TKEY unacceptable

Matthieu Patou mat at
Sat May 21 15:56:47 MDT 2011

Hello Andrews,

I faced the message dns_tkey_negotiategss: TKEY is unacceptable and 
after searching trying some stuff without success and wishing kai had 
finished a complete and simple DNS server I started to look at the traces.

I found that my client (actually a second DNS server) was requesting a 
SPN for DNS/ when the instruction in named.txt 
in the provision folder told me to have tkey-gssapi-credential 

I think that's the reason of the problem because as soon as I changed to 
DNS/ it started to work !

See the trace between the "client DC" ( and the "DNS DC" 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: dnsupdate.gz
Type: application/x-gzip
Size: 50327 bytes
Desc: not available
URL: <>

More information about the samba-technical mailing list