[Samba] Samba_dlz DNS update permissions

[Daniel Müller]

Did you set the dns entry of the machine by hand?
This would be the a tipical error then.
Just remove the machine and let it do the job.

Good luck
Daniel


EDV Daniel Müller

Leitung EDV
Tropenklinik Paul-Lechler-Krankenhaus
Paul-Lechler-Str. 24
72076 Tübingen 
Tel.: 07071/206-463, Fax: 07071/206-499
eMail: mueller at tropenklinik.de
Internet: www.tropenklinik.de 




-----Ursprüngliche Nachricht-----
Von: samba-bounces at lists.samba.org [mailto:samba-bounces at lists.samba.org] Im
Auftrag von Wayne Andersen
Gesendet: Donnerstag, 20. März 2014 18:36
Cc: samba at lists.samba.org
Betreff: [Samba] Samba_dlz DNS update permissions

I have configured my samba system to use bind_dlz, and it works great, I do
have a question about workstation initiated DNS updates.

When I do a ipconfig /registerdns I get.

20-Mar-2014 11:20:36.347 samba_dlz: starting transaction on zone
corp.mydomain.com
20-Mar-2014 11:20:36.355 client 192.168.1.78#52450: update
'corp.mydomain.com/IN' denied
20-Mar-2014 11:20:36.355 samba_dlz: cancelling transaction on zone
corp.mydomain.com
20-Mar-2014 11:20:36.373 samba_dlz: starting transaction on zone
corp.mydomain.com
20-Mar-2014 11:20:36.378 samba_dlz: disallowing update of
signer=j81wby1\$\@CORP.mydomain.COM name=J81WBY1.corp.mydomain.com type=AAAA
error=insufficient access rights
20-Mar-2014 11:20:36.379 client 192.168.1.78#50807/key
j81wby1\$\@CORP.mydomain.COM: updating zone 'corp.mydomain.com/NONE': 
update failed: rejected by secure update (REFUSED)
20-Mar-2014 11:20:36.379 samba_dlz: cancelling transaction on zone
corp.mydomain.com

samba_dnsupdate works great.

So when it flags the 'insufficient access rights' which rights is it
referring to, AD rights, NAMED permissions...?

Do I need to change permissions for Domain Computers to allow these updates?
--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba