thr3ads.net - samba - [Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates [Jan 2019]

If this information is useful, please help other people find it:
Share via:

Rowland Penny

2019-Jan-10 20:55 UTC

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

On Thu, 10 Jan 2019 20:40:30 +0000 (UTC)
Billy Bob <billysbobs at yahoo.com> wrote:
> 
>  
> 
>     On Thursday, January 10, 2019 2:33 PM, Rowland Penny via samba
> <samba at lists.samba.org> wrote: 
> 
>  >On Thu, 10 Jan 2019 20:18:37 +0000 (UTC)>
> >Billy Bob <billysbobs at yahoo.com> wrote:
> >
> >>  
> >> 
> >>    On Thursday, January 10, 2019 2:08 PM, Billy Bob via samba
> >> <samba at lists.samba.org> wrote: 
> >> >Do you want to change your scripts to match my scripts as
found on
> >> >the wiki ?
> >> >I know they work, well they have for me for the last 6 years.
> >> 
> >> 
> >> I am dropping an unedited version in now. I really should have
done
> >> that before asking you to look at it.>
> >
> >I cannot offer support for something that is known to work, if it is
> >heavily edited. This doesn't mean I am not open to suggestions on
> >how to make things better, but the changes must come from a working
> >system based on what is known to work.
> >
> >Rowland
> I absolutely agree with you.
> With the script dropped in straight off Wiki, the errors are now as
> follow. NOTE: the script does, of course, provide at least an exit
> code here. Also, nothing else was generated in samba-ad-dc or bind9
> logs during this operation: 
It only logs to syslog
>Jan 10 14:31:46 dc01 dhcpd[1123]: Commit:
> IP: 172.20.10.165 DHCID: 1:d4:be:d9:22:9f:7d Name: mgmt01 
From here on the script should be run

