[Samba] Samba4 DNS Update failing and crashing Bind

[Alex MacCuish]

Hello,

I have successfully set up Samba4 on my network, users and can join, and
everything works apart from dns updates to bind. Whenever a client tries to
make an update, my bind9 server crashes, with the following in the log:

Dec 11 15:21:11 CNSRV01 named[3457]: couldn't add command channel ::1#953:
file not found
Dec 11 15:21:11 CNSRV01 named[3457]: zone 0.in-addr.arpa/IN: loaded serial 1
Dec 11 15:21:11 CNSRV01 named[3457]: zone 127.in-addr.arpa/IN: loaded
serial 1
Dec 11 15:21:11 CNSRV01 named[3457]: zone 255.in-addr.arpa/IN: loaded
serial 1
Dec 11 15:21:11 CNSRV01 named[3457]: zone localhost/IN: loaded serial 2
Dec 11 15:21:11 CNSRV01 named[3457]: managed-keys-zone ./IN: loading from
master file managed-keys.bind failed: file not found
Dec 11 15:21:11 CNSRV01 named[3457]: managed-keys-zone ./IN: loaded serial 0
Dec 11 15:21:11 CNSRV01 named[3457]: running
Dec 11 15:21:23 CNSRV01 named[3457]: samba_dlz: starting transaction on
zone carlyle.internal
Dec 11 15:21:23 CNSRV01 named[3457]: client 192.168.1.114#61086: update
'carlyle.internal/IN' denied
Dec 11 15:21:23 CNSRV01 named[3457]: samba_dlz: cancelling transaction on
zone carlyle.internal
Dec 11 15:21:23 CNSRV01 named[3457]: tkey.c:490: ENSURE(result == (((1) <<
16) + 28) || result == 0) failed, back trace
Dec 11 15:21:23 CNSRV01 named[3457]: #0 0x806e728 in assertion_failed()+0x58
Dec 11 15:21:23 CNSRV01 named[3457]: #1 0x81d47a8 in
isc_assertion_failed()+0x28
Dec 11 15:21:23 CNSRV01 named[3457]: #2 0x816fec8 in
dns_tkey_processquery()+0x1068
Dec 11 15:21:23 CNSRV01 named[3457]: #3 0x807e057 in ns_query_start()+0x3e7
Dec 11 15:21:23 CNSRV01 named[3457]: #4 0x8065464 in client_request()+0xb74
Dec 11 15:21:23 CNSRV01 named[3457]: #5 0x81f2385 in
isc__taskmgr_dispatch()+0x145
Dec 11 15:21:23 CNSRV01 named[3457]: #6 0x81f4fb8 in evloop()+0x98
Dec 11 15:21:23 CNSRV01 named[3457]: #7 0x81f5517 in isc__app_ctxrun()+0x87
Dec 11 15:21:23 CNSRV01 named[3457]: #8 0x81f5a8f in isc__app_run()+0xf
Dec 11 15:21:23 CNSRV01 named[3457]: #9 0x805f113 in main()+0xd43
Dec 11 15:21:23 CNSRV01 named[3457]: #10 0xb75be113 in _fini()+0xaf3b7297
Dec 11 15:21:23 CNSRV01 named[3457]: #11 0x805f345 in _start()+0x21
Dec 11 15:21:23 CNSRV01 named[3457]: exiting (due to assertion failure)
There are also a few other errors I'm not sure how to fix. My bind options
are:

options {
        directory "/var/cache/bind";
        // If there is a firewall between you and nameservers you want
        // to talk to, you may need to fix the firewall to allow multiple
        // ports to talk.  See http://www.kb.cert.org/vuls/id/800113
        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.
        // Uncomment the following block, and insert the addresses replacing
        // the all-0's placeholder.
         forwarders {
                208.67.222.222;
                208.67.220.220;
         };
        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };
 tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab";
};

Any help would be greatly appreciated,

Alex