thr3ads.net - samba - [Samba] TSIG error with server: tsig verify failure - Failed DNS update with exit code 5 [Nov 2023]

If this information is useful, please help other people find it:
Share via:
Peter Smode
2023-Nov-17 03:32 UTC
[Samba] TSIG error with server: tsig verify failure - Failed DNS update with exit code 5

I have been trying to figure out this problem for a couple weeks no with no
luck. Out of the blue, I started getting TSIG errors on my Samba AD DC. I
pulled the logging extract below after turning up the log level to 10 and
waiting for a reoccurrence. These errors will typically happen every few
hours with one to three occurrences withing the same second. Can anybody
tell from this what Samba is tripping over?

 

I am running Samba v4.14.7 built from source on Rocky Linux release 8.8. If
I run sudo samba_dnsupdate --verbose --use-samba-tool, there are no DNS
updates made and no error given. 

 

The one odd thing I see in the log is the fifth address for "add interface
ens3"; the address starting with fd4e is not part of the config on this
system. 

 

Other than that, there is no obvious problem in my environment that I can
find at the moment, despite these annoying and suspicious errors. 

 

 

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: INFO: Current debug levels:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   all: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   tdb: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   printdrivers: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   lanman: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   smb: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   rpc_parse: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   rpc_srv: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   rpc_cli: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   passdb: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   sam: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   auth: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   winbind: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   vfs: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   idmap: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   quota: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   acls: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   locking: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   msdfs: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   dmapi: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   registry: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   scavenger: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   dns: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   ldb: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   tevent: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   auth_audit: 3

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   auth_json_audit: 3

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   dsdb_password_json_audit: 5

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   dsdb_transaction_audit: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   dsdb_transaction_json_audit: 5

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   dsdb_group_audit: 10

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   dsdb_group_json_audit: 5

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Processing section "[sysvol]"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Processing section "[netlogon]"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: pm_process() returned Yes

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=2603:7000:a200:9c13::a12 bcastnetmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=2603:7000:a200:9c13:9ea1:8cfb:3b0f:6d45 bcastnetmask=ffff:ffff:ffff:ffff::

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=fd06:8328:ea57::a12 bcastnetmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=fd06:8328:ea57:0:4e42:23c9:d129:f344 bcast= netmask=ffff:ffff:ffff:ffff::

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=fd4e:ae4e:8500:41e2:d6da:777d:73aa:76dc bcastnetmask=ffff:ffff:ffff:ffff::

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3 ip=192.168.15.84
bcast=192.168.15.255 netmask=255.255.255.0

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Security token SIDs (1):

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   SID[  0]: S-1-5-18

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  Privileges (0xFFFFFFFFFFFFFFFF):

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  0]:
SeMachineAccountPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  1]:
SeTakeOwnershipPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  2]: SeBackupPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  3]: SeRestorePrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  4]:
SeRemoteShutdownPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  5]:
SePrintOperatorPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  6]: SeAddUsersPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  7]:
SeDiskOperatorPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  8]: SeSecurityPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[  9]:
SeSystemtimePrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 10]: SeShutdownPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 11]: SeDebugPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 12]:
SeSystemEnvironmentPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 13]:
SeSystemProfilePrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 14]:
SeProfileSingleProcessPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 15]:
SeIncreaseBasePriorityPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 16]:
SeLoadDriverPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 17]:
SeCreatePagefilePrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 18]:
SeIncreaseQuotaPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 19]:
SeChangeNotifyPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 20]: SeUndockPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 21]:
SeManageVolumePrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 22]:
SeImpersonatePrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 23]:
SeCreateGlobalPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:   Privilege[ 24]:
SeEnableDelegationPrivilege

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  Rights (0x               0):

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_spnupdate: Initial schema load needed, as we
have no existing schema, seq_num: 6

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Initial schema load needed, as we
have no existing schema, seq_num: 6

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_spnupdate: schema_fsmo_init: we are master[yes]
updates allowed[no]

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_spnupdate: Initial schema load needed, as we
have no existing schema, seq_num: 6

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: schema_fsmo_init: we are master[yes]
updates allowed[no]

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Initial schema load needed, as we
have no existing schema, seq_num: 6

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_spnupdate: schema_fsmo_init: we are master[yes]
updates allowed[no]

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: schema_fsmo_init: we are master[yes]
updates allowed[no]

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request: SEARCH

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  dn: @MODULES

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  scope: base

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  expr: (@LIST=*)

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  attr: @LIST

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  control: <NONE>

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_lock

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(tdb)->search

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_callback": 0x55875bb6e3a0

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_timeout": 0x55875cb694b0

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Running timer event
0x55875bb6e3a0 "ldb_kv_callback"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: ENTRY

