Gary Dale
2023-Apr-26 11:24 UTC
[Samba] samba_dnsupdate --verbose --all-names gives lots of "update failed: NOTAUTH(BADSIG)"
I'm trying to find out if my Samba 4.17.7 domain controller's DNS is working properly. I came across the wiki at https://wiki.samba.org/index.php/Testing_Dynamic_DNS_Updates and got the output below. I havethe tests at https://wiki.samba.org/index.php/Linux_and_Unix_DNS_Configuration and my computers all pass all of them. eg: root at transponder:~# nslookup DC1.home.rahim-dale.org Server:???????? 192.168.1.13 Address:??????? 192.168.1.13#53 Name:?? DC1.home.rahim-dale.org Address: 192.168.1.13 root at transponder:~# nslookup 192.168.1.13 13.1.168.192.in-addr.arpa?????? name = dc1.home.rahim-dale.org. root at transponder:~# host 192.168.1.13 13.1.168.192.in-addr.arpa domain name pointer dc1.home.rahim-dale.org. root at transponder:~# nslookup > set type=SRV > _ldap._tcp.home.rahim-dale.org ;; communications error to 192.168.1.13#53: timed out Server:???????? 192.168.1.13 Address:??????? 192.168.1.13#53 _ldap._tcp.home.rahim-dale.org? service = 0 100 389 dc1.home.rahim-dale.org. > exit I do note the timeout error that shows up when I run the commands from transponder but not from my file & print server or DC. Should I be concerned about it? This is the dnsupdate output. After the first bit, I get a lot of repetitive errors about "update failed: NOTAUTH(BADSIG)". root at DC1:~# samba_dnsupdate --verbose --all-names IPs: ['192.168.1.13'] force update: A DC1.home.rahim-dale.org 192.168.1.13 force update: CNAME f3edf8e0-d102-4266-a7a0-1c3c6b01479e._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org force update: NS home.rahim-dale.org DC1.home.rahim-dale.org force update: NS _msdcs.home.rahim-dale.org DC1.home.rahim-dale.org force update: A home.rahim-dale.org 192.168.1.13 force update: SRV _ldap._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 389 force update: SRV _ldap._tcp.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 389 force update: SRV _ldap._tcp.fbab7106-45cf-47da-9e89-25243cd67a61.domains._msdcs.home.rahim-dale.org DC1.home.rahim-da le.org 389 force update: SRV _kerberos._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 88 force update: SRV _kerberos._udp.home.rahim-dale.org DC1.home.rahim-dale.org 88 force update: SRV _kerberos._tcp.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 88 force update: SRV _kpasswd._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 464 force update: SRV _kpasswd._udp.home.rahim-dale.org DC1.home.rahim-dale.org 464 force update: SRV _ldap._tcp.Default-First-Site-Name._sites.home.rahim-dale.org DC1.home.rahim-dale.org 389 force update: SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 389 force update: SRV _kerberos._tcp.Default-First-Site-Name._sites.home.rahim-dale.org DC1.home.rahim-dale.org 88 force update: SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 88 force update: SRV _ldap._tcp.pdc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 389 force update: A gc._msdcs.home.rahim-dale.org 192.168.1.13 force update: SRV _gc._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 3268 force update: SRV _ldap._tcp.gc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 3268 force update: SRV _gc._tcp.Default-First-Site-Name._sites.home.rahim-dale.org DC1.home.rahim-dale.org 3268 force update: SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 3268 force update: A DomainDnsZones.home.rahim-dale.org 192.168.1.13 force update: SRV _ldap._tcp.DomainDnsZones.home.rahim-dale.org DC1.home.rahim-dale.org 389 force update: SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.home.rahim-dale.org DC1.home.rahim-dale.org 389 force update: A ForestDnsZones.home.rahim-dale.org 192.168.1.13 force update: SRV _ldap._tcp.ForestDnsZones.home.rahim-dale.org DC1.home.rahim-dale.org 389 force update: SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.home.rahim-dale.org DC1.home.rahim-dale.org 389 29 DNS updates and 0 DNS deletes needed Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ update(nsupdate): A DC1.home.rahim-dale.org 192.168.1.13 Calling nsupdate for A DC1.home.rahim-dale.org 192.168.1.13 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: DC1.home.rahim-dale.org. 900 ???IN ?????A ??????192.168.1.13 ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): CNAME f3edf8e0-d102-4266-a7a0-1c3c6b01479e._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org Calling nsupdate for CNAME f3edf8e0-d102-4266-a7a0-1c3c6b01479e._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org (ad d) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: f3edf8e0-d102-4266-a7a0-1c3c6b01479e._msdcs.home.rahim-dale.org. 900 IN CNAME DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): NS home.rahim-dale.org DC1.home.rahim-dale.org Calling nsupdate for NS home.rahim-dale.org DC1.home.rahim-dale.org (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: home.rahim-dale.org. ???900 ????IN ?????NS ?????DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): NS _msdcs.home.rahim-dale.org DC1.home.rahim-dale.org Calling nsupdate for NS _msdcs.home.rahim-dale.org DC1.home.rahim-dale.org (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _msdcs.home.rahim-dale.org. 900 IN ?????NS ?????DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): A home.rahim-dale.org 192.168.1.13 Calling nsupdate for A home.rahim-dale.org 192.168.1.13 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: home.rahim-dale.org. ???900 ????IN ?????A ??????192.168.1.13 ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 389 Calling nsupdate for SRV _ldap._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 389 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.home.rahim-dale.org. 900 IN ?SRV ????0 100 389 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 389 Calling nsupdate for SRV _ldap._tcp.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 389 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.dc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 389 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.fbab7106-45cf-47da-9e89-25243cd67a61.domains._msdcs.home.rahim-dale.org DC1.home.rahi m-dale.org 389 Calling nsupdate for SRV _ldap._tcp.fbab7106-45cf-47da-9e89-25243cd67a61.domains._msdcs.home.rahim-dale.org DC1.home.r ahim-dale.org 389 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.fbab7106-45cf-47da-9e89-25243cd67a61.domains._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 389 DC1.home.rahi m-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _kerberos._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 88 Calling nsupdate for SRV _kerberos._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 88 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._tcp.home.rahim-dale.org. 900 IN SRV ?0 100 88 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _kerberos._udp.home.rahim-dale.org DC1.home.rahim-dale.org 88 Calling nsupdate for SRV _kerberos._udp.home.rahim-dale.org DC1.home.rahim-dale.org 88 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._udp.home.rahim-dale.org. 900 IN SRV ?0 100 88 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _kerberos._tcp.