[Samba] Fwd: samba_dnsupdate failed with RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact any KDC for requested realm)

[Rowland Penny]

On 28/03/15 21:15, Dania Ramirez Moya wrote:

>
> Hello, thank you Rowland for you response
>  Yes, it is.This domain was installed with a single label, just 
> ECONOMIA. Is that a problem?

It could be, the realm name is usually the DNS domain name, whilst the 
windows domain name is just one word and is usually the left hand part 
of the realm name. i.e. if the DNS domain name  is example.com then the 
realm name would be EXAMPLE.COM (the realm name is usually in uppercase) 
and the windows domain name would be EXAMPLE (again in uppercase). If 
samba_dnsupdate expects something like example.com, then this could be 
your problem, not saying it is, only that it could be.

I would suggest that you check on the windows server what your realm 
name is, you may find that it isn't 'ECONOMIA'

Rowland

> Thit is my /etc/krb5.conf
>
> [libdefaults]
>         default_realm = ECONOMIA
>         dns_lookup_realm = true
>         dns_lookup_kdc = true
> I made the changes that you suggest me but  I continue to get the same 
> result RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot 
> contact any KDC for)
>
> *samba_dnsupdate --verbose
> IPs: ['192.168.186.137']
> Skipping PDC entry (SRV _ldap._tcp.pdc._msdcs.${DNSDOMAIN} ${HOSTNAME} 
> 389) as we are not a PDC
> Skipping PDC entry (SRV _ldap._tcp.pdc._msdcs.${DNSFOREST} ${HOSTNAME} 
> 389) as we are not a PDC
> Looking for DNS entry A economia 192.168.186.137 as economia.
> Failed to find matching DNS entry A economia 192.168.186.137
> Looking for DNS entry A smb4economia.economia 192.168.186.137 as 
> smb4economia.economia.
> Looking for DNS entry A gc._msdcs.economia 192.168.186.137 as 
> gc._msdcs.economia.
> Failed to find matching DNS entry A gc._msdcs.economia 192.168.186.137
> Looking for DNS entry CNAME 
> 207c6ca4-3976-4aaf-b60a-bc98093df340._msdcs.economia 
> smb4economia.economia as 
> 207c6ca4-3976-4aaf-b60a-bc98093df340._msdcs.economia.
> Looking for DNS entry SRV _kpasswd._tcp.economia smb4economia.economia 
> 464 as _kpasswd._tcp.economia.
> Checking 0 100 464 dc.economia. against SRV _kpasswd._tcp.economia 
> smb4economia.economia 464
> Failed to find matching DNS entry SRV _kpasswd._tcp.economia 
> smb4economia.economia 464
> Looking for DNS entry SRV _kpasswd._udp.economia smb4economia.economia 
> 464 as _kpasswd._udp.economia.
> Checking 0 100 464 dc.economia. against SRV _kpasswd._udp.economia 
> smb4economia.economia 464
> Failed to find matching DNS entry SRV _kpasswd._udp.economia 
> smb4economia.economia 464
> Looking for DNS entry SRV _kerberos._tcp.economia 
> smb4economia.economia 88 as _kerberos._tcp.economia.
> Checking 0 100 88 dc.economia. against SRV _kerberos._tcp.economia 
> smb4economia.economia 88
> Failed to find matching DNS entry SRV _kerberos._tcp.economia 
> smb4economia.economia 88
> Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.economia 
> smb4economia.economia 88 as _kerberos._tcp.dc._msdcs.economia.
> Checking 0 100 88 dc.economia. against SRV 
> _kerberos._tcp.dc._msdcs.economia smb4economia.economia 88
> Failed to find matching DNS entry SRV 
> _kerberos._tcp.dc._msdcs.economia smb4economia.economia 88
> Looking for DNS entry SRV 
> _kerberos._tcp.default-first-site-name._sites.economia 
> smb4economia.economia 88 as 
> _kerberos._tcp.default-first-site-name._sites.economia.
> Checking 0 100 88 dc.economia. against SRV 
> _kerberos._tcp.default-first-site-name._sites.economia 
> smb4economia.economia 88
> Failed to find matching DNS entry SRV 
> _kerberos._tcp.default-first-site-name._sites.economia 
> smb4economia.economia 88
> Looking for DNS entry SRV 
> _kerberos._tcp.default-first-site-name._sites.dc._msdcs.economia 
> smb4economia.economia 88 as 
> _kerberos._tcp.default-first-site-name._sites.dc._msdcs.economia.
> Checking 0 100 88 dc.economia. against SRV 
> _kerberos._tcp.default-first-site-name._sites.dc._msdcs.economia 
> smb4economia.economia 88
> Failed to find matching DNS entry SRV 
> _kerberos._tcp.default-first-site-name._sites.dc._msdcs.economia 
