[Samba] Samba ADDS DC krb5 and samba_nsupdate

[Felipe]

bind-9.9.2-P1

how can I check it?

It have access to read dig give me results of my windows domain.
I tried to set rights to 777 of the private directory with option -R

samba_dnsupdate --verbose --all-names say dns_tkey_negotiategss: TKEY is unacceptable

greetings

-----Mensaje original-----
De: Andrew Bartlett [mailto:abartlet at samba.org] 
Enviado el: miércoles, 02 de enero de 2013 12:22
Para: samba
CC: samba at lists.samba.org
Asunto: Re: [Samba] Samba ADDS DC krb5 and samba_nsupdate

On Wed, 2013-01-02 at 03:40 +0000, Felipe wrote:
> OK now I tried to join again
> I saw this messages
> 
> descriptor_sd_propagation_recursive: DC=DomainDnsZones,DC=*****,DC=de 
> not found under DC=*****,DC=de
> descriptor_sd_propagation_recursive: DC=ForestDnsZones,DC=*****,DC=de 
> not found under DC=*****,DC=de
> 
> Unable to find group id for BIND,
>                 set permissions to sam.ldb* files manually Unable to find group id for BIND,
>                 set permissions to sam.ldb* files manually
> 
> bind is running as user root

Given your errors, you should check that bind can access the database and dns.keytab correctly.

Are you running 9.8 or 9.9?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org