similar to: Samba4 Backup DC DNS Issues

is the time in sync on your servers ? >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer >Verzonden: donderdag 6 augustus 2015 9:28 >Aan: samba at lists.samba.org >Onderwerp: Re: [Samba] 2nd DC, internal DNS: >dns_tkey_negotiategss: TKEY is unacceptable > >L.P.H. van Belle writes: > >> check the rights

check the rights on : /var/lib/samba/private/dns.keytab 640 root:bind /var/lib/samba/private/dns 750 root:bind /var/lib/samba/private/sam.ldb.d 750 root:bind Greetz, Louis >-----Oorspronkelijk bericht----- >Van: samba [mailto:samba-bounces at lists.samba.org] Namens Roel van Meer >Verzonden: donderdag 6 augustus 2015 8:55 >Aan: samba at lists.samba.org >Onderwerp: [Samba] 2nd

On 06/08/15 09:08, Roel van Meer wrote: > L.P.H. van Belle writes: > >> is the time in sync on your servers ? > > Yes it is. > > I managed to make it work by specifying the primary DC as nameserver > in /etc/resolv.conf of the secondary DC. As soon as I do that, > samba_dnsupdate works on the secondary. When I change it back to use > the local Samba as resolver,

On 2015-08-06 18:55, Roel van Meer wrote: > Hi everyone, > > I'm testing with a Samba4 AD network, and I have some problems with > DNS on the second DC, with which I could use a bit of your help. > > I have an AD with two DC's, both Samba 4.2.3. On the first DC, > samba_dnsupdate works fine. With stock 4.2.3 I get the error > > "TSIG error with

L.P.H. van Belle writes: > is the time in sync on your servers ? Yes it is. I managed to make it work by specifying the primary DC as nameserver in /etc/resolv.conf of the secondary DC. As soon as I do that, samba_dnsupdate works on the secondary. When I change it back to use the local Samba as resolver, it no longer works. So it is a DNS issue (possibly related to replication

L.P.H. van Belle writes: > check the rights on : > /var/lib/samba/private/dns.keytab 640 root:bind > /var/lib/samba/private/dns 750 root:bind > /var/lib/samba/private/sam.ldb.d 750 root:bind I'm using the internal DNS on both DC's, so I guess bind access rights aren't the issue. Thanks for your answer though :) Regards, Roel > >-----Oorspronkelijk

Hi everyone, I'm testing with a Samba4 AD network, and I have some problems with DNS on the second DC, with which I could use a bit of your help. I have an AD with two DC's, both Samba 4.2.3. On the first DC, samba_dnsupdate works fine. With stock 4.2.3 I get the error "TSIG error with server: tsig verify failure" but the DNS updates succeed anyway, and after applying

Hi I disabled even the windows server firewall to see if this is what it was blocking, but it didn't solve it. There appear to be Kerberos key errors, but the kinit administrator command works correctly. /usr/sbin/samba_dnsupdate:; TSIG error with server: tsig verify failure Regards, M?rcio Bacci Em sex, 2 de ago de 2019 ?s 15:51, Marcio Demetrio Bacci < marciobacci at gmail.com>

Dear all, after succesfull joining my new samba 4 DC to the domain. There is an error on using, samba_dnsupdate --verbose --all-names On the new joined dc: dns_tkey_negotiategss: TKEY is unacceptable Failed nsupdate: 1 How can I fix it!? Dnsupdate on the Master is running well. [root at s4slave etc]# samba_dnsupdate --verbose --all-names IPs: ['192.168.135.253'] Skipping PDC entry (SRV

Hi I believe I am having DNS upgrade issues, as noticed below: /etc/init.d/samba-ad-dc status ? samba-ad-dc.service - Samba AD Daemon Loaded: loaded (/lib/systemd/system/samba-ad-dc.service; enabled; vendor preset: enabled) Active: active (running) since Fri 2019-08-02 10:04:24 -03; 5h 20min ago Docs: man:samba(8) man:samba(7) man:smb.conf(5) Main PID: 9284

