Joachim Lindenberg
2019-Aug-12 18:49 UTC
[Samba] dns_tkey_gssnegotiate: TKEY is unacceptable
I installed a third DC today. Replication works find, but as systemctl status samba-ad-dc showed an error w.r.t. dnsupdate I was running samba_dnsupdate ?verbose. Below is the output. It looks like there are some missing DNS records, but what are potential causes of this error: dns_tkey_gssnegotiate: TKEY is unacceptable I already checked what?s listed @ https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable and https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable#Verifying_That_the_BIND_AD_Account_Exists_for_the_DC. What else? Thanks, Joachim root at python:/home/joachim# samba_dnsupdate --verbose IPs: ['192.168.177.69'] Looking for DNS entry A python.samba.lindenberg.one 192.168.177.69 as python.samba.lindenberg.one. Looking for DNS entry NS samba.lindenberg.one python.samba.lindenberg.one as samba.lindenberg.one. Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS samba.lindenberg.one python.samba.lindenberg.one need update: NS samba.lindenberg.one python.samba.lindenberg.one Looking for DNS entry NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one as _msdcs.samba.lindenberg.one. Lookup of _msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one need update: NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one Looking for DNS entry A samba.lindenberg.one 192.168.177.69 as samba.lindenberg.one. Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A samba.lindenberg.one 192.168.177.69 need update: A samba.lindenberg.one 192.168.177.69 Looking for DNS entry SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.samba.lindenberg.one. Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 Lookup of _ldap._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 need update: SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 Looking for DNS entry SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.dc._msdcs.samba.lindenberg.one. Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Lookup of _ldap._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 need update: SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Looking for DNS entry SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Lookup of _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 need update: SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Looking for DNS entry SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.samba.lindenberg.one. Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 Lookup of _kerberos._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 need update: SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 Looking for DNS entry SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._udp.samba.lindenberg.one. Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 Lookup of _kerberos._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 need update: SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.dc._msdcs.samba.lindenberg.one. Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 Lookup of _kerberos._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 need update: SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 Looking for DNS entry SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._tcp.samba.lindenberg.one. Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 Lookup of _kpasswd._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 need update: SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 Looking for DNS entry SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._udp.samba.lindenberg.one. Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 Lookup of _kpasswd._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 need update: SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 Looking for DNS entry CNAME f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one python.samba.lindenberg.one as f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one. Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 Lookup of _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 need update: SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Lookup of _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 need update: SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 Lookup of _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 Lookup of _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 Looking for DNS entry A gc._msdcs.samba.lindenberg.one 192.168.177.69 as gc._msdcs.samba.lindenberg.one. Lookup of gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A gc._msdcs.samba.lindenberg.one 192.168.177.69 need update: A gc._msdcs.samba.lindenberg.one 192.168.177.69 Looking for DNS entry SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.samba.lindenberg.one. Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 Lookup of _gc._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 need update: SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 Looking for DNS entry SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.gc._msdcs.samba.lindenberg.one. Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 Lookup of _ldap._tcp.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 need update: SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 Looking for DNS entry SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 Lookup of _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 need update: SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 Lookup of _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 need update: SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 Looking for DNS entry A DomainDnsZones.samba.lindenberg.one 192.168.177.69 as DomainDnsZones.samba.lindenberg.one. Lookup of DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A DomainDnsZones.samba.lindenberg.one 192.168.177.69 need update: A DomainDnsZones.samba.lindenberg.one 192.168.177.69 Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.DomainDnsZones.samba.lindenberg.one. Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Lookup of _ldap._tcp.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 need update: SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Lookup of _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 need update: SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Looking for DNS entry A ForestDnsZones.samba.lindenberg.one 192.168.177.69 as ForestDnsZones.samba.lindenberg.one. Lookup of ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A ForestDnsZones.samba.lindenberg.one 192.168.177.69 need update: A ForestDnsZones.samba.lindenberg.one 192.168.177.69 Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.ForestDnsZones.samba.lindenberg.one. Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Lookup of _ldap._tcp.