[Samba] samba_dnsupdate failed with RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any KDC for requested realm)

[Rowland Penny]

On 27/03/15 15:28, Dania Ramirez Moya wrote:
> Hi list:
>
> I joined Samba4.1.7 to Windows2k3 R2 domain, when I run:
> *samba_dnsupdate --verbose --all-names*
>
>
> IPs: ['192.168.186.137']
> Skipping PDC entry (SRV
> _ldap._tcp.pdc._msdcs.${DNSDOMAIN}                   ${HOSTNAME} 389) as we
> are not a PDC
> Skipping PDC entry (SRV
> _ldap._tcp.pdc._msdcs.${DNSFOREST}                   ${HOSTNAME} 389) as we
> are not a PDC
> Traceback (most recent call last):
>    File "/usr/sbin/samba_dnsupdate", line 510, in <module>
>      get_credentials(lp)
>    File "/usr/sbin/samba_dnsupdate", line 123, in get_credentials
>      raise e
> *RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any
> KDC for requested realm)*
>
> Kinit works fine. This is mi /etc/resolv.conf:
> domain economia
> search economia
> nameserver 127.0.0.1
> nameserver 192.168.186.234 (Windows2k3)
>
> samba dns server works fine too.
> I haven't run fsmo transfer  to samba4 nor w2k3 demote dc  yet
>   Is this error important?
> I would appreciate any help
> Best regards

Is your kerberos realm really 'ECONOMIA' ?
It is usually in the format 'EXAMPLE.COM'

You can remove the domain line from /etc/resolv.conf, you cannot have 
both 'domain' and 'search' and the second to be found will be used. You 
should also have the other DC first in the list, so your DC uses the 
other DC for dns unless that fails.

What have you got in /etc/krb5.conf ?

Rowland