[Samba] TSIG failure

[Garming Sam]

On 22/07/16 07:32, Andrew Bartlett wrote:
> On Fri, 2016-07-22 at 00:18 +1200, Garming Sam wrote:
>> Hi,
>>
>> I've been looking into a similar sounding issue and which I think is
>> a 
>> regression in 4.3. (Amazingly there's so few people with mixed
>> domains, 
>> probably in particular ones which require joining additional DCs at
>> some 
>> later point)
>>
>> I may be able to provide more information soon, but this might be the
>> culprit commit:
>> https://git.samba.org/?p=samba.git;a=commit;h=e85ef1dbfef4b16c35cac80
>> c0efc563d8cd1ba3e
>>
>> When you start up Samba, do you see these debug messages during the 
>> initial samba_dnsupdate run?
>>
>> GSS server Update(krb5)(1) Update failed:
>> Miscellaneous failure (see text): Failed to find 
>> SAMBA-BUIL$@2008R2.HOWTO.ABARTLET.NET(kvno 3) in keytab 
>> FILE:/tmp/private/secrets.keytab (aes256-cts-hmac-sha1-96)
> Wow!  How did you figure that out!
>
> Andrew Bartlett
>

I ran a git bisect after I noticed 4.2 was fine. It just rejoined a
Windows domain and then tried samba_dnsupdate.


Cheers,

Garming