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 need update: SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Lookup of _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 need update: SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 26 DNS updates and 0 DNS deletes needed Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ update(nsupdate): NS samba.lindenberg.one python.samba.lindenberg.one Calling nsupdate for NS samba.lindenberg.one python.samba.lindenberg.one (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: samba.lindenberg.one. 900 IN NS python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one Calling nsupdate for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _msdcs.samba.lindenberg.one. 900 IN NS python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): A samba.lindenberg.one 192.168.177.69 Calling nsupdate for A samba.lindenberg.one 192.168.177.69 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: samba.lindenberg.one. 900 IN A 192.168.177.69 dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 Calling nsupdate for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Calling nsupdate for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Calling nsupdate for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 Calling nsupdate for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._tcp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 Calling nsupdate for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._udp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 Calling nsupdate for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kpasswd._tcp.samba.lindenberg.one. 900 IN SRV 0 100 464 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 Calling nsupdate for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kpasswd._udp.samba.lindenberg.one. 900 IN SRV 0 100 464 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): A gc._msdcs.samba.lindenberg.one 192.168.177.69 Calling nsupdate for A gc._msdcs.samba.lindenberg.one 192.168.177.69 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: gc._msdcs.samba.lindenberg.one. 900 IN A 192.168.177.69 dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 Calling nsupdate for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _gc._tcp.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 Calling nsupdate for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 Calling nsupdate for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): A DomainDnsZones.samba.lindenberg.one 192.168.177.69 Calling nsupdate for A DomainDnsZones.samba.lindenberg.one 192.168.177.69 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: DomainDnsZones.samba.lindenberg.one. 900 IN A 192.168.177.69 dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Calling nsupdate for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): A ForestDnsZones.samba.lindenberg.one 192.168.177.69 Calling nsupdate for A ForestDnsZones.samba.lindenberg.one 192.168.177.69 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: ForestDnsZones.samba.lindenberg.one. 900 IN A 192.168.177.69 dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Calling nsupdate for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. dns_tkey_gssnegotiate: TKEY is unacceptable Failed nsupdate: 1 Failed update of 26 entries root at python:/home/joachim#
On 12/08/2019 19:49, Joachim Lindenberg via samba wrote:> I installed a third DC today. Replication works find, but as systemctl status samba-ad-dc showed an error w.r.t. dnsupdate I was running samba_dnsupdate ?verbose. > > Below is the output. It looks like there are some missing DNS records, but what are potential causes of this error: dns_tkey_gssnegotiate: TKEY is unacceptable > > > > I already checked what?s listed @ https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable and https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable#Verifying_That_the_BIND_AD_Account_Exists_for_the_DC. > > What else? > > Thanks, Joachim > > > > root at python:/home/joachim# samba_dnsupdate --verbose > > IPs: ['192.168.177.69'] > > Looking for DNS entry A python.samba.lindenberg.one 192.168.177.69 as python.samba.lindenberg.one. > > Looking for DNS entry NS samba.lindenberg.one python.samba.lindenberg.one as samba.lindenberg.one. > > Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS samba.lindenberg.one python.samba.lindenberg.one > > need update: NS samba.lindenberg.one python.samba.lindenberg.one > > Looking for DNS entry NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one as _msdcs.samba.lindenberg.one. > > Lookup of _msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one > > need update: NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one > > Looking for DNS entry A samba.lindenberg.one 192.168.177.69 as samba.lindenberg.one. > > Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A samba.lindenberg.one 192.168.177.69 > > need update: A samba.lindenberg.one 192.168.177.69 > > Looking for DNS entry SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.samba.lindenberg.one. > > Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 > > Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 > > Lookup of _ldap._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 > > need update: SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 > > Looking for DNS entry SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.dc._msdcs.samba.lindenberg.one. > > Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Lookup of _ldap._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > need update: SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Looking for DNS entry SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. > > Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Lookup of _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > need update: SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Looking for DNS entry SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.samba.lindenberg.one. > > Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 > > Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 > > Lookup of _kerberos._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 > > need update: SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 > > Looking for DNS entry SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._udp.samba.lindenberg.one. > > Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 > > Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 > > Lookup of _kerberos._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 > > need update: SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 > > Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.dc._msdcs.samba.lindenberg.one. > > Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > Lookup of _kerberos._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > need update: SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > Looking for DNS entry SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._tcp.samba.lindenberg.one. > > Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 > > Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 > > Lookup of _kpasswd._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 > > need update: SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 > > Looking for DNS entry SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._udp.samba.lindenberg.one. > > Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 > > Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 > > Lookup of _kpasswd._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 > > need update: SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 > > Looking for DNS entry CNAME f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one python.samba.lindenberg.one as