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 88 Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 88 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._tcp.dc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 88 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _kpasswd._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 464 Calling nsupdate for SRV _kpasswd._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 464 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kpasswd._tcp.home.rahim-dale.org. 900 IN SRV ??0 100 464 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _kpasswd._udp.home.rahim-dale.org DC1.home.rahim-dale.org 464 Calling nsupdate for SRV _kpasswd._udp.home.rahim-dale.org DC1.home.rahim-dale.org 464 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kpasswd._udp.home.rahim-dale.org. 900 IN SRV ??0 100 464 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.home.rahim-dale.org DC1.home.rahim-dale.org 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.home.rahim-dale.org DC1.home.rahim-dale.org 389 (ad d) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.home.rahim-dale.org. 900 IN SRV 0 100 389 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.o rg 389 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 389 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.home.rahim-dale.org DC1.home.rahim-dale.org 88 Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.home.rahim-dale.org DC1.home.rahim-dale.org 88 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._tcp.Default-First-Site-Name._sites.home.rahim-dale.org. 900 IN SRV 0 100 88 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org DC1.home.rahim-dale. org 88 Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org DC1.home.rahim-da le.org 88 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 88 DC1.home.rahim-dale.o rg. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.pdc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 389 Calling nsupdate for SRV _ldap._tcp.pdc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 389 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.pdc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 389 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): A gc._msdcs.home.rahim-dale.org 192.168.1.13 Calling nsupdate for A gc._msdcs.home.rahim-dale.org 192.168.1.13 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: gc._msdcs.home.rahim-dale.org. 900 IN ??A ??????192.168.1.13 ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _gc._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 3268 Calling nsupdate for SRV _gc._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 3268 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _gc._tcp.home.rahim-dale.org. 900 IN ???SRV ????0 100 3268 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.gc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 3268 Calling nsupdate for SRV _ldap._tcp.gc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 3268 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.gc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 3268 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _gc._tcp.Default-First-Site-Name._sites.home.rahim-dale.org DC1.home.rahim-dale.org 3268 Calling nsupdate for SRV _gc._tcp.Default-First-Site-Name._sites.home.rahim-dale.org DC1.home.rahim-dale.org 3268 (add ) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _gc._tcp.Default-First-Site-Name._sites.home.rahim-dale.org. 900 IN SRV 0 100 3268 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.org 3268 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.home.rahim-dale.org DC1.home.rahim-dale.o rg 3268 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 3268 DC1.home.rahim-dale.org . ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): A DomainDnsZones.home.rahim-dale.org 192.168.1.13 Calling nsupdate for A DomainDnsZones.home.rahim-dale.org 192.168.1.13 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: DomainDnsZones.home.rahim-dale.org. 900 IN A ???192.168.1.13 ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.DomainDnsZones.home.rahim-dale.org DC1.home.rahim-dale.org 389 Calling nsupdate for SRV _ldap._tcp.DomainDnsZones.home.rahim-dale.org DC1.home.rahim-dale.org 389 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.DomainDnsZones.home.rahim-dale.org. 900 IN SRV 0 100 389 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.home.rahim-dale.org DC1.home.rahim-dale .org 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.home.rahim-dale.org DC1.home.rahim-d ale.org 389 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.home.rahim-dale.org. 900 IN SRV 0 100 389 DC1.home.rahim-dale .org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): A ForestDnsZones.home.rahim-dale.org 192.168.1.13 Calling nsupdate for A ForestDnsZones.home.rahim-dale.org 192.168.1.13 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: ForestDnsZones.home.rahim-dale.org. 900 IN A ???192.168.1.13 ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.ForestDnsZones.home.rahim-dale.org DC1.home.rahim-dale.org 389 Calling nsupdate for SRV _ldap._tcp.ForestDnsZones.home.rahim-dale.org DC1.home.rahim-dale.org 389 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.ForestDnsZones.home.rahim-dale.org. 900 IN SRV 0 100 389 DC1.home.rahim-dale.org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.home.rahim-dale.org DC1.home.rahim-dale .org 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.home.rahim-dale.org DC1.home.rahim-d ale.org 389 (add) Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: ?????0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.home.rahim-dale.org. 900 IN SRV 0 100 389 DC1.home.rahim-dale .org. ; TSIG error with server: tsig indicates error update failed: NOTAUTH(BADSIG) Failed nsupdate: 2 Failed update of 29 entries