> Jan 10 14:31:46 dc01 sh[1123]: /usr/local/bin/dhcp-dyndns.sh: line 10:
> samba: command not found 
Ah, you are (if I remember correctly) using a self compiled Samba, did
you read line 9 in the script ?
Uncomment line 10, adjust it for prefix if Samba isn't in /usr/local
and then try again.
>Jan 10 14:31:46 dc01 dhcpd[1123]:
> execute_statement argv[0] = /usr/local/bin/dhcp-dyndns.sh Jan 10
> 14:31:46 dc01 dhcpd[1123]: execute_statement argv[1] = add Jan 10
> 14:31:46 dc01 dhcpd[1123]: execute_statement argv[2] = 172.20.10.165
> Jan 10 14:31:46 dc01 dhcpd[1123]: execute_statement argv[3] >
1:d4:be:d9:22:9f:7d Jan 10 14:31:46 dc01 dhcpd[1123]:
> execute_statement argv[4] = mgmt01 Jan 10 14:31:46 dc01
> sh[1123]: /usr/local/bin/dhcp-dyndns.sh: line 36: /wbinfo: No such
> file or directory 
From here on has nothing to do with dhcp-dyndns.sh
>Jan 10 14:31:46 dc01 sh[1123]: Reply from SOA
> query: Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<- opcode:
QUERY,
> status: NXDOMAIN, id:  33781 Jan 10 14:31:46 dc01 sh[1123]: ;; flags:
> qr aa ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0 Jan 10
> 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;mgmt01.corp.wjci.com.                IN        SOA Jan 10
> 14:31:46 dc01 sh[1123]: ;; AUTHORITY SECTION: Jan 10 14:31:46 dc01
> sh[1123]: corp.wjci.com.                0        IN        SOA
> dc01.corp.wjci.com. hostmaster.corp.wjci.com. 38 900 600 86400 3600
> Jan 10 14:31:46 dc01 sh[1123]: Found zone name: corp.wjci.com Jan 10
> 14:31:46 dc01 sh[1123]: The master is: dc01.corp.wjci.com Jan 10
> 14:31:46 dc01 sh[1123]: start_gssrequest Jan 10 14:31:46 dc01
> sh[1123]: send_gssrequest Jan 10 14:31:46 dc01 sh[1123]: Outgoing
> update query: Jan 10 14:31:46 dc01 sh[1123]: ;; ->>HEADER<<-
opcode:
> QUERY, status: NOERROR, id:  22771 Jan 10 14:31:46 dc01 sh[1123]: ;;
> flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 Jan 10
> 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;2934920924.sig-dc01.corp.wjci.com. ANY        TKEY Jan 10
> 14:31:46 dc01 sh[1123]: ;; ADDITIONAL SECTION: Jan 10 14:31:46 dc01
> sh[1123]: 2934920924.sig-dc01.corp.wjci.com. 0 ANY TKEY
> gss-tsig. 1547152306 1547152306 3 NOERROR 1397
> YIIFcQYGKwYBBQUCoIIFZTCCBWGgDTALBgkqhkiG9xIBAgKiggVOBIIF
> SmCCBUYGCSqGSIb3EgECAgEAboIFNTCCBTGgAwIBBaEDAgEOo Jan 10 14:31:46
> dc01 sh[1123]: recvmsg reply from GSS-TSIG query Jan 10 14:31:46 dc01
> sh[1123]: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 
22771
> Jan 10 14:31:46 dc01 sh[1123]: ;; flags: qr ra; QUESTION: 1, ANSWER:
> 1, AUTHORITY: 0, ADDITIONAL: 0 Jan 10 14:31:46 dc01 sh[1123]: ;;
> QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;2934920924.sig-dc01.corp.wjci.com. ANY        TKEY Jan 10
> 14:31:46 dc01 sh[1123]: ;; ANSWER SECTION: Jan 10 14:31:46 dc01
