[Samba] samba_dnsupdate --verbose --all-names gives lots of "update failed: NOTAUTH(BADSIG)"

Gary Dale gary at extremeground.com
Wed Apr 26 11:24:52 UTC 2023 

I'm trying to find out if my Samba 4.17.7 domain controller's DNS is 
working properly. I came across the wiki at 
https://wiki.samba.org/index.php/Testing_Dynamic_DNS_Updates and got the 
output below.

I havethe tests at 
https://wiki.samba.org/index.php/Linux_and_Unix_DNS_Configuration and my 
computers all pass all of them. eg:
root at transponder:~# nslookup DC1.home.rahim-dale.org
Server:         192.168.1.13
Address:        192.168.1.13#53

Name:   DC1.home.rahim-dale.org
Address: 192.168.1.13

root at transponder:~# nslookup 192.168.1.13
13.1.168.192.in-addr.arpa       name = dc1.home.rahim-dale.org.

root at transponder:~# host 192.168.1.13
13.1.168.192.in-addr.arpa domain name pointer dc1.home.rahim-dale.org.
root at transponder:~# nslookup
 > set type=SRV
 > _ldap._tcp.home.rahim-dale.org
;; communications error to 192.168.1.13#53: timed out
Server:         192.168.1.13
Address:        192.168.1.13#53

_ldap._tcp.home.rahim-dale.org  service = 0 100 389 dc1.home.rahim-dale.org.
 > exit

I do note the timeout error that shows up when I run the commands from 
transponder but not from my file & print server or DC. Should I be 
concerned about it?

This is the dnsupdate output. After the first bit, I get a lot of 
repetitive errors about "update failed: NOTAUTH(BADSIG)".

root at DC1:~# samba_dnsupdate --verbose --all-names
IPs: ['192.168.1.13']
force update: A DC1.home.rahim-dale.org 192.168.1.13
force update: CNAME 
f3edf8e0-d102-4266-a7a0-1c3c6b01479e._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org
force update: NS home.rahim-dale.org DC1.home.rahim-dale.org
force update: NS _msdcs.home.rahim-dale.org DC1.home.rahim-dale.org
force update: A home.rahim-dale.org 192.168.1.13
force update: SRV _ldap._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 
389
force update: SRV _ldap._tcp.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
force update: SRV 
_ldap._tcp.fbab7106-45cf-47da-9e89-25243cd67a61.domains._msdcs.home.rahim-dale.org 
DC1.home.rahim-da
le.org 389
force update: SRV _kerberos._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 88
force update: SRV _kerberos._udp.home.rahim-dale.org 
DC1.home.rahim-dale.org 88
force update: SRV _kerberos._tcp.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 88
force update: SRV _kpasswd._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 464
force update: SRV _kpasswd._udp.home.rahim-dale.org 
DC1.home.rahim-dale.org 464
force update: SRV 
_ldap._tcp.Default-First-Site-Name._sites.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
force update: SRV 
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
force update: SRV 
_kerberos._tcp.Default-First-Site-Name._sites.home.rahim-dale.org 
DC1.home.rahim-dale.org 88
force update: SRV 
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org
88
force update: SRV _ldap._tcp.pdc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
force update: A gc._msdcs.home.rahim-dale.org 192.168.1.13
force update: SRV _gc._tcp.home.rahim-dale.org DC1.home.rahim-dale.org 3268
force update: SRV _ldap._tcp.gc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 3268
force update: SRV 
_gc._tcp.Default-First-Site-Name._sites.home.rahim-dale.org 
DC1.home.rahim-dale.org 3268
force update: SRV 
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 3268
force update: A DomainDnsZones.home.rahim-dale.org 192.168.1.13
force update: SRV _ldap._tcp.DomainDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
force update: SRV 
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale.org
389
force update: A ForestDnsZones.home.rahim-dale.org 192.168.1.13
force update: SRV _ldap._tcp.ForestDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
force update: SRV 
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale.org
389
29 DNS updates and 0 DNS deletes needed
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
update(nsupdate): A DC1.home.rahim-dale.org 192.168.1.13
Calling nsupdate for A DC1.home.rahim-dale.org 192.168.1.13 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
DC1.home.rahim-dale.org. 900    IN      A       192.168.1.13

