[Samba] samba_dlz: insufficient access rights ?

L. van Belle belle at samba.org
Tue Jun 7 09:57:13 UTC 2022


With windows DNS tool, goto this record, open it and check permissions. 

Does "HOSTNAME$" exist in the permissions? If not add it with full control. 

See of that helps 
If not, try 
sudo samba_upgradedns --dns-backend=BIND9_DLZ 


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba <samba-bounces at lists.samba.org> Namens Marco Gaiarin via
> samba
> Verzonden: maandag 6 juni 2022 09:51
> Aan: samba at lists.samba.org
> Onderwerp: [Samba] samba_dlz: insufficient access rights ?
> 
> 
> Normally we join to domain windows box renaming it and joining at the same
> time.
> 
> Some week ago a computer seems have joined *before* the rename, so the
> computer get the new name but computer account was created with old
> name.
> I've de-joined the box, deleted the compuer account and re-joined it.
> 
> But now, for that computer, i catch in samba DC log:
> 
>  Jun  6 08:35:27 vdcsv1 named[669]: samba_dlz: disallowing update of
> signer=MADARA\$\@AD.FVG.LNF.IT name=madara.ad.fvg.lnf.it type=AAAA
> error=insufficient access rights  Jun  6 08:35:27 vdcsv1 named[669]:
client
> 10.5.2.210#53617/key MADARA\$\@AD.FVG.LNF.IT: updating zone
> 'ad.fvg.lnf.it/NONE': update failed: rejected by secure update (REFUSED)
> 
> How to fix that?! Thanks.
> 
> --
>   È facile battere le ortiche col pisello degli altri!
> 							(Diego)
> 
> 
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba




More information about the samba mailing list