f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one. > > Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. > > Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 > > Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 > > Lookup of _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 > > need update: SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 > > Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. > > Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Lookup of _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > need update: SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. > > Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 > > Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 > > Lookup of _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 > > need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 > > Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. > > Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > Lookup of _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > Looking for DNS entry A gc._msdcs.samba.lindenberg.one 192.168.177.69 as gc._msdcs.samba.lindenberg.one. > > Lookup of gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A gc._msdcs.samba.lindenberg.one 192.168.177.69 > > need update: A gc._msdcs.samba.lindenberg.one 192.168.177.69 > > Looking for DNS entry SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.samba.lindenberg.one. > > Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Lookup of _gc._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 > > need update: SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Looking for DNS entry SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.gc._msdcs.samba.lindenberg.one. > > Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Lookup of _ldap._tcp.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > need update: SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Looking for DNS entry SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. > > Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Lookup of _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 > > need update: SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. > > Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Lookup of _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > need update: SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Looking for DNS entry A DomainDnsZones.samba.lindenberg.one 192.168.177.69 as DomainDnsZones.samba.lindenberg.one. > > Lookup of DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A DomainDnsZones.samba.lindenberg.one 192.168.177.69 > > need update: A DomainDnsZones.samba.lindenberg.one 192.168.177.69 > > Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.DomainDnsZones.samba.lindenberg.one. > > Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Lookup of _ldap._tcp.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > need update: SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. > > Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Lookup of _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > need update: SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Looking for DNS entry A ForestDnsZones.samba.lindenberg.one 192.168.177.69 as ForestDnsZones.samba.lindenberg.one. > > Lookup of ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A ForestDnsZones.samba.lindenberg.one 192.168.177.69 > > need update: A ForestDnsZones.samba.lindenberg.one 192.168.177.69 > > Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.ForestDnsZones.samba.lindenberg.one. > > Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Lookup of _ldap._tcp.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > need update: SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. > > Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Lookup of _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > need update: SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > 26 DNS updates and 0 DNS deletes needed > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > update(nsupdate): NS samba.lindenberg.one python.samba.lindenberg.one > > Calling nsupdate for NS samba.lindenberg.one python.samba.lindenberg.one (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > samba.lindenberg.one. 900 IN NS python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one > > Calling nsupdate for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _msdcs.samba.lindenberg.one. 900 IN NS python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): A samba.lindenberg.one 192.168.177.69 > > Calling nsupdate for A samba.lindenberg.one 192.168.177.69 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > samba.lindenberg.one. 900 IN A 192.168.177.69 > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 > > Calling nsupdate for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Calling nsupdate for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Calling nsupdate for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 > > Calling nsupdate for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _kerberos._tcp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 > > Calling nsupdate for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _kerberos._udp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _kerberos._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 > > Calling nsupdate for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _kpasswd._tcp.samba.lindenberg.one. 900 IN SRV 0 100 464 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 > > Calling nsupdate for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _kpasswd._udp.samba.lindenberg.one. 900 IN SRV 0 100 464 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 > > Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 > > Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 > > Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 > > Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): A gc._msdcs.samba.lindenberg.one 192.168.177.69 > > Calling nsupdate for A gc._msdcs.samba.lindenberg.one 192.168.177.69 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > gc._msdcs.samba.lindenberg.one. 900 IN A 192.168.177.69 > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Calling nsupdate for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _gc._tcp.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Calling nsupdate for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Calling nsupdate for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 > > Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): A DomainDnsZones.samba.lindenberg.one 192.168.177.69 > > Calling nsupdate for A DomainDnsZones.samba.lindenberg.one 192.168.177.69 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > DomainDnsZones.samba.lindenberg.one. 900 IN A 192.168.177.69 > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Calling nsupdate for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): A ForestDnsZones.samba.lindenberg.one 192.168.177.69 > > Calling nsupdate for A ForestDnsZones.samba.lindenberg.one 192.168.177.69 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > ForestDnsZones.samba.lindenberg.one. 900 IN A 192.168.177.69 > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Calling nsupdate for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 > > Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) > > Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ > > Outgoing update query: > > ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 > > ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 > > ;; UPDATE SECTION: > > _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. > > > > dns_tkey_gssnegotiate: TKEY is unacceptable > > Failed nsupdate: 1 > > Failed update of 26 entries > > root at python:/home/joachim# >Start by reading this: https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable Rowland
