[Samba] dns_tkey_gssnegotiate: TKEY is unacceptable

Rowland penny rpenny at samba.org
Mon Aug 12 19:26:12 UTC 2019


On 12/08/2019 20:19, Joachim Lindenberg wrote:
> Hi Rowland,
> did read, actually cited the page it myself, but didn´t help me to identify the cause.
> Kerberos credentials exists, dns users exists, file permission are correct. So either that is insufficient or I am blind..
> Regards, Joachim
>
> -----Ursprüngliche Nachricht-----
> Von: samba <samba-bounces at lists.samba.org> Im Auftrag von Rowland penny via samba
> Gesendet: Monday, 12 August 2019 21:14
> An: samba at lists.samba.org
> Betreff: Re: [Samba] dns_tkey_gssnegotiate: TKEY is unacceptable
>
> On 12/08/2019 19:49, Joachim Lindenberg via samba wrote:
>> I installed a third DC today. Replication works find, but as systemctl status samba-ad-dc showed an error w.r.t. dnsupdate I was running samba_dnsupdate –verbose.
>>
>> Below is the output. It looks like there are some missing DNS records, but what are potential causes of this error: dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>>    
>>
>> I already checked what´s listed @ https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable and https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable#Verifying_That_the_BIND_AD_Account_Exists_for_the_DC.
>>
>> What else?
>>
>> Thanks, Joachim
>>
>>    
>>
>> root at python:/home/joachim# samba_dnsupdate --verbose
>>
>> IPs: ['192.168.177.69']
>>
>> Looking for DNS entry A python.samba.lindenberg.one 192.168.177.69 as python.samba.lindenberg.one.
>>
>> Looking for DNS entry NS samba.lindenberg.one python.samba.lindenberg.one as samba.lindenberg.one.
>>
>> Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS samba.lindenberg.one python.samba.lindenberg.one
>>
>> need update: NS samba.lindenberg.one python.samba.lindenberg.one
>>
>> Looking for DNS entry NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one as _msdcs.samba.lindenberg.one.
>>
>> Lookup of _msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one
>>
>> need update: NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one
>>
>> Looking for DNS entry A samba.lindenberg.one 192.168.177.69 as samba.lindenberg.one.
>>
>> Lookup of samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A samba.lindenberg.one 192.168.177.69
>>
>> need update: A samba.lindenberg.one 192.168.177.69
>>
>> Looking for DNS entry SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.samba.lindenberg.one.
>>
>> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Lookup of _ldap._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> need update: SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Looking for DNS entry SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.dc._msdcs.samba.lindenberg.one.
>>
>> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Lookup of _ldap._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> need update: SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Looking for DNS entry SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one.
>>
>> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Lookup of _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> need update: SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Looking for DNS entry SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.samba.lindenberg.one.
>>
>> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Lookup of _kerberos._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> need update: SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Looking for DNS entry SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._udp.samba.lindenberg.one.
>>
>> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Lookup of _kerberos._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> need update: SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.dc._msdcs.samba.lindenberg.one.
>>
>> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Lookup of _kerberos._tcp.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> need update: SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Looking for DNS entry SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._tcp.samba.lindenberg.one.
>>
>> Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> Lookup of _kpasswd._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> need update: SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> Looking for DNS entry SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 as _kpasswd._udp.samba.lindenberg.one.
>>
>> Checking 0 100 464 cobra.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> Checking 0 100 464 boa.samba.lindenberg.one. against SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> Lookup of _kpasswd._udp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> need update: SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> Looking for DNS entry CNAME f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one python.samba.lindenberg.one as f2beb235-c296-4e3e-af1d-b6a2fb0ec67c._msdcs.samba.lindenberg.one.
>>
>> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one.
>>
>> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Lookup of _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one.
>>
>> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Lookup of _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one.
>>
>> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Lookup of _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 as _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one.
>>
>> Checking 0 100 88 cobra.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Checking 0 100 88 boa.samba.lindenberg.one. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Lookup of _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> need update: SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Looking for DNS entry A gc._msdcs.samba.lindenberg.one 192.168.177.69 as gc._msdcs.samba.lindenberg.one.
>>
>> Lookup of gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A gc._msdcs.samba.lindenberg.one 192.168.177.69
>>
>> need update: A gc._msdcs.samba.lindenberg.one 192.168.177.69
>>
>> Looking for DNS entry SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.samba.lindenberg.one.
>>
>> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Lookup of _gc._tcp.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> need update: SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Looking for DNS entry SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.gc._msdcs.samba.lindenberg.one.
>>
>> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Lookup of _ldap._tcp.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> need update: SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Looking for DNS entry SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 as _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one.
>>
>> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Lookup of _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> need update: SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 as _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one.
>>
