S4 and BIND

[Andrew Bartlett]

On Fri, 2012-06-08 at 16:04 +0800, titantoppler at gmail.com wrote:
> Hi list,
> 
> I've been trying to set up another S4 DC on my network.
> 
> My old set up was a single S4 DC (alpha 12) running DNS as well. I
> subsequently hived off the DNS service to a dedicated box by copying the
> zone files and the dns.keytab file from the original S4 DC to the new box.
> 
> It seemed to work fine, though as no DNS updates from the original S4 DC
> were needed I am just guessing here.
> 
> I successfully installed S4 (alpha 21) last night on another box. I joined
> it to the domain using the instructions from here (
> https://wiki.samba.org/index.php/Samba4/HOWTO/Join_a_domain_as_a_DC)
> 
> On starting S4, however, I get an error message that says:
> [2012/06/05 09:39:52,  0]
> ../lib/util/util_runcmd.c:334(samba_runcmd_io_handler)
>   /usr/local/samba/sbin/samba_dnsupdate: update failed: NOTAUTH
> 
> What is the problem here?
> 
> I have exported the new dns.keytab and restarted BIND, but to no avail. My
> BIND version is 9.8.1

Have you included all the options (the gss options in particular, but
also the configuration for the DLZ plugin) in your named.conf as
directed by provision?

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org