On 12/08/2019 20:19, Joachim Lindenberg wrote:> Hi Rowland, > did read, actually cited the page it myself, but didn?t help me to identify the cause. > Kerberos credentials exists, dns users exists, file permission are correct. So either that is insufficient or I am blind.. > Regards, Joachim > > -----Urspr?ngliche Nachricht----- > Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland penny via samba > Gesendet: Monday, 12 August 2019 21:14 > An: samba at lists.samba.org > Betreff: Re: [Samba] dns_tkey_gssnegotiate: TKEY is unacceptable > > On 12/08/2019 19:49, Joachim Lindenberg via samba wrote: >> I installed a third DC today. Replication works find, but as systemctl status samba-ad-dc showed an error w.r.t. dnsupdate I was running samba_dnsupdate ?verbose. >> >> Below is the output. It looks like there are some missing DNS records, but what are potential causes of this error: dns_tkey_gssnegotiate: TKEY is unacceptable >> >> >> >> I already checked what?s listed @ https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable and https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable#Verifying_That_the_BIND_AD_Account_Exists_for_the_DC. >> >> What else? >> >> Thanks, Joachim >> >> >> >> root at python:/home/joachim# samba_dnsupdate --verbose >> >> IPs: ['192.168.177.69'] >> >> Looking for DNS entry A python.samba.lindenberg.one 192.168.177.69 as python.samba.lindenberg.one. >> >> Looking for DNS entry NS samba.lindenberg.one python.samba.lindenberg.one as samba.lindenberg.one. >> >> Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS samba.lindenberg.one python.samba.lindenberg.one >> >> need update: NS samba.lindenberg.one python.samba.lindenberg.one >> >> Looking for DNS entry NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one as _msdcs.samba.lindenberg.one. >> >> Lookup of _msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one >> >> need update: NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one >> >> Looking for DNS entry A samba.lindenberg.one 192.168.177.69 as samba.lindenberg.one. >> >> Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A samba.lindenberg.one 192.168.177.69 >> >> need update: A samba.lindenberg.one 192.168.177.69 >> >> Looking for DNS entry SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.samba.lindenberg.one. >> >> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Lookup of _ldap._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> need update: SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Looking for DNS entry SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.dc._msdcs.samba.lindenberg.one. >> >> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Lookup of _ldap._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> need update: SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Looking for DNS entry SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. >> >> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Lookup of _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> need update: SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Looking for DNS entry SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.samba.lindenberg.one. >> >> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Lookup of _kerberos._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> need update: SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Looking for DNS entry SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._udp.samba.lindenberg.one. >> >> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Lookup of _kerberos._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> need update: SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.dc._msdcs.samba.lindenberg.one. >> >> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Lookup of _kerberos._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> need update: SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Looking for DNS entry SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._tcp.samba.lindenberg.one. >> >> Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> Lookup of _kpasswd._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> need update: SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> Looking for DNS entry SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._udp.samba.lindenberg.one. >> >> Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> Lookup of _kpasswd._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> need update: SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> Looking for DNS entry CNAME f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one python.samba.lindenberg.one as f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one. >> >> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. >> >> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Lookup of _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. >> >> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Lookup of _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. >> >> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Lookup of _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. >> >> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Lookup of _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Looking for DNS entry A gc._msdcs.samba.lindenberg.one 192.168.177.69 as gc._msdcs.samba.lindenberg.one. >> >> Lookup of gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A gc._msdcs.samba.lindenberg.one 192.168.177.69 >> >> need update: A gc._msdcs.samba.lindenberg.one 192.168.177.69 >> >> Looking for DNS entry SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.samba.lindenberg.one. >> >> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Lookup of _gc._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> need update: SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Looking for DNS entry SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.gc._msdcs.samba.lindenberg.one. >> >> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Lookup of _ldap._tcp.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> need update: SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Looking for DNS entry SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. >> >> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Lookup of _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> need update: SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. >> >> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Lookup of _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Looking for DNS entry A DomainDnsZones.samba.lindenberg.one 192.168.177.69 as DomainDnsZones.samba.lindenberg.one. >> >> Lookup of DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A DomainDnsZones.samba.lindenberg.one 192.168.177.69 >> >> need update: A DomainDnsZones.samba.lindenberg.one 192.168.177.69 >> >> Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.DomainDnsZones.samba.lindenberg.one. >> >> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Lookup of _ldap._tcp.