DNS Error joining Samba 3.6.x to samba4 ADS

[Kai Blin]

On 2012-07-24 20:58, Michael Wood wrote:
> Hi
> 
> On 24 July 2012 17:31, Kahle, Markus <markus.kahle at brueckmann-gmbh.de> wrote:
>>
>> Hi !
>>
>> I'm trying to join a samba 3.6.6 Server as a member server to an AD domain
>> with samba 4 (version 4.0.0beta5-GIT-867de2f) built today, DNS is
>> bind-9.8.3.
>> The AD is running with no problems and joining a windows7 client works
>> with no problem and DNS got updated.
>>
>> But when joining the samba4 AD with a samba 3.6.6 server as a member i got
>> the following error message:
>>
>> ---
>> [root at underworld2 samba]# net ads join -U Administrator at AD.BEL
>> Enter Administrator at AD.BEL's password:
>> Using short domain name -- BEL
>> Joined 'UNDERWORLD2' to realm 'ad.bel'
>> DNS Update for underworld2.ad.bel failed: ERROR_DNS_INVALID_MESSAGE
>> DNS update failed!
>> ---
>>
>> And this message in the log of the domain controller:
>>
>> ---
>> Jul 24 16:56:17 uw2 named[19252]: samba_dlz: starting transaction on zone
>> ad.bel
>> Jul 24 16:56:17 uw2 named[19252]: client 10.0.0.194#47842: updating zone
>> 'ad.bel/NONE': update unsuccessful: underworld2.ad.bel/A: 'RRset exists
>> (value dependent)' prerequisite not satisfied (NXRRSET)
> 
> This means that the server was expecting there NOT to be a DNS entry
> for the machine yet, but it found one.  Therefore the "prerequisite"
> was "not satisfied" and it refused to add the DNS entry.

Actually, the prereqs are set by the client. Just a minor nitpick,
though, Michael's advice on deleting the offending record is what I'd
suggest, too.

Cheers,
Kai

-- 
Kai Blin
Worldforge developer http://www.worldforge.org/
Wine developer http://wiki.winehq.org/KaiBlin
Samba team member http://www.samba.org/samba/team/

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 262 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba-technical/attachments/20120724/9a552e11/attachment.pgp>