[Samba] Internal DNS & TSIG errors

[Rowland Penny]

On 25/07/2023 20:11, Perttu Aaltonen via samba wrote:
> Hi,
> 
> I found this thread from February: https://lists.samba.org/archive/samba/2023-February/244053.html <https://lists.samba.org/archive/samba/2023-February/244053.html>
> 
> I have the same issue, TSIG errors when running "samba_dnsupdate --verbose --all-names” with internal DNS backend. I’m not sure if these is something I should worry about or if they’re normal with internal?
> 
> This is with a freshly installed Samba DC from bullseye-backports, I transferred all roles and demoted a very old DC that this replaces. Everything seems to work normally and no errors in the logs after about an hour with the server running.
> 
> Are these just cosmetic errors when running the tool with internal DNS, or should I do something to fix them? At the moment there’s only this one DC, ideally I’d like to fix this if needed before adding a second.
> 
> -Perttu

There is/was a problem with transferring the PDC_Emulator FSMO role, the 
dns record for the old role owner isn't deleted, try running this command:

host -t SRV _ldap._tcp.pdc._msdcs.$(hostname -d)

You should only get one result, delete any records for the old DC.

Rowland