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): CNAME 
f3edf8e0-d102-4266-a7a0-1c3c6b01479e._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org
Calling nsupdate for CNAME 
f3edf8e0-d102-4266-a7a0-1c3c6b01479e._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org (ad
d)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
f3edf8e0-d102-4266-a7a0-1c3c6b01479e._msdcs.home.rahim-dale.org. 900 IN 
CNAME DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): NS home.rahim-dale.org DC1.home.rahim-dale.org
Calling nsupdate for NS home.rahim-dale.org DC1.home.rahim-dale.org (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
home.rahim-dale.org.    900     IN      NS      DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): NS _msdcs.home.rahim-dale.org DC1.home.rahim-dale.org
Calling nsupdate for NS _msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_msdcs.home.rahim-dale.org. 900 IN      NS      DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): A home.rahim-dale.org 192.168.1.13
Calling nsupdate for A home.rahim-dale.org 192.168.1.13 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
home.rahim-dale.org.    900     IN      A       192.168.1.13

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
Calling nsupdate for SRV _ldap._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 389 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.home.rahim-dale.org. 900 IN  SRV     0 100 389 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
Calling nsupdate for SRV _ldap._tcp.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 389 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.dc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 389 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV 
_ldap._tcp.fbab7106-45cf-47da-9e89-25243cd67a61.domains._msdcs.home.rahim-dale.org 
DC1.home.rahi
m-dale.org 389
Calling nsupdate for SRV 
_ldap._tcp.fbab7106-45cf-47da-9e89-25243cd67a61.domains._msdcs.home.rahim-dale.org 
DC1.home.r
ahim-dale.org 389 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.fbab7106-45cf-47da-9e89-25243cd67a61.domains._msdcs.home.rahim-dale.org. 
900 IN SRV 0 100 389 DC1.home.rahi
m-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kerberos._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 88
Calling nsupdate for SRV _kerberos._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 88 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.home.rahim-dale.org. 900 IN SRV  0 100 88 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kerberos._udp.home.rahim-dale.org 
DC1.home.rahim-dale.org 88
Calling nsupdate for SRV _kerberos._udp.home.rahim-dale.org 
DC1.home.rahim-dale.org 88 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._udp.home.rahim-dale.org. 900 IN SRV  0 100 88 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kerberos._tcp.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 88
Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 88 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.dc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 88 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kpasswd._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 464
Calling nsupdate for SRV _kpasswd._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 464 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kpasswd._tcp.home.rahim-dale.org. 900 IN SRV   0 100 464 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _kpasswd._udp.home.rahim-dale.org 
DC1.home.rahim-dale.org 464
Calling nsupdate for SRV _kpasswd._udp.home.rahim-dale.org 
DC1.home.rahim-dale.org 464 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kpasswd._udp.home.rahim-dale.org. 900 IN SRV   0 100 464 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV 
_ldap._tcp.Default-First-Site-Name._sites.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
Calling nsupdate for SRV 
_ldap._tcp.Default-First-Site-Name._sites.home.rahim-dale.org 
DC1.home.rahim-dale.org 389 (ad
d)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.home.rahim-dale.org. 900 IN 
SRV 0 100 389 DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV 
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org
389
Calling nsupdate for SRV 
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.o
rg 389 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org. 
900 IN SRV 0 100 389 DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV 
_kerberos._tcp.Default-First-Site-Name._sites.home.rahim-dale.org 
DC1.home.rahim-dale.org 88
Calling nsupdate for SRV 
_kerberos._tcp.Default-First-Site-Name._sites.home.rahim-dale.org 
DC1.home.rahim-dale.org 88
(add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.Default-First-Site-Name._sites.home.rahim-dale.org. 900 
IN SRV 0 100 88 DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV 
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.
org 88
Calling nsupdate for SRV 
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org 
DC1.home.rahim-da
le.org 88 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.home.rahim-dale.org. 
900 IN SRV 0 100 88 DC1.home.rahim-dale.o
rg.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.pdc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
Calling nsupdate for SRV _ldap._tcp.pdc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 389 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.pdc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 389 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): A gc._msdcs.home.rahim-dale.org 192.168.1.13
Calling nsupdate for A gc._msdcs.home.rahim-dale.org 192.168.1.13 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
gc._msdcs.home.rahim-dale.org. 900 IN   A       192.168.1.13

