search for: hh16

...I have a Linux nsupdate client sending dns update requests via sssd. Just gone from 4.1.2 to 4.1.3. I've done this: http://linuxcostablanca.blogspot.com.es/2013/09/samba4-bind9dlz-stale-dns-records-with.html After which the forward zone update is working fine: 2014-01-10T12:32:35.376142+01:00 hh16 named[4963]: samba_dlz: starting transaction on zone hh3.site 2014-01-10T12:32:35.382352+01:00 hh16 named[4963]: samba_dlz: allowing update of signer=CATRAL\$\@HH3.SITE name=catral.hh3.site tcpaddr=192.168.1.22 type=A key=4172394391.sig-hh16.hh3.site/160/0 2014-01-10T12:32:35.382917+01:00 hh16 name...

...0 ;; QUESTION SECTION: ;pinoso.hh3.site. IN SOA Reply from SOA query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 25384 ;; flags: qr aa ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;hh3.site. IN SOA ;; ANSWER SECTION: hh3.site. 3600 IN SOA hh16.hh3.site. hostmaster.hh3.site. 6 900 600 86400 0 Found zone name: hh3.site The master is: hh16.hh3.site start_gssrequest send_gssrequest Outgoing update query: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 3099 ;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1 ;; Q...

Version 4.2.0pre1-GIT-20999fc openSUSE BIND9.9.3 Hi We're getting refusal of ddns updates using nsupdate from a client sending the updates from sssd: 2013-09-14T22:53:36.517230+02:00 hh16 named[11055]: samba_dlz: starting transaction on zone hh3.site 2013-09-14T22:53:36.522244+02:00 hh16 named[11055]: samba_dlz: disallowing update of signer=CATRAL\$\@HH3.SITE name=catral.hh3.site type=A error=insufficient access rights 2013-09-14T22:53:36.522283+02:00 hh16 named[11055]: client 192.1...

...H3] OS=[Unix] Server=[Samba 3.6.9] smb: \> log: schannel_fetch_session_key_tdb: restored schannel info key SECRETS/SCHANNEL/OLIVA schannel_store_session_key_tdb: stored schannel info with key SECRETS/SCHANNEL/OLIVA auth_check_password_send: Checking password for unmapped user [HH3]\[steve2]@[\\HH16] auth_check_password_send: mapped user is: [HH3]\[steve2]@[\\HH16] getent passwd steve2 steve2:*:3000023:20513:steve2:/home/users/steve2:/bin/bash -------------------------- But Administrator (with rfc2307 attributes) can't: smbclient //oliva/users -UAdministrator Enter Administrator's...

...nf [sssd] services = nss, pam config_file_version = 2 domains = default [nss] [pam] [domain/default] access_provider = simple #simple_allow_users = myuser enumerate = false cache_credentials = True id_provider = ldap auth_provider = krb5 chpass_provider = krb5 krb5_realm = HH3.SITE krb5_server = hh16.hh3.site krb5_kpasswd = hh16.hh3.site ldap_uri = ldap://hh16.hh3.site/ ldap_search_base = dc=hh3,dc=site ldap_tls_cacertdir = /usr/local/samba/private/tls ldap_id_use_start_tls = False ldap_default_bind_dn = cn=lynn2,cn=Users,dc=hh3,dc=site ldap_default_authtok = xx ldap_default_authtok_type = pass...

...255.0 loaded services Initialise the svcctl registry keys if needed. Closed policy Closed policy Closed policy Closed policy Closed policy Closed policy Closed policy Closed policy Closed policy Initialise the eventlog registry keys if needed. Closed policy get_dc_list: preferred server list: "hh16.hh3.site, *" Successfully contacted LDAP server 192.168.1.16 get_dc_list: preferred server list: "hh16.hh3.site, *" get_dc_list: preferred server list: "hh16.hh3.site, *" Successfully contacted LDAP server 192.168.1.16 Connected to LDAP server hh16.hh3.site ads_sasl_spnego_...

...ll: 2013-05-02T20:58:05 Kerberos: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, des3-cbc-sha1, arcfour-hmac-md5, using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable-ok Kerberos: TGS-REQ CATRAL$@HH3.SITE from ipv4:192.168.1.21:45034 for cifs/hh16 at HH3.SITE [canonicalize, renewable] Kerberos: TGS-REQ authtime: 2013-05-01T20:57:27 starttime: 2013-05-01T20:58:09 endtime: 2013-05-02T06:57:27 renew till: 2013-05-02T20:57:25 Kerberos: TGS-REQ steve2 at HH3.SITE from ipv4:192.168.1.21:45264 for cifs/hh16 at HH3.SITE [canonicalize, renewable]...

...4:01:35 Kerberos: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, arcfour-hmac-md5, des3-cbc-sha1, 25, 26, using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable-ok Kerberos: TGS-REQ LUBUNTU-LAPTOP$@HH3.SITE from ipv4:192.168.1.22:40240 for ldap/hh16.hh3.site at HH3.SITE [canonicalize, renewable] Kerberos: TGS-REQ authtime: 2014-05-20T14:01:35 starttime: 2014-05-20T14:01:35 endtime: 2014-05-21T00:01:35 renew till: 2014-05-21T14:01:35 Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNE...

...4:01:35 Kerberos: Client supported enctypes: aes256-cts-hmac-sha1-96, aes128-cts-hmac-sha1-96, arcfour-hmac-md5, des3-cbc-sha1, 25, 26, using arcfour-hmac-md5/arcfour-hmac-md5 Kerberos: Requested flags: renewable-ok Kerberos: TGS-REQ LUBUNTU-LAPTOP$@HH3.SITE from ipv4:192.168.1.22:40240 for ldap/hh16.hh3.site at HH3.SITE [canonicalize, renewable] Kerberos: TGS-REQ authtime: 2014-05-20T14:01:35 starttime: 2014-05-20T14:01:35 endtime: 2014-05-21T00:01:35 renew till: 2014-05-21T14:01:35 Terminating connection - 'kdc_tcp_call_loop: tstream_read_pdu_blob_recv() - NT_STATUS_CONNECTION_DISCONNE...

...? Provisioning with or moving to BIND9_DLZ produces the error: samba_upgradedns --dns-backend=BIND9_DLZ Reading domain information DNS accounts already exist No zone file /usr/local/samba/private/dns/HH3.SITE.zone DNS records will be automatically created DNS partitions already exist Adding dns-hh16 account Failed to setup database for BIND, AD based DNS cannot be used Traceback (most recent call last): File "/usr/local/samba/sbin/samba_upgradedns", line 454, in <module> domainguid) File "/usr/local/samba/lib64/python2.7/site-packages/samba/provision/sambadns.py&qu...