[Samba] samba_dnsupdate REFUSED between Samba4 AD DC and Win 2008r2

[Rowland Penny]

On Thu, 29 Nov 2018 12:30:28 +0100
Giacomo Gorgellino via samba <samba at lists.samba.org> wrote:

> Hi,
> 
> I've some trouble in getting samba internal DNS server in sync with 
> others DNS (Windows) of my AD domain.
> 
> samba_dnsupdate returns:
> 
> update failed: REFUSED
> Failed update of 1 entries
> 
> I'm running samba Version 4.5.12-Debian
> 
> This is the output of samba_dnsupdate --verbose:
> 

> ; TSIG error with server: tsig verify failure
> update failed: REFUSED
> Failed nsupdate: 2
> Failed update of 1 entries
> 
> Any hints?
> 

Start by reading this:

https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable

Rowland