search for: dns_tkey_negotiategss

...o, we have the following problem with a ADDC Sernet 4.7.6-11 on CentOS 7.4. We have two DCs, replication is working fine. We use bind9 as dns-backend. When we do a "samba_dnsupdate --all-names" we get the following messages: ------------------- [root at dc1 ~]# samba_dnsupdate --all-names dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_nego...

...em with a ADDC Sernet 4.7.6-11 on CentOS > 7.4. We have two DCs, replication is working fine. We use bind9 as > dns-backend. When we do a "samba_dnsupdate --all-names" we get the > following messages: > ------------------- > [root at dc1 ~]# samba_dnsupdate --all-names > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY...

...s we are not a PDC Calling nsupdate for A dncom.de 172.16.128.120 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: dncom.de. 900 IN A 172.16.128.120 dns_tkey_negotiategss: TKEY is unacceptable Failed nsupdate: 1 Calling nsupdate for A linux.dncom.de 172.16.128.120 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: linux.dncom.de. 900 IN...

Dear all, after succesfull joining my new samba 4 DC to the domain. There is an error on using, samba_dnsupdate --verbose --all-names On the new joined dc: dns_tkey_negotiategss: TKEY is unacceptable Failed nsupdate: 1 How can I fix it!? Dnsupdate on the Master is running well. [root at s4slave etc]# samba_dnsupdate --verbose --all-names IPs: ['192.168.135.253'] Skipping PDC entry (SRV _ldap._tcp.pdc._msdcs.${DNSDOMAIN} ${HOSTNAME} 389) as we are not a PDC Skipp...

...-ad.heathfam.com 389 Calling nsupdate for A heathfam.com 10.0.2.4 (add) Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: heathfam.com. 900 IN A 10.0.2.4 dns_tkey_negotiategss: TKEY is unacceptable Failed nsupdate: 1 Calling nsupdate for SRV _ldap._tcp.1ebfe405-6e9f-49d4- 9165-b0073b4f4cfe.domains._msdcs.heathfam.com samba-ad.heathfam.com 389 (add) Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0...

Hello! I've got this error dns_tkey_negotiategss: TKEY is unacceptable when running samba_dnsupdate --verbose With this error dynamic entries stopped working as Type A machines that entered in the field or entry to a new DC. Already tried the step described here https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable Bu...

is the time in sync on your servers ? >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer >Verzonden: donderdag 6 augustus 2015 9:28 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] 2nd DC, internal DNS: >dns_tkey_negotiategss: TKEY is unacceptable > >L.P.H. van Belle writes: > >> check the rights on : >> /var/lib/samba/private/dns.keytab 640 root:bind >> /var/lib/samba/private/dns 750 root:bind >> /var/lib/samba/private/sam.ldb.d 750 root:bind > >I'm using the internal DNS on b...

...nyway, and after applying Gunther > Kukkukk's patch from > https://lists.samba.org/archive/samba-technical/2013-February/090408.html > the error is gone. So no problems there. > > However, on the second DC samba_dnsupdate does not work. I get the > error > > "dns_tkey_negotiategss: TKEY is unacceptable" > > Problem is: I don't really know where to look. On the first DC (dev), > the ticket cache used by samba_dnsupdate contains: > > root at dev:~# klist -c /tmp/tmpoFYYga > Ticket cache: FILE:/tmp/tmpoFYYga > Default principal: DEV$@EXAM.CO...

On 30/12/15 18:19, Carlos A. P. Cunha wrote: > Hello! > I've got this error > dns_tkey_negotiategss: TKEY is unacceptable > > when running samba_dnsupdate --verbose > > With this error dynamic entries stopped working as Type A machines > that entered in the field or entry to a new DC. > > Already tried the step described here > > https://wiki.samba.org/index.php/Dns_tk...

On 30/12/15 18:19, Carlos A. P. Cunha wrote: > Hello! > I've got this error > dns_tkey_negotiategss: TKEY is unacceptable > > when running samba_dnsupdate --verbose > > With this error dynamic entries stopped working as Type A machines > that entered in the field or entry to a new DC. > > Already tried the step described here > > https://wiki.samba.org/index.php/Dns_tk...

..._DC Samba Internal DNS or Samba+Bind9_DLZ ? Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Peter Serbe via samba > Verzonden: woensdag 7 maart 2018 13:42 > Aan: samba at lists.samba.org > Onderwerp: [Samba] dns_tkey_negotiategss: TKEY is > unacceptable - documentation update > > Hi list, > > I have struggled with one of my DCs, which persistently > refused to do DNS updates, > even after I carefully went through all the actions listed in > the wiki page: > > https://wiki.samba.org/ind...

