search for: unacceptable

...m with a ADDC Sernet 4.7.6-11 on CentOS 7.4. We have two DCs, replication is working fine. We use bind9 as dns-backend. When we do a "samba_dnsupdate --all-names" we get the following messages: ------------------- [root at dc1 ~]# samba_dnsupdate --all-names dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unacceptable dns_tkey_negotiategss: TKEY is unac...

...on CentOS > 7.4. We have two DCs, replication is working fine. We use bind9 as > dns-backend. When we do a "samba_dnsupdate --all-names" we get the > following messages: > ------------------- > [root at dc1 ~]# samba_dnsupdate --all-names > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable > dns_tkey_negotiategss: TKEY is unacceptable >...

Dear all, after succesfull joining my new samba 4 DC to the domain. There is an error on using, samba_dnsupdate --verbose --all-names On the new joined dc: dns_tkey_negotiategss: TKEY is unacceptable Failed nsupdate: 1 How can I fix it!? Dnsupdate on the Master is running well. [root at s4slave etc]# samba_dnsupdate --verbose --all-names IPs: ['192.168.135.253'] Skipping PDC entry (SRV _ldap._tcp.pdc._msdcs.${DNSDOMAIN} ${HOSTNAME} 389) as we are not a PDC Skipping PDC entry (SRV _ld...

...date for A dncom.de 172.16.128.120 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: dncom.de. 900 IN A 172.16.128.120 dns_tkey_negotiategss: TKEY is unacceptable Failed nsupdate: 1 Calling nsupdate for A linux.dncom.de 172.16.128.120 Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: linux.dncom.de. 900 IN A 172.16.12...

...as nothing to do.. Thanks, Joachim -----Urspr?ngliche Nachricht----- Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland penny via samba Gesendet: Monday, 12 August 2019 21:26 An: sambalist <samba at lists.samba.org> Betreff: Re: [Samba] dns_tkey_gssnegotiate: TKEY is unacceptable On 12/08/2019 20:19, Joachim Lindenberg wrote: > Hi Rowland, > did read, actually cited the page it myself, but didn?t help me to identify the cause. > Kerberos credentials exists, dns users exists, file permission are correct. So either that is insufficient or I am blind.. > Regards,...

As the subject says, dns_tkey_gssnegotiate: TKEY is unacceptable. I have internet searched for solutions. I have done everything on /wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable/ and I am still getting: At the end of "root at dc01:~# samba_dnsupdate --verbose --all-names": dns_tkey_gssnegotiate: TKEY is unacceptable Failed...

...rrupted with strange error messages about undotted things that essentially broke it. And so, on to bind. I've got plenty of experience with that, should be fairly easy, right? ha Another 5-6 hours later, I'm stuck at what seems to be the same brick wall many people end up with...TKEY is unacceptable. Along with that, RSAT is essentially non-functional with the AD Users/Computers working sporadically and the DNS never having connected once to named (always denied). klist never works after a reboot....always requires another init, even though the keytab in /var/lib/samba/private is good I s...

Hi, One of my APC devices reports: "unacceptable utility voltage rate of change". I believe it has something to do with input voltage fluctuating too fast maybe even beneath or over the input voltage thresholds. Should I worry about this? should I measure input voltage? (I suppose I'd need more than multimeter readings. Maybe an oscillos...

...your servers ? >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer >Verzonden: donderdag 6 augustus 2015 9:28 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] 2nd DC, internal DNS: >dns_tkey_negotiategss: TKEY is unacceptable > >L.P.H. van Belle writes: > >> check the rights on : >> /var/lib/samba/private/dns.keytab 640 root:bind >> /var/lib/samba/private/dns 750 root:bind >> /var/lib/samba/private/sam.ldb.d 750 root:bind > >I'm using the internal DNS on both DC's, so I gue...

I found another reason for this error: dns_tkey_negotiategss: TKEY is unacceptable After much head scratching it was due to the Apparmour configuration recommended in the WiKi at: https://wiki.samba.org/index.php/BIND9_DLZ_AppArmor_and_SELinux_Integration The section for Apparmor which recommends adding lines to /etc/apparmor.d/local/usr.sbin.named, I had to change the line: fr...

On 03/07/2020 14:39, Robert E. Wooden via samba wrote: > As the subject says, dns_tkey_gssnegotiate: TKEY is unacceptable. > > I have internet searched for solutions. > > I have done everything on > /wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable/ > and I am still getting: > > At the end of "root at dc01:~# samba_dnsupdate --verbose --all-names": > > dns_...

