samba - Mar 2015 - samba_dnsupdate failed with RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any KDC for requested realm)

Hi list:

I joined Samba4.1.7 to Windows2k3 R2 domain, when I run:
*samba_dnsupdate --verbose --all-names*


IPs: ['192.168.186.137']
Skipping PDC entry (SRV
_ldap._tcp.pdc._msdcs.${DNSDOMAIN}                   ${HOSTNAME} 389) as we
are not a PDC
Skipping PDC entry (SRV
_ldap._tcp.pdc._msdcs.${DNSFOREST}                   ${HOSTNAME} 389) as we
are not a PDC
Traceback (most recent call last):
  File "/usr/sbin/samba_dnsupdate", line 510, in <module>
    get_credentials(lp)
  File "/usr/sbin/samba_dnsupdate", line 123, in get_credentials
    raise e
*RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any
KDC for requested realm)*

Kinit works fine. This is mi /etc/resolv.conf:
domain economia
search economia
nameserver 127.0.0.1
nameserver 192.168.186.234 (Windows2k3)

samba dns server works fine too.
I haven't run fsmo transfer  to samba4 nor w2k3 demote dc  yet
 Is this error important?
I would appreciate any help
Best regards

On 27/03/15 15:28, Dania Ramirez Moya wrote:
> Hi list:
>
> I joined Samba4.1.7 to Windows2k3 R2 domain, when I run:
> *samba_dnsupdate --verbose --all-names*
>
>
> IPs: ['192.168.186.137']
> Skipping PDC entry (SRV
> _ldap._tcp.pdc._msdcs.${DNSDOMAIN}                   ${HOSTNAME} 389) as we
> are not a PDC
> Skipping PDC entry (SRV
> _ldap._tcp.pdc._msdcs.${DNSFOREST}                   ${HOSTNAME} 389) as we
> are not a PDC
> Traceback (most recent call last):
>    File "/usr/sbin/samba_dnsupdate", line 510, in <module>
>      get_credentials(lp)
>    File "/usr/sbin/samba_dnsupdate", line 123, in get_credentials
>      raise e
> *RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any
> KDC for requested realm)*
>
> Kinit works fine. This is mi /etc/resolv.conf:
> domain economia
> search economia
> nameserver 127.0.0.1
> nameserver 192.168.186.234 (Windows2k3)
>
> samba dns server works fine too.
> I haven't run fsmo transfer  to samba4 nor w2k3 demote dc  yet
>   Is this error important?
> I would appreciate any help
> Best regards
Is your kerberos realm really 'ECONOMIA' ?
It is usually in the format 'EXAMPLE.COM'

You can remove the domain line from /etc/resolv.conf, you cannot have 
both 'domain' and 'search' and the second to be found will be
used. You
should also have the other DC first in the list, so your DC uses the 
other DC for dns unless that fails.

What have you got in /etc/krb5.conf ?

Rowland