thr3ads.net - samba - [Samba] DNS Update Failing [Nov 2021]

If this information is useful, please help other people find it:
Share via:

Patrick Goetz

2021-Nov-02 08:37 UTC

[Samba] DNS Update Failing

Finally, make sure /etc/resolv.conf isn't a link to a stub location (as 
configured by systemd-resolved). If it is a link, delete the link and 
create the file by hand. Primitive, but effective. <:)

On 11/1/21 05:39, L.P.H. van Belle via samba wrote:> Can also be the "resolvconf" package..
> If that's installed, or configure it properly or remove it.
> 
> 
> That should fix it.
> 
> Greetz,
> 
> Louis
>   
> 
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
>> Rowland Penny via samba
>> Verzonden: zondag 31 oktober 2021 20:22
>> Aan: samba at lists.samba.org
>> Onderwerp: Re: [Samba] DNS Update Failing
>>
>> On Sun, 2021-10-31 at 15:13 -0400, Rob Campbell via samba wrote:
>>> My /etc/resolv.conf was overwritten.  What service does this on
>>> Debian?
>>
>> Usually resolvconf or networkmanger, but it usually says at the top of
>> /etc/resolv.conf
>>
>>> I've disabled systemd-resolved already.
>>>
>>> Getting a different error now.
>>> samba_dnsupdate --verbose --all-names
>>> *29 DNS updates* and 0 DNS deletes needed
>>> Successfully obtained Kerberos ticket to DNS/DC01.home.test-
>>> server.lan as
>>> DC01$
>>> update(nsupdate): A DC01.home.test-server.lan 10.0.0.19
>>> Calling nsupdate for A DC01.home.test-server.lan 10.0.0.19 (add)
>>> Successfully obtained Kerberos ticket to DNS/DC01.home.test-
>>> server.lan as
>>> DC01$
>>> Outgoing update query:
>>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:   
0
>>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>> ;; UPDATE SECTION:
>>> DC01.home.test-server.lan. 900 IN A 10.0.0.19
>>>
>>> ; TSIG error with server: tsig indicates error
>>> update failed: NOTAUTH(BADSIG)
>>> Failed nsupdate: 2
>>> update(nsupdate): CNAME
>>> f79b5e15-ea2b-4afd-a8ca-bb16e2531521._msdcs.home.test-server.lan
>>> DC01.home.test-server.lan
>>> ...
>>>
>>
>> Try adding this line to your smb.conf:
>>
>> dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool
>>
>> Restart Samba, it usually works
>>
>> Rowland
>>
>>
>>
>> -- 
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>>
>>
> 
>

Rob Campbell

2021-Nov-02 14:24 UTC

head link

[Samba] DNS Update Failing

It is not a link and it has not been changed since the last time I
commented on it but still DNS Update has 29 failures.

[root at DC01/var/log/samba$] dig -x 10.0.0.19

; <<>> DiG 9.16.15-Debian <<>> -x 10.0.0.19
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21450
;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 0

;; QUESTION SECTION:
;19.0.0.10.in-addr.arpa. IN PTR

;; ANSWER SECTION:
19.0.0.10.in-addr.arpa. 900 IN PTR home.test-server.lan.
19.0.0.10.in-addr.arpa. 900 IN PTR dc01.home.test-server.lan.

;; AUTHORITY SECTION:
0.0.10.in-addr.arpa. 3600 IN SOA DC01.home.test-server.lan.
hostmaster.home.test-server.lan. 4 900 600 86400 3600

;; Query time: 3 msec
;; SERVER: 10.0.0.19#53(10.0.0.19)
;; WHEN: Sun Oct 31 22:03:49 EDT 2021
;; MSG SIZE  rcvd: 145

[root at DC01/var/log/samba$] dig home.test-server.lan ANY +noall +answer
home.test-server.lan. 3600 IN SOA DC01.home.test-server.lan.
hostmaster.home.test-server.lan. 179 900 600 86400 3600
home.test-server.lan. 900 IN NS dc01.home.test-server.lan.
home.test-server.lan. 900 IN A 10.0.0.19

[root at DC01/var/log/samba$] dig dc01.home.test-server.lan ANY +noall +answer
dc01.home.test-server.lan. 900 IN A 10.0.0.19

