samba - Jun 2022 - samba_dlz: insufficient access rights ?

Normally we join to domain windows box renaming it and joining at the same
time.

Some week ago a computer seems have joined *before* the rename, so the computer
get the new name but computer account was created with old name.
I've de-joined the box, deleted the compuer account and re-joined it.

But now, for that computer, i catch in samba DC log:

 Jun  6 08:35:27 vdcsv1 named[669]: samba_dlz: disallowing update of
signer=MADARA\$\@AD.FVG.LNF.IT name=madara.ad.fvg.lnf.it type=AAAA
error=insufficient access rights
 Jun  6 08:35:27 vdcsv1 named[669]: client 10.5.2.210#53617/key
MADARA\$\@AD.FVG.LNF.IT: updating zone 'ad.fvg.lnf.it/NONE': update
failed: rejected by secure update (REFUSED)

How to fix that?! Thanks.

-- 
  ? facile battere le ortiche col pisello degli altri!
							(Diego)

With windows DNS tool, goto this record, open it and check permissions. 

Does "HOSTNAME$" exist in the permissions? If not add it with full
control.

See of that helps 
If not, try 
sudo samba_upgradedns --dns-backend=BIND9_DLZ 


Greetz, 

Louis
> -----Oorspronkelijk bericht-----
> Van: samba <samba-bounces at lists.samba.org> Namens Marco Gaiarin
via
> samba
> Verzonden: maandag 6 juni 2022 09:51
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] samba_dlz: insufficient access rights ?
> 
> 
> Normally we join to domain windows box renaming it and joining at the same
> time.
> 
> Some week ago a computer seems have joined *before* the rename, so the
> computer get the new name but computer account was created with old
> name.
> I've de-joined the box, deleted the compuer account and re-joined it.
> 
> But now, for that computer, i catch in samba DC log:
> 
>  Jun  6 08:35:27 vdcsv1 named[669]: samba_dlz: disallowing update of
> signer=MADARA\$\@AD.FVG.LNF.IT name=madara.ad.fvg.lnf.it type=AAAA
> error=insufficient access rights  Jun  6 08:35:27 vdcsv1 named[669]:
client
> 10.5.2.210#53617/key MADARA\$\@AD.FVG.LNF.IT: updating zone
> 'ad.fvg.lnf.it/NONE': update failed: rejected by secure update
(REFUSED)
> 
> How to fix that?! Thanks.
> 
> --
>   ? facile battere le ortiche col pisello degli altri!
> 							(Diego)
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba