[Samba] Samba4 DNS update doesn`t work after AD DS recover

[commiethebeastie]

I have --enable-fhs installed samba in /usr/local/ on ubuntu 12.04. I recover
/usr/local/var/lib/samba into new ubuntu installation. Windows 7 are our AD
DS clients.

I did

/chown -R bind:bind /usr/local/var/lib/samba/private/dns
chgrp bind :/usr/local/var/lib/samba/private/dns.keytab
chmod g+r :/usr/local/var/lib/samba/private/dns.keytab
chmod -R 775 :/usr/local/var/lib/samba/private/dns/

Then I generated dns.keytab file with /dns-smbserver/ user

The command samba_dnsupdate --verbose --all-names  is executed without any
errors

The aa-logprof doesn't show any messages

But I have errors in /usr/log/syslog after ipconfig /registerdns command

/Dec 24 09:30:56 ldap named[31723]: client 192.168.0.116#50008: update
'anon.srv/IN' denied
Dec 24 09:30:56 ldap named[31723]: samba_dlz: cancelling transaction on zone
anon.srv
Dec 24 09:30:56 ldap named[31723]: samba_dlz: starting transaction on zone
anon.srv
Dec 24 09:30:56 ldap named[31723]: samba_dlz: disallowing update of
signer=feo6\$\@anon.srv name=FEO6.anon.srv type=AAAA error=insufficient
access rights
Dec 24 09:30:56 ldap named[31723]: client 192.168.0.116#50796: updating zone
'anon.srv/NONE': update failed: rejected by secure update (REFUSED)
Dec 24 09:30:56 ldap named[31723]: samba_dlz: cancelling transaction on zone
anon.srv/





--
View this message in context: http://samba.2283325.n4.nabble.com/Samba4-DNS-update-doesn-t-work-after-AD-DS-recover-tp4641964.html
Sent from the Samba - General mailing list archive at Nabble.com.