[Samba] Zone update denied

[Peter Pollock]

Thank you Andrew. That's the kind of answer I love! :-)

On Tue, Oct 13, 2020 at 5:36 PM Andrew Bartlett <abartlet at samba.org> wrote:

> On Tue, 2020-10-13 at 14:29 -0700, Peter Pollock via samba wrote:
>
> >
> > The logs have an error like this:   client @0x7f7bd4089880
> >
> > 192.168.7.144#57386: update 'internal.kcs/IN' denied
> >
> >
> >
> > It is then followed by Samba_dlz allowing the update of various
> > records
> >
> > from that IP address, followed by another error which is for the same
> > IP
>
> So, what some (and if I recall Windows clients in particular) clients
> do is try an unauthenticated update, and then only do GSS-TSIG once
> that fails.
>
> > and if I should be concerned?
>
> No.
>
> Andrew Bartlett
>
> --
> Andrew Bartlett                       https://samba.org/~abartlet/
> Authentication Developer, Samba Team  https://samba.org
> Samba Developer, Catalyst IT
> https://catalyst.net.nz/services/samba
>
>
>
>