> sh[1123]: 2934920924.sig-dc01.corp.wjci.com. 0 ANY TKEY
> gss-tsig. 0 0 3 BADKEY 0  0 Jan 10 14:31:46 dc01 sh[1123]:
> dns_tkey_gssnegotiate: TKEY is unacceptable Jan 10 14:31:46 dc01
> sh[1123]: Reply from SOA query: Jan 10 14:31:46 dc01 sh[1123]: ;;
> ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id:  15626 Jan 10
> 14:31:46 dc01 sh[1123]: ;; flags: qr aa ra; QUESTION: 1, ANSWER: 0,
> AUTHORITY: 1, ADDITIONAL: 0 Jan 10 14:31:46 dc01 sh[1123]: ;;
> QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;165.10.20.172.in-addr.arpa.        IN        SOA Jan 10
> 14:31:46 dc01 sh[1123]: ;; AUTHORITY SECTION: Jan 10 14:31:46 dc01
> sh[1123]: 10.20.172.in-addr.arpa.        0        IN
> SOA        dc01.corp.wjci.com. hostmaster.corp.wjci.com. 2 900 600
> 86400 3600 Jan 10 14:31:46 dc01 sh[1123]: Found zone name:
> 10.20.172.in-addr.arpa Jan 10 14:31:46 dc01 sh[1123]: The master is:
> dc01.corp.wjci.com Jan 10 14:31:46 dc01 sh[1123]: start_gssrequest
> Jan 10 14:31:46 dc01 sh[1123]: send_gssrequest Jan 10 14:31:46 dc01
> sh[1123]: Outgoing update query: Jan 10 14:31:46 dc01 sh[1123]: ;;
> ->>HEADER<<- opcode: QUERY, status: NOERROR, id:  55177 Jan 10
> 14:31:46 dc01 sh[1123]: ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY:
> 0, ADDITIONAL: 1 Jan 10 14:31:46 dc01 sh[1123]: ;; QUESTION SECTION:
> Jan 10 14:31:46 dc01 sh[1123]: ;2939413633.sig-dc01.corp.wjci.com.
> ANY        TKEY Jan 10 14:31:46 dc01 sh[1123]: ;; ADDITIONAL SECTION:
> Jan 10 14:31:46 dc01 sh[1123]: 2939413633.sig-dc01.corp.wjci.com. 0
> ANY TKEY        gss-tsig. 1547152306 1547152306 3 NOERROR 1397
> YIIFcQYGKwYBBQUCoIIFZTCCBWGgDTALBgkqhkiG9xIBAgKiggVOBIIF
> SmCCBUYGCSqGSIb3EgECAgEAboIFNTCCBTGgAwIBBaEDAgEOo Jan 10 14:31:46
> dc01 sh[1123]: recvmsg reply from GSS-TSIG query Jan 10 14:31:46 dc01
> sh[1123]: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 
55177
> Jan 10 14:31:46 dc01 sh[1123]: ;; flags: qr ra; QUESTION: 1, ANSWER:
> 1, AUTHORITY: 0, ADDITIONAL: 0 Jan 10 14:31:46 dc01 sh[1123]: ;;
> QUESTION SECTION: Jan 10 14:31:46 dc01
> sh[1123]: ;2939413633.sig-dc01.corp.wjci.com. ANY        TKEY Jan 10
> 14:31:46 dc01 sh[1123]: ;; ANSWER SECTION: Jan 10 14:31:46 dc01
> sh[1123]: 2939413633.sig-dc01.corp.wjci.com. 0 ANY TKEY
> gss-tsig. 0 0 3 BADKEY 0  0 Jan 10 14:31:46 dc01 sh[1123]:
> dns_tkey_gssnegotiate: TKEY is unacceptable Jan 10 14:31:46 dc01
> dhcpd[1123]: execute: /usr/local/bin/dhcp-dyndns.sh exit status 2816
> Jan 10 14:31:46 dc01 dhcpd[1123]: reuse_lease: lease age 6601 (secs)
> under 25% threshold, reply with unaltered, existing lease for
> 172.20.10.165 
The next lines are from DHCP
>Jan 10 14:31:46 dc01 dhcpd[1123]: DHCPREQUEST for
> 172.20.10.165 from d4:be:d9:22:9f:7d (mgmt01) via eno1 Jan 10
> 14:31:46 dc01 dhcpd[1123]: DHCPACK on 172.20.10.165 to
> d4:be:d9:22:9f:7d (mgmt01) via eno1
> 
Rowland

