DNS TSIG updates need to check ACLs

[Kai Blin]

On 2012-09-06 10:44, Rowland Penny wrote:
> On 06/09/12 03:13, Andrew Bartlett wrote:
>>
>> Fortunately DNS updates are still denied by default,
> 
> Hi, is this why you get the following message whenever you join a client
> to a samba4 server? and if so, how do you turn on DNS updates?
> 
> DNS Update for server1.home.lan failed: ERROR_DNS_INVALID_MESSAGE
> DNS update failed: NT_STATUS_UNSUCCESSFUL

>From this error message I gather you are joining the client via net ads
join. How did you provision on the server side? Did you specify
--dns-backend?

Cheers,
Kai

-- 
Kai Blin
Worldforge developer http://www.worldforge.org/
Wine developer http://wiki.winehq.org/KaiBlin
Samba team member http://www.samba.org/samba/team/