[Samba] dns_tkey_gssnegotiate: TKEY is unacceptable
Rowland penny
rpenny at samba.org
Mon Aug 12 19:14:28 UTC 2019
On 12/08/2019 19:49, Joachim Lindenberg via samba wrote:
> I installed a third DC today. Replication works find, but as systemctl status samba-ad-dc showed an error w.r.t. dnsupdate I was running samba_dnsupdate –verbose.
>
> Below is the output. It looks like there are some missing DNS records, but what are potential causes of this error: dns_tkey_gssnegotiate: TKEY is unacceptable
>
>
>
> I already checked what´s listed @ https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable and https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable#Verifying_That_the_BIND_AD_Account_Exists_for_the_DC.
>
> What else?
>
> Thanks, Joachim
>
>
>
> root at python:/home/joachim# samba_dnsupdate --verbose
>
> IPs: ['192.168.177.69']
>
> Looking for DNS entry A python.samba.lindenberg.one 192.168.177.69 as python.samba.lindenberg.one.
>
> Looking for DNS entry NS samba.lindenberg.one python.samba.lindenberg.one as samba.lindenberg.one.
>
> Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS samba.lindenberg.one python.samba.lindenberg.one
>
> need update: NS samba.lindenberg.one python.samba.lindenberg.one
>
> Looking for DNS entry NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one as _msdcs.samba.lindenberg.one.
>
> Lookup of _msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one
>
> need update: NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one
>
> Looking for DNS entry A samba.lindenberg.one 192.168.177.69 as samba.lindenberg.one.
>
> Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A samba.lindenberg.one 192.168.177.69
>
> need update: A samba.lindenberg.one 192.168.177.69
>
> Looking for DNS entry SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.samba.lindenberg.one.
>
> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Lookup of _ldap._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>
> need update: SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Looking for DNS entry SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.dc._msdcs.samba.lindenberg.one.
>
> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Lookup of _ldap._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> need update: SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Looking for DNS entry SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one.
>
> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Lookup of _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> need update: SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Looking for DNS entry SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.samba.lindenberg.one.
>
> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Lookup of _kerberos._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> need update: SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Looking for DNS entry SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._udp.samba.lindenberg.one.
>
> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Lookup of _kerberos._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> need update: SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.dc._msdcs.samba.lindenberg.one.
>
> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Lookup of _kerberos._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> need update: SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Looking for DNS entry SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._tcp.samba.lindenberg.one.
>
> Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> Lookup of _kpasswd._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> need update: SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> Looking for DNS entry SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._udp.samba.lindenberg.one.
>
> Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> Lookup of _kpasswd._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> need update: SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> Looking for DNS entry CNAME f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one python.samba.lindenberg.one as f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one.
>
> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one.
>
> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Lookup of _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>
> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one.
>
> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Lookup of _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one.
>
> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Lookup of _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>
> need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one.
>
> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Lookup of _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Looking for DNS entry A gc._msdcs.samba.lindenberg.one 192.168.177.69 as gc._msdcs.samba.lindenberg.one.
>
> Lookup of gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A gc._msdcs.samba.lindenberg.one 192.168.177.69
>
> need update: A gc._msdcs.samba.lindenberg.one 192.168.177.69
>
> Looking for DNS entry SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.samba.lindenberg.one.
>
> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Lookup of _gc._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> need update: SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Looking for DNS entry SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.gc._msdcs.samba.lindenberg.one.
>
> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Lookup of _ldap._tcp.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> need update: SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Looking for DNS entry SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one.
>
> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Lookup of _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> need update: SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one.
>
> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Lookup of _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Looking for DNS entry A DomainDnsZones.samba.lindenberg.one 192.168.177.69 as DomainDnsZones.samba.lindenberg.one.
>
> Lookup of DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A DomainDnsZones.samba.lindenberg.one 192.168.177.69
>
> need update: A DomainDnsZones.samba.lindenberg.one 192.168.177.69
>
> Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.DomainDnsZones.samba.lindenberg.one.
>
> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Lookup of _ldap._tcp.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> need update: SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one.
>
> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Lookup of _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Looking for DNS entry A ForestDnsZones.samba.lindenberg.one 192.168.177.69 as ForestDnsZones.samba.lindenberg.one.
>
> Lookup of ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A ForestDnsZones.samba.lindenberg.one 192.168.177.69
>
> need update: A ForestDnsZones.samba.lindenberg.one 192.168.177.69
>
> Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.ForestDnsZones.samba.lindenberg.one.
>
> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Lookup of _ldap._tcp.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> need update: SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one.
>
> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Lookup of _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> 26 DNS updates and 0 DNS deletes needed
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> update(nsupdate): NS samba.lindenberg.one python.samba.lindenberg.one
>
> Calling nsupdate for NS samba.lindenberg.one python.samba.lindenberg.one (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> samba.lindenberg.one. 900 IN NS python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one
>
> Calling nsupdate for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _msdcs.samba.lindenberg.one. 900 IN NS python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): A samba.lindenberg.one 192.168.177.69
>
> Calling nsupdate for A samba.lindenberg.one 192.168.177.69 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> samba.lindenberg.one. 900 IN A 192.168.177.69
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Calling nsupdate for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Calling nsupdate for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Calling nsupdate for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Calling nsupdate for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _kerberos._tcp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Calling nsupdate for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _kerberos._udp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _kerberos._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> Calling nsupdate for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _kpasswd._tcp.samba.lindenberg.one. 900 IN SRV 0 100 464 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>
> Calling nsupdate for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _kpasswd._udp.samba.lindenberg.one. 900 IN SRV 0 100 464 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>
> Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): A gc._msdcs.samba.lindenberg.one 192.168.177.69
>
> Calling nsupdate for A gc._msdcs.samba.lindenberg.one 192.168.177.69 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> gc._msdcs.samba.lindenberg.one. 900 IN A 192.168.177.69
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Calling nsupdate for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _gc._tcp.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Calling nsupdate for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Calling nsupdate for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>
> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): A DomainDnsZones.samba.lindenberg.one 192.168.177.69
>
> Calling nsupdate for A DomainDnsZones.samba.lindenberg.one 192.168.177.69 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> DomainDnsZones.samba.lindenberg.one. 900 IN A 192.168.177.69
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Calling nsupdate for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): A ForestDnsZones.samba.lindenberg.one 192.168.177.69
>
> Calling nsupdate for A ForestDnsZones.samba.lindenberg.one 192.168.177.69 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> ForestDnsZones.samba.lindenberg.one. 900 IN A 192.168.177.69
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Calling nsupdate for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>
> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>
> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>
> Outgoing update query:
>
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
>
> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>
> ;; UPDATE SECTION:
>
> _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>
>
>
> dns_tkey_gssnegotiate: TKEY is unacceptable
>
> Failed nsupdate: 1
>
> Failed update of 26 entries
>
> root at python:/home/joachim#
>
Start by reading this:
https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable
Rowland
More information about the samba
mailing list