[Samba] Ubuntu DC dns update failure

[Davor Vusir]

In my working ubuntu 14.04 and Samba 4.1.8 the configurations that differ
are:

/etc/hosts
127.0.0.1 palmera.altea.site palmera localhost localhost.localdomain
192.168.1.132 palmera.altea.site palmera

and that the [realm] part in /etc/krb5.conf is missing.

Regards
Davor
 Den 5 jun 2014 20:38 skrev "steve" <steve at steve-ss.com>:

> Hi
> Lubuntu 14.04 with bind9 and the samba 4.1.8 tarball
> All seems well. However, 2 errors:
>
> 1. upon starting samba:
> samba: setproctitle not initialized, please either call
> setproctitle_init() or link against libbsd-ctor.
>
> 2. samba_dnsupdate
> - error from samba:
> ../source4/dsdb/dns/dns_update.c:294: Failed DNS update -
> NT_STATUS_IO_TIMEOUT
>
> - error whilst running samba_dnsupdate:
> Looking for DNS entry SRV
> _gc._tcp.default-first-site-name._sites.altea.site palmera.altea.site
> 3268 as _gc._tcp.default-first-site-name._sites.altea.site.
> Checking 0 100 3268 palmera.altea.site. against SRV
> _gc._tcp.default-first-site-name._sites.altea.site palmera.altea.site
> 3268
> Traceback (most recent call last):
>   File "/usr/local/samba/sbin/samba_dnsupdate", line 510, in <module>
>     get_credentials(lp)
>   File "/usr/local/samba/sbin/samba_dnsupdate", line 123, in
> get_credentials
>     raise e
> RuntimeError: kinit for PALMERA$@ALTEA.SITE failed (Cannot contact any
> KDC for requested realm)
>
> /etc/hosts
> 127.0.0.1 localhost
> 192.168.1.132 palmera.altea.site palmera
>
> /etc/resolv.conf
> nameserver 192.168.1.132
> search altea.site
>
> /etc/hostname
> palmera.altea.site
>
>  /etc/krb5.conf
> [libdefaults]
>         default_realm = ALTEA.SITE
>         dns_lookup_realm = false
>         dns_lookup_kdc = true
> [realms]
>   ALTEA.SITE = {
>   kdc = palmera.altea.site:88
>  }
>
> apparmor is not running
>
>
> hostname -d -s and -d all return correctly
> bind 9 loads the samba_dlz partitions OK
> all the dns checks in the howto pass OK
>
> It seems that it's failing getting a ticket using the machine key,
> however we can kinit using secrets.keytab fine.
>
> Here is private:
> drwxrwx--- 3 bind bind    4096 jun  5 18:41 dns
> -rw-r----- 1 bind bind     742 jun  5 18:41 dns.keytab
> -rw-r--r-- 1 root root    2270 jun  5 18:41 dns_update_list
> -rw------- 1 root root 1286144 jun  5 18:40 hklm.ldb
> -rw------- 1 root root 1609728 jun  5 19:25 idmap.ldb
> -rw-r--r-- 1 root root      91 jun  5 18:41 krb5.conf
> srwxrwxrwx 1 root root       0 jun  5 20:33 ldapi
> drwxr-x--- 2 root root    4096 jun  5 20:33 ldap_priv
> -rw-r--r-- 1 root bind     555 jun  5 19:22 named.conf
> -rw-r--r-- 1 root root     555 jun  5 19:21 named.conf~
> -r--r--r-- 1 root root     220 jun  5 18:52 named.conf.update
> -rw-r--r-- 1 root root    2212 jun  5 18:41 named.txt
> -rw------- 1 root root 1286144 jun  5 18:40 privilege.ldb
> -rw------- 1 root root     696 jun  5 18:52 randseed.tdb
> -rw------- 1 root root 4251648 jun  5 18:41 sam.ldb
> drwxr-x--- 2 root bind    4096 jun  5 18:41 sam.ldb.d
> -rw------- 1 root root     696 jun  5 20:32 schannel_store.tdb
> -rw------- 1 root bind    1082 jun  5 18:41 secrets.keytab
> -rw------- 1 root root 1286144 jun  5 18:41 secrets.ldb
> -rw------- 1 root root  430080 jun  5 20:33 secrets.tdb
> -rw------- 1 root root 1286144 jun  5 18:40 share.ldb
> drwxr-xr-x 3 root root    4096 jun  5 18:52 smbd.tmp
> -rw-r--r-- 1 root root     955 jun  5 18:41 spn_update_list
> drwx------ 2 root root    4096 jun  5 18:52 tls
>
> Any ideas anyone?
> Cheers,
> Steve
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>