I found another reason for this error: dns_tkey_negotiategss: TKEY is unacceptable After much head scratching it was due to the Apparmour configuration recommended in the WiKi at: https://wiki.samba.org/index.php/BIND9_DLZ_AppArmor_and_SELinux_Integration The section for Apparmor which recommends adding lines to /etc/apparmor.d/local/usr.sbin.named, I had...

...re" but the DNS updates succeed anyway, and after applying Gunther Kukkukk's patch from https://lists.samba.org/archive/samba-technical/2013-February/090408.html the error is gone. So no problems there. However, on the second DC samba_dnsupdate does not work. I get the error "dns_tkey_negotiategss: TKEY is unacceptable" Problem is: I don't really know where to look. On the first DC (dev), the ticket cache used by samba_dnsupdate contains: root at dev:~# klist -c /tmp/tmpoFYYga Ticket cache: FILE:/tmp/tmpoFYYga Default principal: DEV$@EXAM.CORP Valid starting Expi...

...samba/private/sam.ldb.d 750 root:bind Greetz, Louis >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer >Verzonden: donderdag 6 augustus 2015 8:55 >Aan: samba at lists.samba.org >Onderwerp: [Samba] 2nd DC, internal DNS: >dns_tkey_negotiategss: TKEY is unacceptable > >Hi everyone, > >I'm testing with a Samba4 AD network, and I have some problems >with DNS on >the second DC, with which I could use a bit of your help. > >I have an AD with two DC's, both Samba 4.2.3. On the first DC, >samba_dnsupdate...

...obtained Kerberos ticket to DNS/samba4-dc1.empresa.com.br as SAMBA4-DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: samba4-dc1.empresa.com.br. 900 IN A 192.168.1.20 dns_tkey_negotiategss: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): NS empresa.com.br samba4-dc1.empresa.com.br Calling nsupdate for NS empresa.com.br samba4-dc1.empresa.com.br (add) Successfully obtained Kerberos ticket to DNS/samba4-dc1.empresa.com.br as SAMBA4-DC1$ Outgoing update query: ;; ->>HEAD...

...ough :) Regards, Roel > >-----Oorspronkelijk bericht----- > >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer > >Verzonden: donderdag 6 augustus 2015 8:55 > >Aan: samba at lists.samba.org > >Onderwerp: [Samba] 2nd DC, internal DNS: > >dns_tkey_negotiategss: TKEY is unacceptable > > > >Hi everyone, > > > >I'm testing with a Samba4 AD network, and I have some problems > >with DNS on > >the second DC, with which I could use a bit of your help. > > > >I have an AD with two DC's, both Samba 4.2.3. O...

...t;> >-----Oorspronkelijk bericht----- >> >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer >> >Verzonden: donderdag 6 augustus 2015 9:28 >> >Aan: samba at lists.samba.org >> >Onderwerp: Re: [Samba] 2nd DC, internal DNS: >> >dns_tkey_negotiategss: TKEY is unacceptable >> > >> >L.P.H. van Belle writes: >> > >> >> check the rights on : >> >> /var/lib/samba/private/dns.keytab 640 root:bind >> >> /var/lib/samba/private/dns 750 root:bind >> >> /var/lib/samba/private/sam.l...

...Thanks a lot! Roel > >-----Oorspronkelijk bericht----- > >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer > >Verzonden: donderdag 6 augustus 2015 9:28 > >Aan: samba at lists.samba.org > >Onderwerp: Re: [Samba] 2nd DC, internal DNS: > >dns_tkey_negotiategss: TKEY is unacceptable > > > >L.P.H. van Belle writes: > > > >> check the rights on : > >> /var/lib/samba/private/dns.keytab 640 root:bind > >> /var/lib/samba/private/dns 750 root:bind > >> /var/lib/samba/private/sam.ldb.d 750 root:bind > >...

On 30/12/15 19:57, Carlos A. P. Cunha wrote: > Hello! > Output of command > > # 1 record > dn: > CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=MYDOMAIN > cn: {31B2F340-016D-11D2-945F-00C04FB984F9} > name: {31B2F340-016D-11D2-945F-00C04FB984F9} > > Referral # > ref: ldap: //interno.mastersonda.com.br/CN=Configuration,DC=MYDOMAIN > Referral #

Hi Rowland, we ran samba_updatedns because we get the error "ERROR_DNS_UPDATE_FAILED" when joining a Samba-host to the domain. We go by the wiki https://wiki.samba.org/index.php/Troubleshooting_Samba_Domain_Members#DNS_Update_failed:_ERROR_DNS_UPDATE_FAILED and we checked the dynmaic DNS update as written in the wiki: https://wiki.samba.org/index.php/Testing_Dynamic_DNS_Updates