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> need update: SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. >> >> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Lookup of _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Looking for DNS entry A ForestDnsZones.samba.lindenberg.one 192.168.177.69 as ForestDnsZones.samba.lindenberg.one. >> >> Lookup of ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A ForestDnsZones.samba.lindenberg.one 192.168.177.69 >> >> need update: A ForestDnsZones.samba.lindenberg.one 192.168.177.69 >> >> Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.ForestDnsZones.samba.lindenberg.one. >> >> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Lookup of _ldap._tcp.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> need update: SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. >> >> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Lookup of _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> 26 DNS updates and 0 DNS deletes needed >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> update(nsupdate): NS samba.lindenberg.one python.samba.lindenberg.one >> >> Calling nsupdate for NS samba.lindenberg.one python.samba.lindenberg.one (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> samba.lindenberg.one. 900 IN NS python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one >> >> Calling nsupdate for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _msdcs.samba.lindenberg.one. 900 IN NS python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): A samba.lindenberg.one 192.168.177.69 >> >> Calling nsupdate for A samba.lindenberg.one 192.168.177.69 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> samba.lindenberg.one. 900 IN A 192.168.177.69 >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Calling nsupdate for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Calling nsupdate for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Calling nsupdate for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Calling nsupdate for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _kerberos._tcp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Calling nsupdate for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _kerberos._udp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _kerberos._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> Calling nsupdate for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _kpasswd._tcp.samba.lindenberg.one. 900 IN SRV 0 100 464 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 >> >> Calling nsupdate for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _kpasswd._udp.samba.lindenberg.one. 900 IN SRV 0 100 464 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 >> >> Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): A gc._msdcs.samba.lindenberg.one 192.168.177.69 >> >> Calling nsupdate for A gc._msdcs.samba.lindenberg.one 192.168.177.69 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> gc._msdcs.samba.lindenberg.one. 900 IN A 192.168.177.69 >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Calling nsupdate for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _gc._tcp.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Calling nsupdate for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Calling nsupdate for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 >> >> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): A DomainDnsZones.samba.lindenberg.one 192.168.177.69 >> >> Calling nsupdate for A DomainDnsZones.samba.lindenberg.one 192.168.177.69 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> DomainDnsZones.samba.lindenberg.one. 900 IN A 192.168.177.69 >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Calling nsupdate for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): A ForestDnsZones.samba.lindenberg.one 192.168.177.69 >> >> Calling nsupdate for A ForestDnsZones.samba.lindenberg.one 192.168.177.69 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> ForestDnsZones.samba.lindenberg.one. 900 IN A 192.168.177.69 >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Calling nsupdate for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 >> >> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add) >> >> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$ >> >> Outgoing update query: >> >> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 >> >> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 >> >> ;; UPDATE SECTION: >> >> _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one. >> >> >> >> dns_tkey_gssnegotiate: TKEY is unacceptable >> >> Failed nsupdate: 1 >> >> Failed update of 26 entries >> >> root at python:/home/joachim# >> > Start by reading this: > https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable > > Rowland > > >OK, try the update over RPC, add this to smb.conf on the new DC: dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool restart Samba and see what happens. Rowland
Joachim Lindenberg
2019-Aug-12 19:43 UTC
[Samba] dns_tkey_gssnegotiate: TKEY is unacceptable
Ok, with the smb.conf change and then samba_dnsupdate --rpc-server-ip=192.168.177.19 --use-samba-tool --verbose I got no error messages. Shall I now revert the change? Monitor? At present samba_dnsupdate has nothing to do.. Thanks, Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland penny via samba Gesendet: Monday, 12 August 2019 21:26 An: sambalist <samba at lists.samba.org> Betreff: Re: [Samba] dns_tkey_gssnegotiate: TKEY is unacceptable On 12/08/2019 20:19, Joachim Lindenberg wrote:> Hi Rowland, > did read, actually cited the page it myself, but didn?t help me to identify the cause. > Kerberos credentials exists, dns users exists, file permission are correct. So either that is insufficient or I am blind.. > Regards, Joachim > > -----Urspr?ngliche Nachricht----- > Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland penny via samba > Gesendet: Monday, 12 August 2019 21:14 > An: samba at lists.samba.org > Betreff: Re: [Samba] dns_tkey_gssnegotiate: TKEY is unacceptable > > On 12/08/2019 19:49, Joachim Lindenberg via samba wrote: >> I installed a third DC today. Replication works find, but as systemctl status samba-ad-dc showed an error w.r.t. dnsupdate I was running samba_dnsupdate ?verbose. >> >> Below is the output. It looks like there are some missing DNS records, but what are potential causes of this error: dns_tkey_gssnegotiate: TKEY is unacceptable >> >> >> >> I already checked what?s listed @ https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable and https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable#Verifying_That_the_BIND_AD_Account_Exists_for_the_DC. >> >> What else? >> >> Thanks, Joachim >> > Start by reading this: > https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable > > Rowland > > >OK, try the update over RPC, add this to smb.conf on the new DC: dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool restart Samba and see what happens. Rowland -- To unsubscribe from this list go to the following URL and read the instructions: https://lists.samba.org/mailman/options/samba