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dn: @MODULES

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: @LIST: samba_secrets

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: DONE

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: error: 0

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_unlock

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875cb694b0 "ldb_kv_timeout"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875bb6e3a0 "ldb_kv_callback"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
REGISTER_CONTROL

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: 1.2.840.113556.1.4.1413

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  control: <NONE>

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_asprintf/set_errstring:
unable to find module or backend to handle operation: request

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request: SEARCH

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  dn: <rootDSE>

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  scope: base

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  expr: (objectClass=*)

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  attr: rootDomainNamingContext

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  attr: configurationNamingContext

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  attr: schemaNamingContext

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  attr: defaultNamingContext

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  control: <NONE>

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_lock

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(rdn_name)->search

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(tdb)->search

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_callback": 0x55875cb694b0

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_timeout": 0x55875cf8ff80

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Running timer event
0x55875cb694b0 "ldb_kv_callback"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_asprintf/set_errstring: NULL
Base DN invalid for a base search

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: DONE

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: error: 34

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: msg: NULL Base DN invalid for a base
search

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_unlock

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875cf8ff80 "ldb_kv_timeout"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875cb694b0 "ldb_kv_callback"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb_wrap open of secrets.ldb

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request: SEARCH

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  dn: cn=Primary Domains

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  scope: sub

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  expr:
(&(flatname=KNADA)(objectclass=primaryDomain))

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  attr: <ALL>

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:  control: <NONE>

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_lock

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(rdn_name)->search

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(tdb)->search

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_callback": 0x55875cf8ff80

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_timeout": 0x55875ba49520

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Running timer event
0x55875cf8ff80 "ldb_kv_callback"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: ENTRY

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dn: flatname=KNADA,cn=Primary Domains

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: msDS-KeyVersionNumber: 2

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectClass: top

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectClass: primaryDomain

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectClass: kerberosSecret

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectSid:
S-1-5-21-280931492-1516600349-3173203192

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: privateKeytab: secrets.keytab

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: realm: knada.lan.kitsnet.us

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: saltPrincipal:
host/camus.knada.lan.kitsnet.us at KNADA.LAN.KITSNET.US

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: samAccountName: CAMUS$

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: # secret::: REDACTED SECRET ATTRIBUTE

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: secureChannelType: 6

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: servicePrincipalName: HOST/camus

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: servicePrincipalName:
HOST/camus.knada.lan.kitsnet.us

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectGUID:
9e4b45c0-5204-4adb-b90a-891b6d78f307

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: whenCreated: 20210502210723.0Z

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: whenChanged: 20210502210723.0Z

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: uSNCreated: 7

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: uSNChanged: 7

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: name: KNADA

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: flatname: KNADA

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: distinguishedName:
flatname=KNADA,cn=Primary Domains

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: DONE

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: error: 0

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_unlock

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875ba49520 "ldb_kv_timeout"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875cf8ff80 "ldb_kv_callback"

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Received smb_krb5 packet of length
327

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Received smb_krb5 packet of length
185

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: kinit for CAMUS$@KNADA.LAN.KITSNET.US
succeeded

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'gssapi_spnego'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'gssapi_krb5'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'gssapi_krb5_sasl'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'spnego'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'schannel'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend
'naclrpc_as_system'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'sasl-EXTERNAL'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'ntlmssp'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend
'ntlmssp_resume_ccache' registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'http_basic'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'http_ntlm'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'http_negotiate'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'krb5' registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'fake_gssapi_krb5'
registered

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Ticket in credentials cache for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 36000 secs

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce215f0]: subreq: 0x55875c95d990

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce215f0]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 36000 secs

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990

<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 35999 secs

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 35999 secs

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 35999 secs

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 35999 secs

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)]  state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]

<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure

<27>Nov 16 20:21:06 camus samba[30387]: [2023/11/16 20:21:06.299829,  0,
pid=30387, effective(0, 0), real(0, 0)]
../../source4/dsdb/dns/dns_update.c:86(dnsupdate_nameupdate_done)

<27>Nov 16 20:21:06 camus samba[30387]:  dnsupdate_nameupdate_done: Failed
DNS update with exit code 5

 

 

 

Peter 

smodep at icloud.com
Apparently Analagous Threads

Search for more seemingly similar threads
samba - Nov 2023 - TSIG error with server: tsig verify failure - Failed DNS update with exit code 5

[Samba] TSIG error with server: tsig verify failure - Failed DNS update with exit code 5

Apparently Analagous Threads
