[Samba] dns_tkey_negotiategss: TKEY is unacceptable

[Rowland penny]

On 30/12/15 19:57, Carlos A. P. Cunha wrote:
> Hello!
> Output of command
>
> # 1 record
> dn: 
> CN={31B2F340-016D-11D2-945F-00C04FB984F9},CN=Policies,CN=System,DC=MYDOMAIN
> cn: {31B2F340-016D-11D2-945F-00C04FB984F9}
> name: {31B2F340-016D-11D2-945F-00C04FB984F9}
>
> Referral #
> ref: ldap: //interno.mastersonda.com.br/CN=Configuration,DC=MYDOMAIN
> Referral #
> ref: ldap: //interno.mastersonda.com.br/DC=DomainDnsZones,DC=MYDOMAIN
> Referral #
> ref: ldap: //interno.mastersonda.com.br/DC=ForestDnsZones,DC=MYDOMAIN
> # Returned 4 records
> # 1 entries
> # 3 referrals
>
>
> One important thing to previous email error edited the file in line 
> where accuses the error
>
> I came 
> /opt/samba/lib/python2.7/site-packages/samba/provision/__init__.py +282
>
> and commented the line (not sure if this and bad)
>
> # names.policyid = str (res7 [0] ["cn"]). replace ("{", ""). replace 
> ("}", "")
>
> Thus the error entering --dns-backend samba_upgradedns = BIND9_DLZ or 
> --dns-backend samba_upgradedns = SAMBA_INTERNAL sumio and the case is 
> made that, however validei the DNS account is deleted but not 
> recreated, and sometimes when trying to recreate Manually says
>
>
> ERROR (ldb): Failed to add user 'dns-DC-Linux': - samldb: Account name 
> (sAMAccountName) 'dns-DC-LINUX' already in use!
>
> However the account does not exist in the User list.
>
>
>
> Thanks
>
>

Have you attempted to change the dns backend to the internal dns server, 
then change it back to the BIND_DLZ dns server, as the wiki page advises ?

Rowland