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _gc._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 3268
Calling nsupdate for SRV _gc._tcp.home.rahim-dale.org 
DC1.home.rahim-dale.org 3268 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_gc._tcp.home.rahim-dale.org. 900 IN    SRV     0 100 3268 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.gc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 3268
Calling nsupdate for SRV _ldap._tcp.gc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org 3268 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.gc._msdcs.home.rahim-dale.org. 900 IN SRV 0 100 3268 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV 
_gc._tcp.Default-First-Site-Name._sites.home.rahim-dale.org 
DC1.home.rahim-dale.org 3268
Calling nsupdate for SRV 
_gc._tcp.Default-First-Site-Name._sites.home.rahim-dale.org 
DC1.home.rahim-dale.org 3268 (add
)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_gc._tcp.Default-First-Site-Name._sites.home.rahim-dale.org. 900 IN SRV 
0 100 3268 DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV 
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.org
3268
Calling nsupdate for SRV 
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.home.rahim-dale.org 
DC1.home.rahim-dale.o
rg 3268 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.home.rahim-dale.org. 
900 IN SRV 0 100 3268 DC1.home.rahim-dale.org
.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): A DomainDnsZones.home.rahim-dale.org 192.168.1.13
Calling nsupdate for A DomainDnsZones.home.rahim-dale.org 192.168.1.13 
(add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
DomainDnsZones.home.rahim-dale.org. 900 IN A    192.168.1.13

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.DomainDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
Calling nsupdate for SRV _ldap._tcp.DomainDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale.org 389 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.DomainDnsZones.home.rahim-dale.org. 900 IN SRV 0 100 389 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV 
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale
.org 389
Calling nsupdate for SRV 
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.home.rahim-dale.org 
DC1.home.rahim-d
ale.org 389 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.home.rahim-dale.org. 
900 IN SRV 0 100 389 DC1.home.rahim-dale
.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): A ForestDnsZones.home.rahim-dale.org 192.168.1.13
Calling nsupdate for A ForestDnsZones.home.rahim-dale.org 192.168.1.13 
(add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
ForestDnsZones.home.rahim-dale.org. 900 IN A    192.168.1.13

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV _ldap._tcp.ForestDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale.org 389
Calling nsupdate for SRV _ldap._tcp.ForestDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale.org 389 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.ForestDnsZones.home.rahim-dale.org. 900 IN SRV 0 100 389 
DC1.home.rahim-dale.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
update(nsupdate): SRV 
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.home.rahim-dale.org 
DC1.home.rahim-dale
.org 389
Calling nsupdate for SRV 
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.home.rahim-dale.org 
DC1.home.rahim-d
ale.org 389 (add)
Successfully obtained Kerberos ticket to DNS/DC1.home.rahim-dale.org as 
DC1$
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.home.rahim-dale.org. 
900 IN SRV 0 100 389 DC1.home.rahim-dale
.org.

; TSIG error with server: tsig indicates error
update failed: NOTAUTH(BADSIG)
Failed nsupdate: 2
Failed update of 29 entries

More information about the samba mailing list