[root at DC01/var/log/samba$] dig fsdm01.home.test-server.lan ANY +noall
+answer

[root at DC01/var/log/samba$] dig dm01.home.test-server.lan ANY +noall +answer
dm01.home.test-server.lan. 3600 IN A 10.0.0.14

[root at DC01/var/log/samba$] samba_dnsupdate --verbose --all-names
IPs: ['10.0.0.19']
force update: A DC01.home.test-server.lan 10.0.0.19
force update: CNAME
f79b5e15-ea2b-4afd-a8ca-bb16e2531521._msdcs.home.test-server.lan
DC01.home.test-server.lan
force update: NS home.test-server.lan DC01.home.test-server.lan
force update: NS _msdcs.home.test-server.lan DC01.home.test-server.lan
force update: A home.test-server.lan 10.0.0.19
force update: SRV _ldap._tcp.home.test-server.lan DC01.home.test-server.lan
389
force update: SRV _ldap._tcp.dc._msdcs.home.test-server.lan
DC01.home.test-server.lan 389
force update: SRV
_ldap._tcp.3cc42946-b7ec-46c9-9760-1d885e427ca9.domains._msdcs.home.test-server.lan
DC01.home.test-server.lan 389
force update: SRV _kerberos._tcp.home.test-server.lan
DC01.home.test-server.lan 88
force update: SRV _kerberos._udp.home.test-server.lan
DC01.home.test-server.lan 88
force update: SRV _kerberos._tcp.dc._msdcs.home.test-server.lan
DC01.home.test-server.lan 88
force update: SRV _kpasswd._tcp.home.test-server.lan
DC01.home.test-server.lan 464
force update: SRV _kpasswd._udp.home.test-server.lan
DC01.home.test-server.lan 464
force update: SRV
_ldap._tcp.Default-First-Site-Name._sites.home.test-server.lan
DC01.home.test-server.lan 389
force update: SRV
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.home.test-server.lan
DC01.home.test-server.lan 389
force update: SRV
_kerberos._tcp.Default-First-Site-Name._sites.home.test-server.lan
DC01.home.test-server.lan 88
force update: SRV
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.home.test-server.lan
DC01.home.test-server.lan 88
force update: SRV _ldap._tcp.pdc._msdcs.home.test-server.lan
DC01.home.test-server.lan 389
force update: A gc._msdcs.home.test-server.lan 10.0.0.19
force update: SRV _gc._tcp.home.test-server.lan DC01.home.test-server.lan
3268
force update: SRV _ldap._tcp.gc._msdcs.home.test-server.lan
DC01.home.test-server.lan 3268
force update: SRV
_gc._tcp.Default-First-Site-Name._sites.home.test-server.lan
DC01.home.test-server.lan 3268
force update: SRV
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.home.test-server.lan
DC01.home.test-server.lan 3268
force update: A DomainDnsZones.home.test-server.lan 10.0.0.19
force update: SRV _ldap._tcp.DomainDnsZones.home.test-server.lan
DC01.home.test-server.lan 389
force update: SRV
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.home.test-server.lan
DC01.home.test-server.lan 389
force update: A ForestDnsZones.home.test-server.lan 10.0.0.19
force update: SRV _ldap._tcp.ForestDnsZones.home.test-server.lan
DC01.home.test-server.lan 389
force update: SRV
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.home.test-server.lan
DC01.home.test-server.lan 389
29 DNS updates and 0 DNS deletes needed
Successfully obtained Kerberos ticket to DNS/DC01.home.test-server.lan as
DC01$
update(nsupdate): A DC01.home.test-server.lan 10.0.0.19
Calling nsupdate for A DC01.home.test-server.lan 10.0.0.19 (add)
Successfully obtained Kerberos ticket to DNS/DC01.home.test-server.lan as
DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
DC01.home.test-server.lan. 900 IN A 10.0.0.19

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): CNAME
f79b5e15-ea2b-4afd-a8ca-bb16e2531521._msdcs.home.test-server.lan
DC01.home.test-server.lan
Calling nsupdate for CNAME
f79b5e15-ea2b-4afd-a8ca-bb16e2531521._msdcs.home.test-server.lan
DC01.home.test-server.lan (add)
Successfully obtained Kerberos ticket to DNS/DC01.home.test-server.lan as
DC01$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
f79b5e15-ea2b-4afd-a8ca-bb16e2531521._msdcs.home.test-server.lan. 900 IN
CNAME DC01.home.test-server.lan.

