCBTGgAwIBBaEDAgEOo Jan 10 14:31:46
> dc01 sh[1123]: recvmsg reply from GSS-TSIG query Jan 10 14:31:46 dc01
> sh[1123]: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 
55177
> Jan 10 14:31:46 dc01 sh[1123]: ;; flags: qr ra; QUESTION: 1, ANSWER:
> 1, AUTHORITY: 0, ADDITIONAL: 0 Jan 10 14:31:46 dc01 sh[1123]: ;;
> QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;2939413633.sig-dc01.corp.wjci.com. ANY        TKEY Jan 10
> 14:31:46 dc01 sh[1123]: ;; ANSWER SECTION: Jan 10 14:31:46 dc01
> sh[1123]: 2939413633.sig-dc01.corp.wjci.com. 0 ANY TKEY
> gss-tsig. 0 0 3 BADKEY 0  0 Jan 10 14:31:46 dc01 sh[1123]:
> dns_tkey_gssnegotiate: TKEY is unacceptable Jan 10 14:31:46 dc01
> dhcpd[1123]: execute: /usr/local/bin/dhcp-dyndns.sh exit status 2816
> Jan 10 14:31:46 dc01 dhcpd[1123]: reuse_lease: lease age 6601 (secs)
> under 25% threshold, reply with unaltered, existing lease for
> 172.20.10.165 
The next lines are from DHCP
>Jan 10 14:31:46 dc01 dhcpd[1123]: DHCPREQUEST for
> 172.20.10.165 from d4:be:d9:22:9f:7d (mgmt01) via eno1 Jan 10
> 14:31:46 dc01 dhcpd[1123]: DHCPACK on 172.20.10.165 to
> d4:be:d9:22:9f:7d (mgmt01) via eno1
> 
Rowland

Apparently Analagous Threads

Search for more possibly parallel threads

samba - Jan 2019 - samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

Apparently Analagous Threads