[Samba] WERR_DNS_ERROR_RCODE_REFUSED
Carlos A. P. Cunha
carlos.hollow at gmail.com
Fri Jul 1 12:21:01 UTC 2016
Hello!
Samba update for AD are working for what I identified the problem and
creating newstarting AD, is that the problem is that Samba has FSMO and
AD is being join the field
Thank you
Em 01-07-2016 06:52, mathias dufresne escreveu:
> To debug DNS updates: edit samba_dnsupdate and comment line (411 here)
> "os.unlink(tmpfile)".
> This edition will make next run of command 'samba_dnsupdate' will not
> remove temporary files in /tmp.
>
> Then you use one of these files to push update using nsupdate:
> nsupdate -g /tmp/<some samba_dnsupdate tmp file>
>
> -g means "use kerberos auth". For that works you must first perform a
> kinit to get a valid ticket. Start with a kinit administrator as it
> the one with the greater power facing AD. With that account if the
> update is not successful it should be because the account as not
> sufficient permissions. The you could try using dns-<your dc> account
> and dns.keytab in private directory to retry with the user used by
> your Bind to authenticate against AD.
>
> If this works, DNS updates are working. And for now I have no idea
> from your could come.
>
> cheers,
> m.
More information about the samba
mailing list