...t:bind Greetz, Louis >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer >Verzonden: donderdag 6 augustus 2015 8:55 >Aan: samba at lists.samba.org >Onderwerp: [Samba] 2nd DC, internal DNS: >dns_tkey_negotiategss: TKEY is unacceptable > >Hi everyone, > >I'm testing with a Samba4 AD network, and I have some problems >with DNS on >the second DC, with which I could use a bit of your help. > >I have an AD with two DC's, both Samba 4.2.3. On the first DC, >samba_dnsupdate works fine. With sto...

.../samba4-dc1.empresa.com.br as SAMBA4-DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: samba4-dc1.empresa.com.br. 900 IN A 192.168.1.20 dns_tkey_negotiategss: TKEY is unacceptable Failed nsupdate: 1 update(nsupdate): NS empresa.com.br samba4-dc1.empresa.com.br Calling nsupdate for NS empresa.com.br samba4-dc1.empresa.com.br (add) Successfully obtained Kerberos ticket to DNS/samba4-dc1.empresa.com.br as SAMBA4-DC1$ Outgoing update query: ;; ->>HEADER<<- opcode: UP...

...>-----Oorspronkelijk bericht----- > >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer > >Verzonden: donderdag 6 augustus 2015 8:55 > >Aan: samba at lists.samba.org > >Onderwerp: [Samba] 2nd DC, internal DNS: > >dns_tkey_negotiategss: TKEY is unacceptable > > > >Hi everyone, > > > >I'm testing with a Samba4 AD network, and I have some problems > >with DNS on > >the second DC, with which I could use a bit of your help. > > > >I have an AD with two DC's, both Samba 4.2.3. On the first DC, > &...

..... > Regards, Joachim > > -----Urspr?ngliche Nachricht----- > Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland penny via samba > Gesendet: Monday, 12 August 2019 21:14 > An: samba at lists.samba.org > Betreff: Re: [Samba] dns_tkey_gssnegotiate: TKEY is unacceptable > > On 12/08/2019 19:49, Joachim Lindenberg via samba wrote: >> I installed a third DC today. Replication works find, but as systemctl status samba-ad-dc showed an error w.r.t. dnsupdate I was running samba_dnsupdate ?verbose. >> >> Below is the output. It looks like there a...

...a third DC today. Replication works find, but as systemctl status samba-ad-dc showed an error w.r.t. dnsupdate I was running samba_dnsupdate ?verbose. Below is the output. It looks like there are some missing DNS records, but what are potential causes of this error: dns_tkey_gssnegotiate: TKEY is unacceptable I already checked what?s listed @ https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable and https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable#Verifying_That_the_BIND_AD_Account_Exists_for_the_DC. What else? Thanks, Joachim root at python:/...

...bericht----- >> >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer >> >Verzonden: donderdag 6 augustus 2015 9:28 >> >Aan: samba at lists.samba.org >> >Onderwerp: Re: [Samba] 2nd DC, internal DNS: >> >dns_tkey_negotiategss: TKEY is unacceptable >> > >> >L.P.H. van Belle writes: >> > >> >> check the rights on : >> >> /var/lib/samba/private/dns.keytab 640 root:bind >> >> /var/lib/samba/private/dns 750 root:bind >> >> /var/lib/samba/private/sam.ldb.d 750 root:bind &gt...

...-----Oorspronkelijk bericht----- > >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer > >Verzonden: donderdag 6 augustus 2015 9:28 > >Aan: samba at lists.samba.org > >Onderwerp: Re: [Samba] 2nd DC, internal DNS: > >dns_tkey_negotiategss: TKEY is unacceptable > > > >L.P.H. van Belle writes: > > > >> check the rights on : > >> /var/lib/samba/private/dns.keytab 640 root:bind > >> /var/lib/samba/private/dns 750 root:bind > >> /var/lib/samba/private/sam.ldb.d 750 root:bind > > > >I'm usin...

...er > Kukkukk's patch from > https://lists.samba.org/archive/samba-technical/2013-February/090408.html > the error is gone. So no problems there. > > However, on the second DC samba_dnsupdate does not work. I get the > error > > "dns_tkey_negotiategss: TKEY is unacceptable" > > Problem is: I don't really know where to look. On the first DC (dev), > the ticket cache used by samba_dnsupdate contains: > > root at dev:~# klist -c /tmp/tmpoFYYga > Ticket cache: FILE:/tmp/tmpoFYYga > Default principal: DEV$@EXAM.CORP > > Valid s...

On 30/12/15 18:19, Carlos A. P. Cunha wrote: > Hello! > I've got this error > dns_tkey_negotiategss: TKEY is unacceptable > > when running samba_dnsupdate --verbose > > With this error dynamic entries stopped working as Type A machines > that entered in the field or entry to a new DC. > > Already tried the step described here > > https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_...