[Samba] WERR_DNS_ERROR_RCODE_REFUSED

Carlos A. P. Cunha carlos.hollow at gmail.com
Fri Jul 1 12:21:01 UTC 2016


Hello!
Samba update for AD are working for what I identified the problem and 
creating newstarting AD, is that the problem is that Samba has FSMO and 
AD is being join the field

Thank you


Em 01-07-2016 06:52, mathias dufresne escreveu:
> To debug DNS updates: edit samba_dnsupdate and comment line (411 here) 
> "os.unlink(tmpfile)".
> This edition will make next run of command 'samba_dnsupdate' will not 
> remove temporary files in /tmp.
>
> Then you use one of these files to push update using nsupdate:
> nsupdate -g /tmp/<some samba_dnsupdate tmp file>
>
> -g means "use kerberos auth". For that works you must first perform a 
> kinit to get a valid ticket. Start with a kinit administrator as it 
> the one with the greater power facing AD. With that account if the 
> update is not successful it should be because the account as not 
> sufficient permissions. The you could try using dns-<your dc> account 
> and dns.keytab in private directory to retry with the user used by 
> your Bind to authenticate against AD.
>
> If this works, DNS updates are working. And for now I have no idea 
> from your could come.
>
> cheers,
> m. 



More information about the samba mailing list