Billy Bob

2019-Jan-10 22:23 UTC

head link

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

On Thursday, January 10, 2019 2:56 PM, Rowland Penny via samba <samba at
lists.samba.org> wrote:
 

 >Uncomment line 10, adjust it for prefix if Samba isn't in /usr/local
>and then try again.Here it is with script properly configured.
Regarding the later lines having to do with the script, I clearly don't know
what exactly is causing them. But surely they are all somehow part of this
update process?

Jan 10 15:46:23 dc01 dhcpd[1208]: Commit: IP: 172.20.10.165 DHCID:
1:d4:be:d9:22:9f:7d Name: mgmt01
Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[0] =
/usr/local/bin/dhcp-dyndns.sh
Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[1] = add
Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[2] = 172.20.10.165
Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[3] =
1:d4:be:d9:22:9f:7d
Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[4] = mgmt01
Jan 10 15:46:23 dc01 sh[1208]: Reply from SOA query:
Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NXDOMAIN, id:  65508
Jan 10 15:46:23 dc01 sh[1208]: ;; flags: qr aa ra; QUESTION: 1, ANSWER: 0,
AUTHORITY: 1, ADDITIONAL: 0
Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
Jan 10 15:46:23 dc01 sh[1208]: ;mgmt01.corp.<DOMAIN>.com.               
IN        SOA
Jan 10 15:46:23 dc01 sh[1208]: ;; AUTHORITY SECTION:
Jan 10 15:46:23 dc01 sh[1208]: corp.<DOMAIN>.com.                0       
IN        SOA        dc01.corp.<DOMAIN>.com.
hostmaster.corp.<DOMAIN>.com. 38 900 600 86400 3600
Jan 10 15:46:23 dc01 sh[1208]: Found zone name: corp.<DOMAIN>.com
Jan 10 15:46:23 dc01 sh[1208]: The master is: dc01.corp.<DOMAIN>.com
Jan 10 15:46:23 dc01 sh[1208]: start_gssrequest
Jan 10 15:46:23 dc01 sh[1208]: send_gssrequest
Jan 10 15:46:23 dc01 sh[1208]: Outgoing update query:
Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  22388
Jan 10 15:46:23 dc01 sh[1208]: ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0,
ADDITIONAL: 1
Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
Jan 10 15:46:23 dc01 sh[1208]: ;3756749263.sig-dc01.corp.<DOMAIN>.com.
ANY        TKEY
Jan 10 15:46:23 dc01 sh[1208]: ;; ADDITIONAL SECTION:
Jan 10 15:46:23 dc01 sh[1208]: 3756749263.sig-dc01.corp.<DOMAIN>.com. 0
ANY TKEY        gss-tsig. 1547156783 1547156783 3 NOERROR 1397
YIIFcQYGKwYBBQUCoIIFZTCCBWGgDTALBgkqhkiG9xIBAgKiggVOBIIF
SmCCBUYGCSqGSIb3EgECAgEAboIFNTCCBTGgAwIBBaEDAgEOo
Jan 10 15:46:23 dc01 sh[1208]: recvmsg reply from GSS-TSIG query
Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  22388
Jan 10 15:46:23 dc01 sh[1208]: ;; flags: qr ra; QUESTION: 1, ANSWER: 1,
AUTHORITY: 0, ADDITIONAL: 0
Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
Jan 10 15:46:23 dc01 sh[1208]: ;3756749263.sig-dc01.corp.<DOMAIN>.com.
ANY        TKEY
Jan 10 15:46:23 dc01 sh[1208]: ;; ANSWER SECTION:
Jan 10 15:46:23 dc01 sh[1208]: 3756749263.sig-dc01.corp.<DOMAIN>.com. 0
ANY TKEY        gss-tsig. 0 0 3 BADKEY 0  0
Jan 10 15:46:23 dc01 sh[1208]: dns_tkey_gssnegotiate: TKEY is unacceptable
Jan 10 15:46:23 dc01 sh[1208]: Reply from SOA query:
Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NXDOMAIN, id:   9273
Jan 10 15:46:23 dc01 sh[1208]: ;; flags: qr aa ra; QUESTION: 1, ANSWER: 0,
AUTHORITY: 1, ADDITIONAL: 0
Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
Jan 10 15:46:23 dc01 sh[1208]: ;165.10.20.172.in-addr.arpa.        IN        SOA
Jan 10 15:46:23 dc01 sh[1208]: ;; AUTHORITY SECTION:
Jan 10 15:46:23 dc01 sh[1208]: 10.20.172.in-addr.arpa.        0        IN       
SOA        dc01.corp.<DOMAIN>.com. hostmaster.corp.<DOMAIN>.com. 2
900 600 86400 3600
Jan 10 15:46:23 dc01 sh[1208]: Found zone name: 10.20.172.in-addr.arpa
Jan 10 15:46:23 dc01 sh[1208]: The master is: dc01.corp.<DOMAIN>.com
Jan 10 15:46:23 dc01 sh[1208]: start_gssrequest
Jan 10 15:46:23 dc01 sh[1208]: send_gssrequest
Jan 10 15:46:23 dc01 sh[1208]: Outgoing update query:
Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  58152
Jan 10 15:46:23 dc01 sh[1208]: ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0,
ADDITIONAL: 1
Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
Jan 10 15:46:23 dc01 sh[1208]: ;2065761415.sig-dc01.corp.<DOMAIN>.com.
ANY        TKEY
Jan 10 15:46:23 dc01 sh[1208]: ;; ADDITIONAL SECTION:
Jan 10 15:46:23 dc01 sh[1208]: 2065761415.sig-dc01.corp.<DOMAIN>.com. 0
ANY TKEY        gss-tsig. 1547156783 1547156783 3 NOERROR 1396
YIIFcAYGKwYBBQUCoIIFZDCCBWCgDTALBgkqhkiG9xIBAgKiggVNBIIF
SWCCBUUGCSqGSIb3EgECAgEAboIFNDCCBTCgAwIBBaEDAgEOo
Jan 10 15:46:23 dc01 sh[1208]: recvmsg reply from GSS-TSIG query
Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  58152
Jan 10 15:46:23 dc01 sh[1208]: ;; flags: qr ra; QUESTION: 1, ANSWER: 1,
AUTHORITY: 0, ADDITIONAL: 0
Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
Jan 10 15:46:23 dc01 sh[1208]: ;2065761415.sig-dc01.corp.<DOMAIN>.com.
ANY        TKEY
Jan 10 15:46:23 dc01 sh[1208]: ;; ANSWER SECTION:
Jan 10 15:46:23 dc01 sh[1208]: 2065761415.sig-dc01.corp.<DOMAIN>.com. 0
ANY TKEY        gss-tsig. 0 0 3 BADKEY 0  0
Jan 10 15:46:23 dc01 sh[1208]: dns_tkey_gssnegotiate: TKEY is unacceptable
Jan 10 15:46:23 dc01 dhcpd[1208]: execute: /usr/local/bin/dhcp-dyndns.sh exit
status 2816
Jan 10 15:46:23 dc01 dhcpd[1208]: DHCPREQUEST for 172.20.10.165 from
d4:be:d9:22:9f:7d (mgmt01) via eno1
Jan 10 15:46:23 dc01 dhcpd[1208]: DHCPACK on 172.20.10.165 to d4:be:d9:22:9f:7d
(mgmt01) via eno1


