[Samba] DNS Update Failed

Marcio Demetrio Bacci marciobacci at gmail.com
Sat Aug 3 14:18:21 UTC 2019 

Hi,

I changed my smb.conf as you suggested and now I believe the issue has been
resolved:

cat /etc/samba/smb.conf
# Global parameters
[global]
        netbios name = SAMBA4-DC
        realm = EMPRESA.COM.BR
        workgroup = EMPRESA
        server role = active directory domain controller
        dns forwarder = 192.168.1.1 192.168.1.2
        dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool

[netlogon]
        path = /var/lib/samba/sysvol/empresa.com.br/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No




 /etc/init.d/samba-ad-dc status
● samba-ad-dc.service - Samba AD Daemon
   Loaded: loaded (/lib/systemd/system/samba-ad-dc.service; enabled; vendor
preset: enabled)
   Active: active (running) since Sat 2019-08-03 11:05:56 -03; 2min 22s ago
     Docs: man:samba(8)
           man:samba(7)
           man:smb.conf(5)
 Main PID: 1016 (samba)
   Status: "smbd: ready to serve connections..."
    Tasks: 20 (limit: 4720)
   CGroup: /system.slice/samba-ad-dc.service
           ├─1016 /usr/sbin/samba
           ├─1017 /usr/sbin/samba
           ├─1018 /usr/sbin/samba
           ├─1019 /usr/sbin/samba
           ├─1020 /usr/sbin/samba
           ├─1021 /usr/sbin/smbd -D --option=server role check:inhibit=yes
--foreground
           ├─1022 /usr/sbin/samba
           ├─1023 /usr/sbin/samba
           ├─1024 /usr/sbin/samba
           ├─1025 /usr/sbin/samba
           ├─1026 /usr/sbin/samba
           ├─1027 /usr/sbin/samba
           ├─1028 /usr/sbin/samba
           ├─1029 /usr/sbin/samba
           ├─1030 /usr/sbin/samba
           ├─1032 /usr/sbin/winbindd -D --option=server role
check:inhibit=yes --foreground
           ├─1051 /usr/sbin/smbd -D --option=server role check:inhibit=yes
--foreground
           ├─1052 /usr/sbin/smbd -D --option=server role check:inhibit=yes
--foreground
           ├─1054 /usr/sbin/winbindd -D --option=server role
check:inhibit=yes --foreground
           └─1055 /usr/sbin/smbd -D --option=server role check:inhibit=yes
--foreground

ago 03 11:05:55 caraguatatuba samba[1016]:   samba: using 'standard'
process model
ago 03 11:05:56 caraguatatuba samba[1016]: [2019/08/03 11:05:56.002744,  0]
../lib/util/become_daemon.c:124(daemon_ready)
ago 03 11:05:56 caraguatatuba samba[1016]:   STATUS=daemon 'samba' finished
starting up and ready to serve connections
ago 03 11:05:56 caraguatatuba systemd[1]: Started Samba AD Daemon.
ago 03 11:05:56 caraguatatuba winbindd[1032]: [2019/08/03 11:05:56.140741,
 0] ../source3/winbindd/winbindd_cache.c:3244(initialize_winbindd_cache)
ago 03 11:05:56 caraguatatuba winbindd[1032]:   initialize_winbindd_cache:
clearing cache and re-creating with version number 2
ago 03 11:05:56 caraguatatuba winbindd[1032]: [2019/08/03 11:05:56.340311,
 0] ../lib/util/become_daemon.c:124(daemon_ready)
ago 03 11:05:56 caraguatatuba winbindd[1032]:   STATUS=daemon 'winbindd'
finished starting up and ready to serve connections
ago 03 11:05:56 caraguatatuba smbd[1021]: [2019/08/03 11:05:56.362286,  0]
../lib/util/become_daemon.c:124(daemon_ready)
ago 03 11:05:56 caraguatatuba smbd[1021]:   STATUS=daemon 'smbd' finished
starting up and ready to serve connections

Now, I believe there aren't problems with my Samba 4 DC !

Thank you very much.

Regards,

Márcio Bacci

Em sáb, 3 de ago de 2019 às 10:59, Rowland penny via samba <
samba at lists.samba.org> escreveu:

> On 03/08/2019 14:51, Marcio Demetrio Bacci wrote:
> > Hi,
> >
> > > >What OS ?
> > >> On Primary DC is Windows Server 2008.
> > >I actually meant on the Samba AD DC ;-)
> > The SO is Debian 9.9 (stretch). I'm using samba 4.5-16 and intend
> > update to samba 4.10 with van-belle repository, but, i'm trying solve
> > all the issues first.
> >
> > I have changed my /etc/resolv.conf as follow:
> >
> > But, this didn't solve the problem:
> >
> > ago 03 10:40:13 samba4-dc winbindd[1714]: [2019/08/03 10:40:13.718755,
> >  0] ../source3/winbindd/winbindd_cache.c:3244(initialize_winbindd_cache)
> > ago 03 10:40:13 samba4-dc winbindd[1714]: initialize_winbindd_cache:
> > clearing cache and re-creating with version number 2
> > ago 03 10:40:13 samba4-dc winbindd[1714]: [2019/08/03 10:40:13.990637,
> >  0] ../lib/util/become_daemon.c:124(daemon_ready)
> > ago 03 10:40:13 samba4-dc winbindd[1714]:   STATUS=daemon 'winbindd'
> > finished starting up and ready to serve connections
> > ago 03 10:40:14 samba4-dc smbd[1703]: [2019/08/03 10:40:14.017120,  0]
> > ../lib/util/become_daemon.c:124(daemon_ready)
> > ago 03 10:40:14 samba4-dc smbd[1703]:   STATUS=daemon 'smbd' finished
> > starting up and ready to serve connections
> > ago 03 10:40:14 samba4-dc samba[1711]: [2019/08/03 10:40:14.541353,
> >  0] ../lib/util/util_runcmd.c:316(samba_runcmd_io_handler)
> > ago 03 10:40:14 samba4-dc samba[1711]: /usr/sbin/samba_dnsupdate:
> > dns_tkey_negotiategss: TKEY is unacceptable
> > ago 03 10:40:14 samba4-dc samba[1711]: [2019/08/03 10:40:14.567134,
> >  0] ../source4/dsdb/dns/dns_update.c:290(dnsupdate_nameupdate_done)
> > ago 03 10:40:14 samba4-dc samba[1711]:
> > ../source4/dsdb/dns/dns_update.c:290: Failed DNS update - with error
> > code 1
> >
> Try rebooting the Samba AD DC and if that doesn't help, try adding this
> line to smb.conf:
>
> dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool
>
> Restart Samba
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

More information about the samba mailing list