[Samba] dnsupdate_nameupdate_done: Failed DNS update with exit code 110

[Hans Schulze]

Hello,

i have a fresh installed Member DC with Samba 4.17.10. Kerberos and 
internal DNS ist working. But i have trouble to update the Reverse Zone. 
When i restart the samba process then i have following log entries:

Sep 15 14:50:03 dc3 samba[481]: [2023/09/15 14:50:03.112079,  0] 
../../lib/util/util_runcmd.c:355(samba_runcmd_io_handler)
Sep 15 14:50:03 dc3 samba[481]:   /usr/sbin/samba_dnsupdate: ; TSIG 
error with server: tsig verify failure
Sep 15 14:50:03 dc3 samba[481]: [2023/09/15 14:50:03.160179,  0] 
../../lib/util/util_runcmd.c:355(samba_runcmd_io_handler)
Sep 15 14:50:03 dc3 samba[481]:   /usr/sbin/samba_dnsupdate: ; TSIG 
error with server: tsig verify failure
Sep 15 14:50:03 dc3 samba[481]: [2023/09/15 14:50:03.211343,  0] 
../../lib/util/util_runcmd.c:355(samba_runcmd_io_handler)
Sep 15 14:50:03 dc3 samba[481]:   /usr/sbin/samba_dnsupdate: ; TSIG 
error with server: tsig verify failure
Sep 15 14:50:03 dc3 samba[481]: [2023/09/15 14:50:03.260054,  0] 
../../lib/util/util_runcmd.c:355(samba_runcmd_io_handler)
Sep 15 14:50:03 dc3 samba[481]:   /usr/sbin/samba_dnsupdate: ; TSIG 
error with server: tsig verify failure
Sep 15 14:50:03 dc3 samba[481]: [2023/09/15 14:50:03.309294,  0] 
../../source4/dsdb/dns/dns_update.c:85(dnsupdate_nameupdate_done)
Sep 15 14:50:03 dc3 samba[481]:   dnsupdate_nameupdate_done: Failed DNS 
update with exit code 8


With "samba_dnsupdate --verbose":

; TSIG error with server: tsig verify failure
Failed nsupdate: 2
update(nsupdate): SRV 
_ldap._tcp.Görlitz._sites.ForestDnsZones.ad.mlow.org dc3.ad.mlow.org 389
Calling nsupdate for SRV 
_ldap._tcp.Görlitz._sites.ForestDnsZones.ad.mlow.org dc3.ad.mlow.org 389 
(add)
Successfully obtained Kerberos ticket to DNS/dc3.ad.mlow.org as DC3$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.G\195\182rlitz._sites.ForestDnsZones.ad.mlow.org. 900 IN SRV 
0 100 389 dc3.ad.mlow.org.

; TSIG error with server: tsig verify failure
Failed nsupdate: 2

The funny thing is, that with "samba_dnsupdate --verbose 
--use-samba-tool" the dnsupdate works. What is the Problem?

Regards