[Samba] replication stuck?

[Stefan G. Weichinger]

Am 22.07.19 um 10:39 schrieb Stefan G. Weichinger via samba:
> Am 20.07.19 um 11:54 schrieb Joachim Lindenberg via samba:
>> I figured it out myself. The kerberos configuration on the old dc cobra was bad – no clue why it worked at all until yesterday.
>>
>> After fixing it, testing with kinit, and restarting the dc processes it resumed replication.
> 
> pls show how you fixed it
> 
> I assume I face something similar
> 
> 
> 
my 2 DCs seem to be out of sync for DNS

I demoted and rejoined, and still see:


; TSIG error with server: tsig verify failure
Failed nsupdate: 2
update(nsupdate): SRV
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at
pre01svdeb03.pilsbacher.at 389
Calling nsupdate for SRV
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 (add)
Successfully obtained Kerberos ticket to DNS/pre01svdeb03.pilsbacher.at
as PRE01SVDEB03$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at.
900 IN SRV 0 100 389 pre01svdeb03.pilsbacher.at.

; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Failed update of 28 entries


-

how can I fix that?

I think this leads to my issues with pulling GPOs etc