did you compile bind with gssapi? my compile options with ubuntu are this..Verify your pointing to the proper path when compiling for gssapi.

./configure --prefix=/usr/local/bind9 --with-gssapi=/usr/include/gssapi

verify that you have the proper environments in bind,,, I have this in the init script..

KEYTAB_FILE="/usr/local/samba1/private/dns.keytab"
KRB5_KTNAME="/usr/local/samba1/private/dns.keytab"
export KEYTAB_FILE
export KRB5_KTNAME

and verify that the options are in named.conf properly.. CASE matters..
   tkey-gssapi-credential "DNS/example.com";
   tkey-domain "EXAMPLE.COM";

Verify all this and modify for your environment...

On 05/11/2011 12:15 PM, fe...@epepm.cupet.cu wrote:

I followed the Howto http://wiki.samba.org/index.php/Samba4/HOWTO

Using:
-Samba4 alpha15
-Bind9.8.0

When I added an XP PC (192.168.123.244) to my domain I got this in syslog:

May 11 12:04:18 samba4 named[10705]: client 192.168.123.244#1061: update
'mydomain.com/IN' denied
May 11 12:04:18 samba4 named[10705]: tkey.c:486: ENSURE(result == (((1)<<
16) + 28) || result == 0) failed, back trace
May 11 12:04:18 samba4 named[10705]: #0 0x805ac45 in assertion_failed()+0x45
May 11 12:04:18 samba4 named[10705]: #1 0x81c62f7 in
isc_assertion_failed()+0x27
May 11 12:04:18 samba4 named[10705]: #2 0x81659ba in
dns_tkey_processquery()+0x98a
May 11 12:04:18 samba4 named[10705]: #3 0x80696ff in ns_query_start()+0x40f
May 11 12:04:18 samba4 named[10705]: #4 0x8051d44 in client_request()+0xdc4
May 11 12:04:18 samba4 named[10705]: #5 0x81e270d in
isc__taskmgr_dispatch()+0x17d
May 11 12:04:18 samba4 named[10705]: #6 0x81e5e34 in evloop()+0x74
May 11 12:04:18 samba4 named[10705]: #7 0x81e60af in isc__app_ctxrun()+0x12f
May 11 12:04:18 samba4 named[10705]: #8 0x81e6182 in isc__app_run()+0x12
May 11 12:04:18 samba4 named[10705]: #9 0x805bd56 in main()+0xc96
May 11 12:04:18 samba4 named[10705]: #10 0xb7d04455 in _fini()+0xafb0d6b9
May 11 12:04:18 samba4 named[10705]: #11 0x804bb61 in _start()+0x21
May 11 12:04:18 samba4 named[10705]: exiting (due to assertion failure)


Any ideas??

Best regards,
Felix.


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

Reply via email to