>> Checking 0 100 3268 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Checking 0 100 3268 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Lookup of _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Looking for DNS entry A DomainDnsZones.samba.lindenberg.one 192.168.177.69 as DomainDnsZones.samba.lindenberg.one.
>>
>> Lookup of DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A DomainDnsZones.samba.lindenberg.one 192.168.177.69
>>
>> need update: A DomainDnsZones.samba.lindenberg.one 192.168.177.69
>>
>> Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.DomainDnsZones.samba.lindenberg.one.
>>
>> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Lookup of _ldap._tcp.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> need update: SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one.
>>
>> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Lookup of _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Looking for DNS entry A ForestDnsZones.samba.lindenberg.one 192.168.177.69 as ForestDnsZones.samba.lindenberg.one.
>>
>> Lookup of ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for A ForestDnsZones.samba.lindenberg.one 192.168.177.69
>>
>> need update: A ForestDnsZones.samba.lindenberg.one 192.168.177.69
>>
>> Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.ForestDnsZones.samba.lindenberg.one.
>>
>> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Lookup of _ldap._tcp.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> need update: SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 as _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one.
>>
>> Checking 0 100 389 boa.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Checking 0 100 389 cobra.samba.lindenberg.one. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Lookup of _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. succeeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> need update: SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> 26 DNS updates and 0 DNS deletes needed
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> update(nsupdate): NS samba.lindenberg.one python.samba.lindenberg.one
>>
>> Calling nsupdate for NS samba.lindenberg.one python.samba.lindenberg.one (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> samba.lindenberg.one.   900     IN      NS      python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one
>>
>> Calling nsupdate for NS _msdcs.samba.lindenberg.one python.samba.lindenberg.one (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _msdcs.samba.lindenberg.one. 900 IN     NS      python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): A samba.lindenberg.one 192.168.177.69
>>
>> Calling nsupdate for A samba.lindenberg.one 192.168.177.69 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> samba.lindenberg.one.   900     IN      A       192.168.177.69
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Calling nsupdate for SRV _ldap._tcp.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.samba.lindenberg.one. 900 IN SRV     0 100 389 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Calling nsupdate for SRV _ldap._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Calling nsupdate for SRV _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.a99ba284-740c-4cee-9095-6c0b2c5aa9bb.domains._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Calling nsupdate for SRV _kerberos._tcp.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _kerberos._tcp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Calling nsupdate for SRV _kerberos._udp.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _kerberos._udp.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _kerberos._tcp.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> Calling nsupdate for SRV _kpasswd._tcp.samba.lindenberg.one python.samba.lindenberg.one 464 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _kpasswd._tcp.samba.lindenberg.one. 900 IN SRV  0 100 464 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464
>>
>> Calling nsupdate for SRV _kpasswd._udp.samba.lindenberg.one python.samba.lindenberg.one 464 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _kpasswd._udp.samba.lindenberg.one. 900 IN SRV  0 100 464 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _kerberos._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88
>>
>> Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 88 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 88 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): A gc._msdcs.samba.lindenberg.one 192.168.177.69
>>
>> Calling nsupdate for A gc._msdcs.samba.lindenberg.one 192.168.177.69 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> gc._msdcs.samba.lindenberg.one. 900 IN  A       192.168.177.69
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Calling nsupdate for SRV _gc._tcp.samba.lindenberg.one python.samba.lindenberg.one 3268 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _gc._tcp.samba.lindenberg.one. 900 IN   SRV     0 100 3268 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Calling nsupdate for SRV _ldap._tcp.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Calling nsupdate for SRV _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one python.samba.lindenberg.one 3268 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _gc._tcp.Default-First-Site-Name._sites.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268
>>
>> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one python.samba.lindenberg.one 3268 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.samba.lindenberg.one. 900 IN SRV 0 100 3268 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): A DomainDnsZones.samba.lindenberg.one 192.168.177.69
>>
>> Calling nsupdate for A DomainDnsZones.samba.lindenberg.one 192.168.177.69 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> DomainDnsZones.samba.lindenberg.one. 900 IN A   192.168.177.69
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Calling nsupdate for SRV _ldap._tcp.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): A ForestDnsZones.samba.lindenberg.one 192.168.177.69
>>
>> Calling nsupdate for A ForestDnsZones.samba.lindenberg.one 192.168.177.69 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> ForestDnsZones.samba.lindenberg.one. 900 IN A   192.168.177.69
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Calling nsupdate for SRV _ldap._tcp.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389
>>
>> Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one python.samba.lindenberg.one 389 (add)
>>
>> Successfully obtained Kerberos ticket to DNS/boa.samba.lindenberg.one as PYTHON$
>>
>> Outgoing update query:
>>
>> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
>>
>> ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
>>
>> ;; UPDATE SECTION:
>>
>> _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.samba.lindenberg.one. 900 IN SRV 0 100 389 python.samba.lindenberg.one.
>>
>>    
>>
>> dns_tkey_gssnegotiate: TKEY is unacceptable
>>
>> Failed nsupdate: 1
>>
>> Failed update of 26 entries
>>
>> root at python:/home/joachim#
>>
> Start by reading this:
> https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable
>
> Rowland
>
>
>
OK, try the update over RPC, add this to smb.conf on the new DC:

dns update command = /usr/sbin/samba_dnsupdate --use-samba-tool

restart Samba and see what happens.

Rowland





More information about the samba mailing list