Followed all the howto instructions and when this runs I get the following: (with debug on) [root at quigonn named]# /usr/local/samba/sbin/samba_dnsupdate -d 200 /usr/local/samba/lib/python2.4/site-packages/samba/__init__.py:44: RuntimeWarning: Python C API version mismatch for module ldb: This Python has API version 1013, module ldb has version 1012. import ldb

On Friday, January 11, 2019 3:14 AM, Rowland Penny via samba <samba at lists.samba.org> wrote: > >I have no idea where the above is coming from, but it isn't from the dhcp scripts. > I don't know what to tell you, Rowland. The previous logs were with the -d option in place, and those extra lines were what was added as a result of the -d option. Here is what the logs

@Rowland The tip with the Server who created the entry was good, but not our problem. We tried it with different hosts on both systems @Christian I know but at some point you try everything ;-) We fixed it the Microsoft-way by rebooting both DCs after the reboot everything was fine :-) Am 16.05.2018 um 12:57 schrieb Christian Naumer via samba: > The DDNS setup from the wiki uses the keytab of

Hi, I am trying to run samba with bind_dlz (bind-9.9.1 - P1) on a multi-homed network. I have configured the setup as per Samba4 Howto. But when I try to do "samba_dnsupdate --all-names" it fails with error: dns_tkey_negotiategss: TKEY is unacceptable The kerberos ticket being used by samba_dnsupdate shows follwoing principals: klist -c /tmp/tmp6cxfgY Ticket cache: FILE:/tmp/tmp6cxfgY

The DDNS setup from the wiki uses the keytab of the seperate "Unprivileged user for TSIG-GSSAPI DNS updates via ISC DHCP server" you have to Check this one not the one which BIND uses. Regards Am 16.05.2018 um 12:45 schrieb Rowland Penny via samba: > On Wed, 16 May 2018 12:32:52 +0200 Stefan Kania via samba > <samba at lists.samba.org> wrote: > >> It's me

PRIOR THREAD: https://lists.samba.org/archive/samba/2019-January/220292.html In the  referenced prior thread, I had an issue of samba_dnsupdate --verbose --all-names causing a dns_tkey_gssnegotiate: TKEY is unacceptable error. Ultimately, the solution kindly provided by Rowland was to insert dns update command = /usr/local/samba/sbin/samba_dnsupdate --use-samba-tool into the [global] section of

On Thursday, January 10, 2019 2:56 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: >Uncomment line 10, adjust it for prefix if Samba isn't in /usr/local >and then try again. Here it is with script properly configured. Regarding the later lines having to do with the script, I clearly don't know what exactly is causing them. But surely they are all somehow part

You dns keytab looks strange, my be due to manual changes.. klist -k /var/lib/samba/private/dns.keytab Should show.    1 dns-mysamba4dc at REALM    1 DNS/mysamba4dc.mydomain.com at REALM So check this again. Greetz, Louis > -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Giacomo Gorgellino via samba > Verzonden: donderdag

On Wed, 16 May 2018 12:32:52 +0200 Stefan Kania via samba <samba at lists.samba.org> wrote: > It's me again :-) > Now we have DDNS with DHCP running but we have a problem on one of our > two DCs. Btw we used the setup and the script from wiki. > Doing a "dhclient" on a host we are getting the following messages: > ------------- > Mai 16 12:13:28 samba41

On Thursday, January 10, 2019 2:33 PM, Rowland Penny via samba <samba at lists.samba.org> wrote: >On Thu, 10 Jan 2019 20:18:37 +0000 (UTC)> >Billy Bob <billysbobs at yahoo.com> wrote: > >>  >> >>    On Thursday, January 10, 2019 2:08 PM, Billy Bob via samba >> <samba at lists.samba.org> wrote: >> >Do you want to change your