[Samba] samba Digest, Vol 172, Issue 2

[Rowland Penny]

On Sun, 2 Apr 2017 19:02:35 +0200
Karl Heinz Wichmann via samba <samba at lists.samba.org> wrote:

> Hallo Marc
> 
> I change the loglevel to 10
> 
> 
>   database
> "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_9.so -d 10";
> 
> and i get following errors:
> 
> 02-Apr-2017 18:47:44.389 samba_dlz: ldb: ldb_asprintf/set_errstring:
> No such Base DN: 
> DC=client008.my.domain.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=my,DC=domain,DC=de
> 02-Apr-2017 18:47:44.389 samba_dlz: ldb: ldb_trace_response: DONE
> 02-Apr-2017 18:47:44.389 samba_dlz: error: 32
> 02-Apr-2017 18:47:44.389 samba_dlz: msg: No such Base DN: 
> DC=client008.my.domain.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=my,DC=domain,DC=de
> 02-Apr-2017 18:47:44.389 samba_dlz:
> 02-Apr-2017 18:47:44.389 samba_dlz: ldb: ldb_trace_request: SEARCH
> 02-Apr-2017 18:47:44.389 samba_dlz:  dn: 
> DC=client008.my.domain.de,CN=MicrosoftDNS,CN=System,DC=my,DC=domain,DC=de
> 02-Apr-2017 18:47:44.389 samba_dlz:  scope: base
> 02-Apr-2017 18:47:44.389 samba_dlz:  expr: (objectClass=dnsZone)
> 02-Apr-2017 18:47:44.389 samba_dlz:  control: <NONE>
> 
> and
> 
> 02-Apr-2017 18:47:41.373 samba_dlz: Starting GENSEC mechanism spnego
> 02-Apr-2017 18:47:41.373 samba_dlz: Starting GENSEC submechanism
> gssapi_krb5 02-Apr-2017 18:47:41.373 samba_dlz: spnego update failed
> 02-Apr-2017 18:47:41.374 client 192.168.99.6#58125/key 
> CLIENT\$\@my.domain.de: updating zone 'my.domain.de/NONE': update 
> failed: rejected by secure update (REFUSED)
> 02-Apr-2017 18:47:41.374 samba_dlz: ldb: cancel ldb transaction
> (nesting: 0)
> 
> 

Try adding 'allow dns updates = nonsecure' to smb.conf

Rowland