Rowland



-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Rowland Penny

2019-Jan-11 09:13 UTC

head link

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

On Thu, 10 Jan 2019 22:23:41 +0000 (UTC)
Billy Bob <billysbobs at yahoo.com> wrote:
>  
> 
>     On Thursday, January 10, 2019 2:56 PM, Rowland Penny via samba
> <samba at lists.samba.org> wrote: 
> 
>  
> >Uncomment line 10, adjust it for prefix if Samba isn't in
/usr/local and then try again.
> Here it is with script properly configured.
> Regarding the later lines having to do with the script, I clearly don't
know what exactly is causing them. But surely they are all
> somehow part of this update process?
> 
> Jan 10 15:46:23 dc01 dhcpd[1208]: Commit: IP: 172.20.10.165 DHCID:
1:d4:be:d9:22:9f:7d Name: mgmt01
> Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[0] =
/usr/local/bin/dhcp-dyndns.sh
> Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[1] = add
> Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[2] = 172.20.10.165
> Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[3] =
1:d4:be:d9:22:9f:7d
> Jan 10 15:46:23 dc01 dhcpd[1208]: execute_statement argv[4] = mgmt01
The above lines are from dhcpd.conf, where it is trying to run dhcp-dyndns.sh
> Jan 10 15:46:23 dc01 sh[1208]: Reply from SOA query:
> Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NXDOMAIN, id:  65508
> Jan 10 15:46:23 dc01 sh[1208]: ;; flags: qr aa ra; QUESTION: 1, ANSWER: 0,
AUTHORITY: 1, ADDITIONAL: 0
> Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
> Jan 10 15:46:23 dc01 sh[1208]: ;mgmt01.corp.<DOMAIN>.com. IN       
SOA
> Jan 10 15:46:23 dc01 sh[1208]: ;; AUTHORITY SECTION:
> Jan 10 15:46:23 dc01 sh[1208]: corp.<DOMAIN>.com. 0        IN       
SOA dc01.corp.<DOMAIN>.com. hostmaster.corp.<DOMAIN>.com. 38 900 600
86400 3600
> Jan 10 15:46:23 dc01 sh[1208]: Found zone name: corp.<DOMAIN>.com
> Jan 10 15:46:23 dc01 sh[1208]: The master is: dc01.corp.<DOMAIN>.com
> Jan 10 15:46:23 dc01 sh[1208]: start_gssrequest
> Jan 10 15:46:23 dc01 sh[1208]: send_gssrequest
> Jan 10 15:46:23 dc01 sh[1208]: Outgoing update query:
> Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id: 22388
> Jan 10 15:46:23 dc01 sh[1208]: ;; flags:; QUESTION: 1, ANSWER: 0,
AUTHORITY: 0, ADDITIONAL: 1
> Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
> Jan 10 15:46:23 dc01 sh[1208]:
;3756749263.sig-dc01.corp.<DOMAIN>.com. ANY        TKEY
> Jan 10 15:46:23 dc01 sh[1208]: ;; ADDITIONAL SECTION:
> Jan 10 15:46:23 dc01 sh[1208]: 3756749263.sig-dc01.corp.<DOMAIN>.com.
0 ANY TKEY        gss-tsig. 1547156783 1547156783 3 NOERROR 1397
>
YIIFcQYGKwYBBQUCoIIFZTCCBWGgDTALBgkqhkiG9xIBAgKiggVOBIIFSmCCBUYGCSqGSIb3EgECAgEAboIFNTCCBTGgAwIBBaEDAgEOo
> Jan 10 15:46:23 dc01 sh[1208]: recvmsg reply from GSS-TSIG query
> Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  22388
> Jan 10 15:46:23 dc01 sh[1208]: ;; flags: qr ra; QUESTION: 1, ANSWER: 1,
AUTHORITY: 0, ADDITIONAL: 0
> Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
> Jan 10 15:46:23 dc01 sh[1208]:
;3756749263.sig-dc01.corp.<DOMAIN>.com. ANY        TKEY
> Jan 10 15:46:23 dc01 sh[1208]: ;; ANSWER SECTION:
