Hi all,

I have some problems with dynamic DNS updating.
Samba 3.4.7
Windows 2003 sp2

# net ads dns register -P
DNS Update failed!

With debug ( -d9 ) I get this:
------
[2010/10/26 09:28:44,  3] libads/sasl.c:780(ads_sasl_spnego_bind)
  ads_sasl_spnego_bind: got OID=1.3.6.1.4.1.311.2.2.10
[2010/10/26 09:28:44,  3] libads/sasl.c:789(ads_sasl_spnego_bind)
  ads_sasl_spnego_bind: got server principal name = losdcc...@los.net
[2010/10/26 09:28:44,  3] libsmb/clikrb5.c:687(ads_krb5_mk_req)
  ads_krb5_mk_req: krb5_cc_get_principal failed (No credentials cache found)
[2010/10/26 09:28:44,  3] libsmb/clikrb5.c:620(ads_cleanup_expired_creds)
  ads_cleanup_expired_creds: Ticket in ccache[MEMORY:net_ads] expiration Tue, 
26 Oct 2010 19:28:44 CEST
[2010/10/26 09:28:44,  3] libsmb/clikrb5.c:729(ads_krb5_mk_req)
  ads_krb5_mk_req: server marked as OK to delegate to, building forwardable TGT
[2010/10/26 09:28:44,  2] lib/interface.c:340(add_interface)
  added interface eth0 ip=fe80::223:7dff:fe1b:a87e%eth0 
bcast=fe80::ffff:ffff:ffff:ffff%eth0 netmask=ffff:ffff:ffff:ffff::
[2010/10/26 09:28:44,  2] lib/interface.c:340(add_interface)
  added interface eth0 ip=10.128.64.57 bcast=10.154.64.255 netmask=255.255.255.0
[2010/10/26 09:28:44,  4] libads/dns.c:620(ads_dns_lookup_ns)
  ads_dns_lookup_ns: 23 records returned in the answer section.
DNS update failed!
[2010/10/26 09:28:48,  2] utils/net.c:779(main)
  return code = -1
-------

When I try to find some more info with wireshark I find that the server refuses 
TKEY on the DNS request.

My current solution is to let DHCP do the update but it works poorly in a mixed 
environment. We have about 1000 clients moving around all over the place so we 
can't manually register.


Best regards
Emil Assarsson
Sony Ericsson Mobile Communications AB

"The information in this email, and attachment(s) thereto, is strictly 
confidential and may be legally privileged. It is intended solely for the named 
recipient(s), and access to this e-mail, or any attachment(s) thereto, by 
anyone else is unauthorized. Violations hereof may result in legal actions. Any 
attachment(s) to this e-mail has been checked for viruses, but please rely on 
your own virus-checker and procedures. If you contact us by e-mail, we will 
store your name and address to facilitate communications in the matter 
concerned. If you do not consent to us storing your name and address for above 
stated purpose, please notify the sender promptly. Also, if you are not the 
intended recipient please inform the sender by replying to this transmission, 
and delete the e-mail, its attachment(s), and any copies of it without, 
disclosing it."


-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to