[Samba] First Linux Machine Domain Join

[Rowland Penny]

On Sun, 17 Nov 2024 12:30:58 -0500
"John R. Graham via samba" <samba at lists.samba.org> wrote:

> On 11/16/24 16:15, Rowland Penny via samba wrote:
> > It isn't really required to run nmbd now, it is the NetBIOS deamon
> > and isn't really used. You just need to start the smbd and winbindd
> > deamons.
> Understood. I'm working on getting Gentoo's configuration defaults
> changed.
> >> (Note that this machine uses dhcpcd to get its IP address and the
> >> contents of /etc/resolv.conf.)
> > If by 'dhcpcd' you mean dhcpdc5, then I could never get that to
> > work, I always removed it, but you might.
> 
> It works very well "out of the box" here; a Gentoo developer is the 
> current maintainer. Then again, it's at version 10.1.0 now.

I run my DCs on rpi's and I could never get them to work unless I
removed dhcpcd, the latest Raspberry pi OS is Bookworm, which now uses
Network Manager and that does work YMMV ;-)

> 
> > What should work (well it does on Debian), 'hostname -s' should
> > produce the computers short hostname, 'hostname -d' should produce
> > the dns domain name, 'hostname -i' should produce the computers
> > ipaddress (but could possibly give 127.0.0.1), 'hostname -I' should
> > also produce the ipaddress (but could give more)
> >
> All of these produce the output you've described, except for the last 
> one because Gentoo's hostname (from the net-utils package) doesn't
> have an -I option.
> 
> I've been working through the Testing Dynamic DNS Updates wiki page.
> I'm getting a slew of "TSIG error with server: tsig verify failure"
> messages from that:
> 
>      ceres ~ # samba_dnsupdate --verbose --all-names --debuglevel=10

I ran that command on my DC with the PDC_Emulator FSMO role AND....
it failed just like yours, so I added '--use-samba-tool', but that also
failed, but at least it told me why it failed.

When is an error not an error ?
When the 'error' is a fact.

The error messages are like this:

ERROR: Record already exists; record could not be added.
zone[samdom.example.com] name[rpidc1]

I fail to see how trying to add a record that already exists is really
an error.

What I 'think' is happening is:
When you run samba_dnsupdate without '--use-samba-tool' it is running
into the same problem, the record exists but nsupdate is returning the
wrong error code, so you get 'TSIG error with server: tsig verify
failure'.
Not sure how you get around this, but you probably do not have a dns
problem (well not from Samba).

Rowland