[Samba] TSIG error with server: tsig verify failure - Failed DNS update with exit code 5
Peter Smode
smodep at icloud.com
Fri Nov 17 03:32:59 UTC 2023
I have been trying to figure out this problem for a couple weeks no with no
luck. Out of the blue, I started getting TSIG errors on my Samba AD DC. I
pulled the logging extract below after turning up the log level to 10 and
waiting for a reoccurrence. These errors will typically happen every few
hours with one to three occurrences withing the same second. Can anybody
tell from this what Samba is tripping over?
I am running Samba v4.14.7 built from source on Rocky Linux release 8.8. If
I run sudo samba_dnsupdate --verbose --use-samba-tool, there are no DNS
updates made and no error given.
The one odd thing I see in the log is the fifth address for "add interface
ens3"; the address starting with fd4e is not part of the config on this
system.
Other than that, there is no obvious problem in my environment that I can
find at the moment, despite these annoying and suspicious errors.
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: INFO: Current debug levels:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: all: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: tdb: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: printdrivers: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: lanman: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: smb: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: rpc_parse: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: rpc_srv: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: rpc_cli: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: passdb: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: sam: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: auth: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: winbind: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: vfs: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: idmap: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: quota: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: acls: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: locking: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: msdfs: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dmapi: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: registry: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: scavenger: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dns: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: tevent: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: auth_audit: 3
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: auth_json_audit: 3
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dsdb_password_json_audit: 5
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dsdb_transaction_audit: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dsdb_transaction_json_audit: 5
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dsdb_group_audit: 10
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dsdb_group_json_audit: 5
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Processing section "[sysvol]"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Processing section "[netlogon]"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: pm_process() returned Yes
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=2603:7000:a200:9c13::a12 bcast=
netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=2603:7000:a200:9c13:9ea1:8cfb:3b0f:6d45 bcast=
netmask=ffff:ffff:ffff:ffff::
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=fd06:8328:ea57::a12 bcast=
netmask=ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=fd06:8328:ea57:0:4e42:23c9:d129:f344 bcast= netmask=ffff:ffff:ffff:ffff::
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3
ip=fd4e:ae4e:8500:41e2:d6da:777d:73aa:76dc bcast=
netmask=ffff:ffff:ffff:ffff::
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: added interface ens3 ip=192.168.15.84
bcast=192.168.15.255 netmask=255.255.255.0
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Security token SIDs (1):
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: SID[ 0]: S-1-5-18
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privileges (0xFFFFFFFFFFFFFFFF):
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 0]:
SeMachineAccountPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 1]:
SeTakeOwnershipPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 2]: SeBackupPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 3]: SeRestorePrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 4]:
SeRemoteShutdownPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 5]:
SePrintOperatorPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 6]: SeAddUsersPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 7]:
SeDiskOperatorPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 8]: SeSecurityPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 9]:
SeSystemtimePrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 10]: SeShutdownPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 11]: SeDebugPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 12]:
SeSystemEnvironmentPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 13]:
SeSystemProfilePrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 14]:
SeProfileSingleProcessPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 15]:
SeIncreaseBasePriorityPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 16]:
SeLoadDriverPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 17]:
SeCreatePagefilePrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 18]:
SeIncreaseQuotaPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 19]:
SeChangeNotifyPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 20]: SeUndockPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 21]:
SeManageVolumePrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 22]:
SeImpersonatePrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 23]:
SeCreateGlobalPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Privilege[ 24]:
SeEnableDelegationPrivilege
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Rights (0x 0):
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_spnupdate: Initial schema load needed, as we
have no existing schema, seq_num: 6
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Initial schema load needed, as we
have no existing schema, seq_num: 6
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_spnupdate: schema_fsmo_init: we are master[yes]
updates allowed[no]
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_spnupdate: Initial schema load needed, as we
have no existing schema, seq_num: 6
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: schema_fsmo_init: we are master[yes]
updates allowed[no]
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Initial schema load needed, as we
have no existing schema, seq_num: 6
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_spnupdate: schema_fsmo_init: we are master[yes]
updates allowed[no]
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: schema_fsmo_init: we are master[yes]
updates allowed[no]
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request: SEARCH
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dn: @MODULES
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: scope: base
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: expr: (@LIST=*)
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: attr: @LIST
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: control: <NONE>
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_lock
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(tdb)->search
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_callback": 0x55875bb6e3a0
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_timeout": 0x55875cb694b0
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Running timer event
0x55875bb6e3a0 "ldb_kv_callback"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: ENTRY
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dn: @MODULES
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: @LIST: samba_secrets
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: DONE
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: error: 0
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_unlock
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875cb694b0 "ldb_kv_timeout"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875bb6e3a0 "ldb_kv_callback"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
REGISTER_CONTROL
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: 1.2.840.113556.1.4.1413
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: control: <NONE>
