samba - Sep 2016 - dnsupdate_nameupdate_done - Failed DNS update

On Fri, 23 Sep 2016 18:12:32 +0100
Jonathan Hunter via samba <samba at lists.samba.org> wrote:
> (I just realised I was top-posting because I'm using gmail here..
> apologies :) )
> On 23 September 2016 at 17:49, Rowland Penny via samba <
> samba at lists.samba.org> wrote:
> 
> > On Fri, 23 Sep 2016 17:38:35 +0100
> > Jonathan Hunter via samba <samba at lists.samba.org> wrote:
> > > $ sudo /usr/local/samba/bin/samba-tool testparm
> > > --parameter-name=nsupdate\ command
> > > /usr/bin/nsupdate -g
> > >
> > > But, I don't have anything called nsupdate anywhere on my
machine,
> > > which I guess is the problem.
> > > $ find / -name nsupdate 2>/dev/null
> > > $
> >
> > Well, wrong and right ;-)
> > Wrong, in that you need it for the updates and right that it comes
> > from Bind.
> >
> > You need to install it, it is called bind9utils on debian.
> >
> 
> Hmm. I just installed bind9utils but it doesn't come with
> /usr/bin/nsupdate.. However I then found the 'dnsutils' package,
which
> does! :) (debian jessie)
> 
> I can now successfully run "/usr/local/samba/sbin/samba_dnsupdate
> --verbose"!
> 
> Well, I say successfully - I am now getting many "tsig verify
failure"
> errors - but I'm further forward at least :) I'm sure I have seen
> much on the list and on the wiki regarding these errors, so when I
> get back later on I will try to figure those out..
> 
> The first error has been found, at least - and I will add the
> 'dnsutils' package to my other DCs also, as well as my build notes
:)
> 
> Many thanks
> 
> Jonathan
> 
OOPS, I knew it ended in 'utils', I just got it mixed up with dnsutils,
sorry.

Rowland

Hi,

On 23 September 2016 at 18:22, Rowland Penny via samba <
samba at lists.samba.org> wrote:
> On Fri, 23 Sep 2016 18:12:32 +0100
> Jonathan Hunter via samba <samba at lists.samba.org> wrote:
> > I can now successfully run "/usr/local/samba/sbin/samba_dnsupdate
> > --verbose"!
> >
> > Well, I say successfully - I am now getting many "tsig verify
failure"
> > errors - but I'm further forward at least :) I'm sure I have
seen
> > much on the list and on the wiki regarding these errors, so when I
> > get back later on I will try to figure those out..
>
Nearly everything I can find regarding the TSIG errors is for BIND, which
I'm not running. Mathias said in May that samba_dnsupdate doesn't work
if
using the internal DNS server, maybe this is the issue I'm having, and I
need to manually create the DNS entries that samba_dnsupdate has spotted
are missing..
https://groups.google.com/d/msg/linux.samba/7GGco_xXON8/O6iyVyMfDAAJ

I will try this later!

J
-- 
"If we knew what it was we were doing, it would not be called research,
would it?"
      - Albert Einstein

On 9/23/2016 3:02 PM, Jonathan Hunter via samba wrote:
> Hi,
>
> On 23 September 2016 at 18:22, Rowland Penny via samba <
> samba at lists.samba.org> wrote:
>
>> On Fri, 23 Sep 2016 18:12:32 +0100
>> Jonathan Hunter via samba <samba at lists.samba.org> wrote:
>>> I can now successfully run
"/usr/local/samba/sbin/samba_dnsupdate
>>> --verbose"!
>>>
>>> Well, I say successfully - I am now getting many "tsig verify
failure"
>>> errors - but I'm further forward at least :) I'm sure I
have seen
>>> much on the list and on the wiki regarding these errors, so when I
>>> get back later on I will try to figure those out..
> Nearly everything I can find regarding the TSIG errors is for BIND, which
> I'm not running. Mathias said in May that samba_dnsupdate doesn't
work if
> using the internal DNS server, maybe this is the issue I'm having, and
I
> need to manually create the DNS entries that samba_dnsupdate has spotted
> are missing..
> https://groups.google.com/d/msg/linux.samba/7GGco_xXON8/O6iyVyMfDAAJ
>
> I will try this later!
>
> J
The TSIG error you can disregard, as the updates do succeed with the 
internal DNS. This isn't a issue with Bind.

-- 
-James