> Jan 10 15:46:23 dc01 sh[1208]: 3756749263.sig-dc01.corp.<DOMAIN>.com.
0 ANY TKEY gss-tsig. 0 0 3 BADKEY 0  0
> Jan 10 15:46:23 dc01 sh[1208]: dns_tkey_gssnegotiate: TKEY is unacceptable
> Jan 10 15:46:23 dc01 sh[1208]: Reply from SOA query:
> Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NXDOMAIN, id:   9273
> Jan 10 15:46:23 dc01 sh[1208]: ;; flags: qr aa ra; QUESTION: 1, ANSWER: 0,
AUTHORITY: 1, ADDITIONAL: 0
> Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
> Jan 10 15:46:23 dc01 sh[1208]: ;165.10.20.172.in-addr.arpa.       
IN        SOA
> Jan 10 15:46:23 dc01 sh[1208]: ;; AUTHORITY SECTION:
> Jan 10 15:46:23 dc01 sh[1208]: 10.20.172.in-addr.arpa.        0        IN
SOA dc01.corp.<DOMAIN>.com. hostmaster.corp.<DOMAIN>.com. 2 900 600
86400 3600
> Jan 10 15:46:23 dc01 sh[1208]: Found zone name: 10.20.172.in-addr.arpa
> Jan 10 15:46:23 dc01 sh[1208]: The master is: dc01.corp.<DOMAIN>.com
> Jan 10 15:46:23 dc01 sh[1208]: start_gssrequest
> Jan 10 15:46:23 dc01 sh[1208]: send_gssrequest
> Jan 10 15:46:23 dc01 sh[1208]: Outgoing update query:
> Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id: 58152
> Jan 10 15:46:23 dc01 sh[1208]: ;; flags:; QUESTION: 1, ANSWER: 0,
AUTHORITY: 0, ADDITIONAL: 1
> Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
> Jan 10 15:46:23 dc01 sh[1208]:
;2065761415.sig-dc01.corp.<DOMAIN>.com. ANY        TKEY
> Jan 10 15:46:23 dc01 sh[1208]: ;; ADDITIONAL SECTION:
> Jan 10 15:46:23 dc01 sh[1208]: 2065761415.sig-dc01.corp.<DOMAIN>.com.
0 ANY TKEY        gss-tsig. 1547156783 1547156783 3 NOERROR 1396
>
YIIFcAYGKwYBBQUCoIIFZDCCBWCgDTALBgkqhkiG9xIBAgKiggVNBIIFSWCCBUUGCSqGSIb3EgECAgEAboIFNDCCBTCgAwIBBaEDAgEOo
> Jan 10 15:46:23 dc01 sh[1208]: recvmsg reply from GSS-TSIG query
> Jan 10 15:46:23 dc01 sh[1208]: ;; ->>HEADER<<- opcode: QUERY,
status: NOERROR, id:  58152
> Jan 10 15:46:23 dc01 sh[1208]: ;; flags: qr ra; QUESTION: 1, ANSWER: 1,
AUTHORITY: 0, ADDITIONAL: 0
> Jan 10 15:46:23 dc01 sh[1208]: ;; QUESTION SECTION:
> Jan 10 15:46:23 dc01 sh[1208]:
;2065761415.sig-dc01.corp.<DOMAIN>.com. ANY        TKEY
> Jan 10 15:46:23 dc01 sh[1208]: ;; ANSWER SECTION:
> Jan 10 15:46:23 dc01 sh[1208]: 2065761415.sig-dc01.corp.<DOMAIN>.com.
0 ANY TKEY gss-tsig. 0 0 3 BADKEY 0  0
> Jan 10 15:46:23 dc01 sh[1208]: dns_tkey_gssnegotiate: TKEY is unacceptable
I have no idea where the above is coming from, but it isn't from the dhcp
scripts.
> Jan 10 15:46:23 dc01 dhcpd[1208]:
> execute: /usr/local/bin/dhcp-dyndns.sh exit status 2816
The above line shows that dhcp-dyndns.sh is failing, turn on debug in the script
to find out why.
> Jan 10 15:46:23 dc01 dhcpd[1208]: DHCPREQUEST for 172.20.10.165 from
d4:be:d9:22:9f:7d (mgmt01) via eno1
> Jan 10 15:46:23 dc01 dhcpd[1208]: DHCPACK on 172.20.10.165 to
d4:be:d9:22:9f:7d (mgmt01) via eno1
The above two lines are from dhcpd
 
Rowland

Reasonably Related Threads

Search for more possibly parallel threads

samba - Jan 2019 - samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

[Samba] samba_dnsupdate options: --use-samba-tool vs. --use-nsupdate, and dhcpd dynamic updates

Reasonably Related Threads