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_asprintf/set_errstring:
unable to find module or backend to handle operation: request
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request: SEARCH
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dn: <rootDSE>
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: scope: base
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: expr: (objectClass=*)
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: attr: rootDomainNamingContext
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: attr: configurationNamingContext
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: attr: schemaNamingContext
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: attr: defaultNamingContext
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: control: <NONE>
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_lock
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(rdn_name)->search
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(tdb)->search
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_callback": 0x55875cb694b0
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_timeout": 0x55875cf8ff80
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Running timer event
0x55875cb694b0 "ldb_kv_callback"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_asprintf/set_errstring: NULL
Base DN invalid for a base search
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: DONE
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: error: 34
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: msg: NULL Base DN invalid for a base
search
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_unlock
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875cf8ff80 "ldb_kv_timeout"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875cb694b0 "ldb_kv_callback"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb_wrap open of secrets.ldb
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request: SEARCH
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dn: cn=Primary Domains
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: scope: sub
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: expr:
(&(flatname=KNADA)(objectclass=primaryDomain))
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: attr: <ALL>
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: control: <NONE>
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_lock
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(rdn_name)->search
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_next_request:
(tdb)->search
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_callback": 0x55875cf8ff80
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Added timed event
"ldb_kv_timeout": 0x55875ba49520
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Running timer event
0x55875cf8ff80 "ldb_kv_callback"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: ENTRY
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: dn: flatname=KNADA,cn=Primary Domains
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: msDS-KeyVersionNumber: 2
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectClass: top
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectClass: primaryDomain
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectClass: kerberosSecret
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectSid:
S-1-5-21-280931492-1516600349-3173203192
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: privateKeytab: secrets.keytab
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: realm: knada.lan.kitsnet.us
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: saltPrincipal:
host/camus.knada.lan.kitsnet.us at KNADA.LAN.KITSNET.US
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: samAccountName: CAMUS$
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: # secret::: REDACTED SECRET ATTRIBUTE
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: secureChannelType: 6
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: servicePrincipalName: HOST/camus
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: servicePrincipalName:
HOST/camus.knada.lan.kitsnet.us
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: objectGUID:
9e4b45c0-5204-4adb-b90a-891b6d78f307
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: whenCreated: 20210502210723.0Z
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: whenChanged: 20210502210723.0Z
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: uSNCreated: 7
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: uSNChanged: 7
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: name: KNADA
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: flatname: KNADA
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: distinguishedName:
flatname=KNADA,cn=Primary Domains
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_response: DONE
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: error: 0
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: ldb_trace_request:
(tdb)->read_unlock
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875ba49520 "ldb_kv_timeout"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ldb: Destroying timer event
0x55875cf8ff80 "ldb_kv_callback"
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate:
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Received smb_krb5 packet of length
327
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Received smb_krb5 packet of length
185
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: kinit for CAMUS$@KNADA.LAN.KITSNET.US
succeeded
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'gssapi_spnego'
registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'gssapi_krb5'
registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'gssapi_krb5_sasl'
registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'spnego' registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'schannel' registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'naclrpc_as_system'
registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'sasl-EXTERNAL'
registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'ntlmssp' registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend
'ntlmssp_resume_ccache' registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'http_basic'
registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'http_ntlm' registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'http_negotiate'
registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'krb5' registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GENSEC backend 'fake_gssapi_krb5'
registered
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Ticket in credentials cache for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 36000 secs
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce215f0]: subreq: 0x55875c95d990
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce215f0]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)] state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 36000 secs
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990
<27>Nov 16 20:21:05 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)] state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 35999 secs
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)] state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 35999 secs
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)] state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 35999 secs
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)] state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: Starting GENSEC mechanism
gssapi_krb5_sasl
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: GSSAPI credentials for
CAMUS$@KNADA.LAN.KITSNET.US will expire in 35999 secs
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_send:
gssapi_krb5_sasl[0x55875ce27d40]: subreq: 0x55875c95d990
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: gensec_update_done:
gssapi_krb5_sasl[0x55875ce27d40]: NT_STATUS_MORE_PROCESSING_REQUIRED
tevent_req[0x55875c95d990/../../source4/auth/gensec/gensec_gssapi.c:1058]:
state[2] error[0 (0x0)] state[struct gensec_gssapi_update_state
(0x55875c95db40)] timer[(nil)]
finish[../../source4/auth/gensec/gensec_gssapi.c:1068]
<27>Nov 16 20:21:06 camus samba[30387]:
/usr/local/samba/sbin/samba_dnsupdate: ; TSIG error with server: tsig verify
failure
<27>Nov 16 20:21:06 camus samba[30387]: [2023/11/16 20:21:06.299829, 0,
pid=30387, effective(0, 0), real(0, 0)]
../../source4/dsdb/dns/dns_update.c:86(dnsupdate_nameupdate_done)
<27>Nov 16 20:21:06 camus samba[30387]: dnsupdate_nameupdate_done: Failed
DNS update with exit code 5
Peter
smodep at icloud.com
More information about the samba
mailing list