...

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
Failed update of 29 entries

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
In all things, Be Intentional.

On Tue, Nov 2, 2021 at 4:37 AM Patrick Goetz via samba <
samba at lists.samba.org> wrote:
> Finally, make sure /etc/resolv.conf isn't a link to a stub location (as
> configured by systemd-resolved). If it is a link, delete the link and
> create the file by hand. Primitive, but effective. <:)
>
> On 11/1/21 05:39, L.P.H. van Belle via samba wrote:
> > Can also be the "resolvconf" package..
> > If that's installed, or configure it properly or remove it.
> >
> >
> > That should fix it.
> >
> > Greetz,
> >
> > Louis
> >
> >
> >> -----Oorspronkelijk bericht-----
> >> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> >> Rowland Penny via samba
> >> Verzonden: zondag 31 oktober 2021 20:22
> >> Aan: samba at lists.samba.org
> >> Onderwerp: Re: [Samba] DNS Update Failing
> >>
> >> On Sun, 2021-10-31 at 15:13 -0400, Rob Campbell via samba wrote:
> >>> My /etc/resolv.conf was overwritten.  What service does this
on
> >>> Debian?
> >>
> >> Usually resolvconf or networkmanger, but it usually says at the
top of
> >> /etc/resolv.conf
> >>
> >>> I've disabled systemd-resolved already.
> >>>
> >>> Getting a different error now.
> >>> samba_dnsupdate --verbose --all-names
> >>> *29 DNS updates* and 0 DNS deletes needed
> >>> Successfully obtained Kerberos ticket to DNS/DC01.home.test-
> >>> server.lan as
> >>> DC01$
> >>> update(nsupdate): A DC01.home.test-server.lan 10.0.0.19
> >>> Calling nsupdate for A DC01.home.test-server.lan 10.0.0.19
(add)
> >>> Successfully obtained Kerberos ticket to DNS/DC01.home.test-
> >>> server.lan as
> >>> DC01$
> >>> Outgoing update query:
> >>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR,
id:      0
> >>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
> >>> ;; UPDATE SECTION:
> >>> DC01.home.test-server.lan. 900 IN A 10.0.0.19
> >>>
> >>> ; TSIG error with server: tsig indicates error
> >>> update failed: NOTAUTH(BADSIG)
> >>> Failed nsupdate: 2
> >>> update(nsupdate): CNAME
> >>>
f79b5e15-ea2b-4afd-a8ca-bb16e2531521._msdcs.home.test-server.lan
> >>> DC01.home.test-server.lan
> >>> ...
> >>>
> >>
> >> Try adding this line to your smb.conf:
> >>
> >> dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool
> >>
> >> Restart Samba, it usually works
> >>
> >> Rowland
> >>
> >>
> >>
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> >>
> >>
> >
> >
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

L.P.H. van Belle

2021-Nov-02 14:36 UTC

head link

[Samba] DNS Update Failing

Well, you found your problem, at least i see what your problem is.
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rob 
> Campbell via samba
> Verzonden: dinsdag 2 november 2021 15:24
> Aan: Patrick Goetz
> CC: sambalist
> Onderwerp: Re: [Samba] DNS Update Failing
> 
> It is not a link and it has not been changed since the last time I
> commented on it but still DNS Update has 29 failures.
> 
> [root at DC01/var/log/samba$] dig -x 10.0.0.19
> 
> ; <<>> DiG 9.16.15-Debian <<>> -x 10.0.0.19
> ;; global options: +cmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 21450
> ;; flags: qr aa rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 1, 
> ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;19.0.0.10.in-addr.arpa. IN PTR
> 
> ;; ANSWER SECTION:
> 19.0.0.10.in-addr.arpa. 900 IN PTR home.test-server.lan.
> 19.0.0.10.in-addr.arpa. 900 IN PTR dc01.home.test-server.lan. 
Remove the "home.test-server.lan" entry from the reverse zone
Reboot the server and check again. 


Greetz, 

Louis

samba - Nov 2021 - DNS Update Failing

[Samba] DNS Update Failing

[Samba] DNS Update Failing

[Samba] DNS Update Failing