[Samba] replication stuck?

[Stefan G. Weichinger]

Am 22.07.19 um 11:15 schrieb Stefan G. Weichinger via samba:

> ; TSIG error with server: tsig verify failure
> Failed nsupdate: 2
> Failed update of 28 entries
> 
> 
> -
> 
> how can I fix that?
> 
> I think this leads to my issues with pulling GPOs etc

various issues, long day ...


the DC2 also lists stuff like:

Jul 22 17:48:00 pre01svdeb03 samba[7666]: task[dcesrv][7666]:
[2019/07/22 17:48:00.491913,  0]
../source4/rpc_server/drsuapi/writespn.c:238(dcesrv_drsuapi_DsWriteAccountSpn)
Jul 22 17:48:00 pre01svdeb03 samba[7666]: task[dcesrv][7666]:   Failed
to modify SPNs on CN=SCHNABEL-PC,OU=mydomain-Computer,DC=mydomain,DC=at:
acl: spn validation failed for spn[TERMSRV/SCHNABEL-PC.mydomain.at]
uac[0x1000] account[SCHNABEL-PC$] hostname[SCHNABEL-PC.BUERO]
nbname[BUERO] ntds[(null)] forest[mydomain.at] domain[mydomain.at]
Jul 22 17:48:00 pre01svdeb03 samba[7666]: task[dcesrv][7666]:
Jul 22 19:15:30 pre01svdeb03 samba[7666]: task[dcesrv][7666]:
[2019/07/22 19:15:30.321809,  0]
../source4/rpc_server/drsuapi/writespn.c:238(dcesrv_drsuapi_DsWriteAccountSpn)
Jul 22 19:15:30 pre01svdeb03 samba[7666]: task[dcesrv][7666]:   Failed
to modify SPNs on CN=PC-2016-03,OU=mydomain-Computer,DC=mydomain,DC=at:
acl: spn validation failed for spn[TERMSRV/PC-2016-03.mydomain.at]
uac[0x1000] account[PC-2016-03$] hostname[PC-2016-03.BUERO]
nbname[BUERO] ntds[(null)] forest[mydomain.at] domain[mydomain.at]
Jul 22 19:15:30 pre01svdeb03 samba[7666]: task[dcesrv][7666]:



Could someone point me to some helpful info here?

It's 2 DCs with samba-4.9.11, Debian 9.9