[Samba] dns.keytab doesn't exist

Rowland penny rpenny at samba.org
Fri Dec 11 09:37:59 UTC 2020

On 11/12/2020 09:26, Dan Egli wrote:
>  I ran the samba_dnsupgrade and it created TWO dns.keytab files. You 
> said it won't create one in /var/lib/samba/bind-dns directory, but it 
> did. At least, SOMETHING put a file there. Still, if you say it 
> shouldn't be there, then perhaps I should rm it and point my bind 
> config to the other.
No, I didn't say that, I said that you do not get the keytab in the 
bind-dns dir when you join a DC, but you do when you provision a new DC 
or run samba_dnsupdate. What the code actually does is to create the 
keytab in the private dir and then copy it to the bind-dns dir, so yes, 
you do end up with two keytabs.

There is a bug report about this: 

And here is my fix: 

Which unfortunately was rejected even though it works.


More information about the samba mailing list