[Samba] Bind9 doesn't updated - TSIG error with server: tsig verify failure

Rowland penny rpenny at samba.org
Mon Aug 12 17:36:21 UTC 2019

On 12/08/2019 17:57, Igor Sousa wrote:
> Hi Rowland,
> I've done how you have said and I've set nameserver on 
> '/etc/resolv.conf' file as 'king' IP ( and add 'dns update 
> command = /usr/sbin/samba_dnsupdate --use-samba-tool' on 
> '/usr/local/samba/etc/smb.conf' file. I've still seen samba_dnsupdate 
> fails on 'systemctl status samba-ad-dc'. Is there other way to check 
> if dns entries are update correctly instead of use 'samba_dnsupdate 
> --verbose --all-names --use-samba-tool'?
> [root at king ~]# cat /usr/local/samba/etc/smb.conf
> dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool


You have compiled Samba yourself, so samba_dnsupdate will not be in 
/usr/sbin, it will be in /usr/local/samba/sbin

so change the line in smb.conf to:

dns update command = /usr/local/samba/sbin/samba_dnsupdate --use-samba-tool


More information about the samba mailing list