> smb4economia.economia 88
> Looking for DNS entry SRV _kerberos._udp.economia 
> smb4economia.economia 88 as _kerberos._udp.economia.
> Checking 0 100 88 dc.economia. against SRV _kerberos._udp.economia 
> smb4economia.economia 88
> Failed to find matching DNS entry SRV _kerberos._udp.economia 
> smb4economia.economia 88
> Looking for DNS entry SRV _ldap._tcp.economia smb4economia.economia 
> 389 as _ldap._tcp.economia.
> Checking 0 100 389 dc.economia. against SRV _ldap._tcp.economia 
> smb4economia.economia 389
> Failed to find matching DNS entry SRV _ldap._tcp.economia 
> smb4economia.economia 389
> Looking for DNS entry SRV _ldap._tcp.dc._msdcs.economia 
> smb4economia.economia 389 as _ldap._tcp.dc._msdcs.economia.
> Checking 0 100 389 dc.economia. against SRV 
> _ldap._tcp.dc._msdcs.economia smb4economia.economia 389
> Failed to find matching DNS entry SRV _ldap._tcp.dc._msdcs.economia 
> smb4economia.economia 389
> Looking for DNS entry SRV _ldap._tcp.gc._msdcs.economia 
> smb4economia.economia 3268 as _ldap._tcp.gc._msdcs.economia.
> Checking 0 100 3268 dc.economia. against SRV 
> _ldap._tcp.gc._msdcs.economia smb4economia.economia 3268
> Failed to find matching DNS entry SRV _ldap._tcp.gc._msdcs.economia 
> smb4economia.economia 3268
> Looking for DNS entry SRV 
> _ldap._tcp.default-first-site-name._sites.economia 
> smb4economia.economia 389 as 
> _ldap._tcp.default-first-site-name._sites.economia.
> Checking 0 100 389 dc.economia. against SRV 
> _ldap._tcp.default-first-site-name._sites.economia 
> smb4economia.economia 389
> Failed to find matching DNS entry SRV 
> _ldap._tcp.default-first-site-name._sites.economia 
> smb4economia.economia 389
> Looking for DNS entry SRV 
> _ldap._tcp.default-first-site-name._sites.dc._msdcs.economia 
> smb4economia.economia 389 as 
> _ldap._tcp.default-first-site-name._sites.dc._msdcs.economia.
> Checking 0 100 389 dc.economia. against SRV 
> _ldap._tcp.default-first-site-name._sites.dc._msdcs.economia 
> smb4economia.economia 389
> Failed to find matching DNS entry SRV 
> _ldap._tcp.default-first-site-name._sites.dc._msdcs.economia 
> smb4economia.economia 389
> Looking for DNS entry SRV 
> _ldap._tcp.default-first-site-name._sites.gc._msdcs.economia 
> smb4economia.economia 3268 as 
> _ldap._tcp.default-first-site-name._sites.gc._msdcs.economia.
> Checking 0 100 3268 dc.economia. against SRV 
> _ldap._tcp.default-first-site-name._sites.gc._msdcs.economia 
> smb4economia.economia 3268
> Failed to find matching DNS entry SRV 
> _ldap._tcp.default-first-site-name._sites.gc._msdcs.economia 
> smb4economia.economia 3268
> Looking for DNS entry SRV 
> _ldap._tcp.2dcb8925-d286-4995-8b9a-3cbc85a636b0.domains._msdcs.economia smb4economia.economia 
> 389 as 
> _ldap._tcp.2dcb8925-d286-4995-8b9a-3cbc85a636b0.domains._msdcs.economia.
> Checking 0 100 389 dc.economia. against SRV 
> _ldap._tcp.2dcb8925-d286-4995-8b9a-3cbc85a636b0.domains._msdcs.economia smb4economia.economia 
> 389
> Failed to find matching DNS entry SRV 
> _ldap._tcp.2dcb8925-d286-4995-8b9a-3cbc85a636b0.domains._msdcs.economia smb4economia.economia 
> 389
> Looking for DNS entry SRV _gc._tcp.economia smb4economia.economia 3268 
> as _gc._tcp.economia.
> Checking 0 100 3268 dc.economia. against SRV _gc._tcp.economia 
> smb4economia.economia 3268
> Failed to find matching DNS entry SRV _gc._tcp.economia 
> smb4economia.economia 3268
> Looking for DNS entry SRV 
> _gc._tcp.default-first-site-name._sites.economia smb4economia.economia 
> 3268 as _gc._tcp.default-first-site-name._sites.economia.
> Checking 0 100 3268 dc.economia. against SRV 
> _gc._tcp.default-first-site-name._sites.economia smb4economia.economia 
> 3268
> Failed to find matching DNS entry SRV 
> _gc._tcp.default-first-site-name._sites.economia smb4economia.economia 
> 3268
> Traceback (most recent call last):
>   File "/usr/sbin/samba_dnsupdate", line 510, in <module>
>     get_credentials(lp)
>   File "/usr/sbin/samba_dnsupdate", line 123, in get_credentials
>     raise e
> RuntimeError: kinit for SMB4ECONOMIA$@ECONOMIA failed (Cannot contact 
> any KDC for requested realm)
> *
>
>