samba - Aug 2019 - DNS Update Failed

On 03/08/2019 13:31, Marcio Demetrio Bacci via samba
wrote:
> Hi
>
> I disabled even the windows server firewall to see if this is what it was
> blocking, but it didn't solve it.
>
> There appear to be Kerberos key errors, but the kinit administrator command
> works correctly.
>
> /usr/sbin/samba_dnsupdate:; TSIG error with server: tsig verify failure
>
What OS ?

Is the DC using itself as its nameserver in /etc/resolv.conf ?

Are you using the internal dns server or Bind9 on the Samba AD DC ?

Rowland

Hi,
>What OS ?
On Primary DC is Windows Server 2008.
>Is the DC using itself as its nameserver in /etc/resolv.conf ?
I'm using the ip address of primary DC Windows Server 2008 and ip address
of my Samba 4 DC

 cat /etc/resolv.conf
domain empresa.com.br
search empresa.com.br
nameserver 10.133.84.135 # Primary DC Windows Server 2008
nameserver 192.168.1.20 # Samba 4 DC

>Are you using the internal dns server or Bind9 on the Samba AD DC ?
My Samba 4 is using Internal DNS.

Regards,

M?rcio Bacci

Em s?b, 3 de ago de 2019 ?s 09:52, Rowland penny via samba <
samba at lists.samba.org> escreveu:
> On 03/08/2019 13:31, Marcio Demetrio Bacci via samba wrote:
> > Hi
> >
> > I disabled even the windows server firewall to see if this is what it
was
> > blocking, but it didn't solve it.
> >
> > There appear to be Kerberos key errors, but the kinit administrator
> command
> > works correctly.
> >
> > /usr/sbin/samba_dnsupdate:; TSIG error with server: tsig verify
failure
> >
> What OS ?
>
> Is the DC using itself as its nameserver in /etc/resolv.conf ?
>
> Are you using the internal dns server or Bind9 on the Samba AD DC ?
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On 03/08/2019 14:10, Marcio Demetrio Bacci wrote:
> Hi,
>
> >What OS ?
> On Primary DC is Windows Server 2008.
I actually meant on the Samba AD DC ;-)
>
> >Is the DC using itself as its nameserver in /etc/resolv.conf ?
> I'm using the ip address of primary DC Windows Server 2008 and ip 
> address of my Samba 4 DC
Well give up doing that, make /etc/resolv.conf look like this:

search empresa.com.br
nameserver 192.168.1.20

Rowland