On 21/05/14 12:16, Jakub Hrozek wrote:
On Wed, May 21, 2014 at 11:54:03AM +0200, steve wrote:
Hi
We've exhausted all the possibilities over on the samba list and
think we have a bug with the Lubuntu version of 1.11.5 against a
Samba4 DC. We have 1.11.5 ddns working perfectly against the same DC
and nsupdate works fine from the failing lubuntu laptop. I hope you
don't mind in me quoting from the samba lists below. Any help would
be most gratefully received:

I see you tried nsupdate with the Administrator account, but does it
work with the machine account as well?

Yes:

steve@lubuntu-laptop:/tmp$ sudo kinit -kt /etc/krb5.keytab LUBUNTU-LAPTOP$
[sudo] password for steve:

steve@lubuntu-laptop:~$ sudo klist
[sudo] password for steve:
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: [email protected]

Valid starting     Expires            Service principal
21/05/14 12:19:54  21/05/14 22:19:54  krbtgt/[email protected]
        renew until 22/05/14 12:19:54

steve@lubuntu-laptop:/tmp$ nsupdate -g -d
> server 192.168.1.16
> realm HH3.SITE
> update delete lubuntu-laptop.hh3.site 3600 A
> update add lubuntu-laptop.hh3.site 3600 A 192.168.1.22
> send
Reply from SOA query:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:  39621
;; flags: qr aa ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;lubuntu-laptop.hh3.site.       IN      SOA

;; AUTHORITY SECTION:
hh3.site.               0       IN      SOA     hh16.hh3.site. 
hostmaster.hh3.site. 805 900 600 86400 0

Found zone name: hh3.site
The master is: hh16.hh3.site
start_gssrequest
send_gssrequest
Outgoing update query:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:  56505
;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; QUESTION SECTION:
;359059288.sig-hh16.hh3.site.   ANY     TKEY

;; ADDITIONAL SECTION:
359059288.sig-hh16.hh3.site. 0 ANY TKEY gss-tsig. 1400667719 1400667719 3 NOERROR 1328 YIIFLAYGKwYBBQUCoIIFIDCCBRygDTALBgkqhkiG9xIBAgKiggUJBIIF BWCCBQEGCSqGSIb3EgECAgEAboIE8DCCBOygAwIBBaEDAgEOogcDBQAg AAAAo4ID6GGCA+QwggPgoAMCAQWhChsISEgzLlNJVEWiHzAdoAMCAQGh FjAUGwNETlMbDWhoMTYuaGgzLnNpdGWjggOqMIIDpqADAgEXoQMCAQGi ggOYBIIDlLiL8nFs9p8cWni0RMsj2Ugfe2TtlWejVv9eKaHncqoxvaE+ ym7ponHzrRoam1LdKNHFu8M63srvJ/cj5LnDkIXh9N8p3Y546yUXdPGv FH9sonE/Yt6UQUcAsJlESYMqyTIMiFWDVxw+dIxai6C16j27AXCQIJ0g Jwi95pTxcbzrngDAV6am8Xt1rh6fBaiGEUa1pDyMPvy61A/MY4eEFIGa cpHTldCL2rnd7G+jLR2GHcAU3Zg9s23WCNJMO8aVjoYqFH0TxI+s/dlU Gyh9VSNbGWp81kHGGRtsvhGh4jLidCFnGP+6f1xN90O8xmzDHRvUlucm P+cYBP7NN6/TaG4Lig/X04tM3r8Cvy81VXys1mQwufsZwK54mra5tDqX xnpUMfJOLFjX4T80R+wNsI2eQw+B+kxyktDCutpjePHSHCCiJBAGywtz LWohuM2WHoZ/uAWJ0CXFjbPJVQLsEkLjYqt7TGAh/9uuVVR/0ELeV0l4 oRfnPP81AzhxI1xT5dZwvX1RC77PBDPIkZZUDRTfBTyRBsu5RcVp3KU8 LdwOjHraFdKa/NcTZopNuBpjbjZMeB6NlPjZ+1sHF1XMGcU8oYoqtQa9 LhdvMzTj8YQcGSm5P39bNrAiFMUSWHq3U2UjoIfZFGI5i5vTIzNrvTnK jek5s+IK/Ftq2uleBy7ANmSUDM7QA5nlQXy60iELtJrgLqv3sOjWYhtp UYe4cMwGwhBRp6sWkevLzJL3Z85sscbbxo2jZ3WOlkiRoReRqnSwbvet WrwoaRDAQ8id1F4uIkpCAZc7xgigL7WNxIWP9SDHu3qgCgWDCUHPQPVK dpqxC66chvrkTyh2r6jvM6vCPSzBeZMllzcr91zSS5pSmWw5CAqow4nj J85aP1LAHLHSV5336iE651vzbwZsjaIV7X7zSIx4vp3SqW7a9L4BQ9Nb ZIqgrNh/F2i2P/Wlhr4WQ4NVEaJzGTNwwWMq4rCmU6lVKJYuvPPmrxud Rkq5p1QUtrRyWnYXCoqOkfZD+IV3gT/r3rmQOe7kE+2hLvVEPCYQfoxA zK4L5UEJ+kFnTxb5uRINMTcndandftIVa19I/xADiyDukaJ1tHRVTFeX fBps6pn5FBVSRIkNrbdNimn88sVzluUN2rXp4nhFwN0rPOX2mFC9xy6G HpLMmtl6MkXlurjrDRjEdMHN3xSXuwcBz62Kxf6BeuxjaRW1y5AUUmCk geowgeegAwIBF6KB3wSB3CVaebAMoW+vTvCEVpQt5Y9Lc46T5lwgKN80 4NsoIb4NK31YETJMad9uMUHSK89JGnS4bR0m6Y0LfGmppQlMEH8vQ3i3 WJh4c9IoLMj3sp/8av/1RauU67Ids436JKWI6UJki6s9vX/jhIpd6Rku 4asp67rtTdbGgy2qE+TPeVP2Eq+knxTzauPRyf2W7mxwIG8Mop4hDvuB qVjWASN4uViGJcprh7btM21vosUIO4zOifD1I4vLzGsPctQp6CUYaw99 Q3OtszFT7MYYyiAhcezAiwSy93FJwWT22k8= 0

recvmsg reply from GSS-TSIG query
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:  56505
;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;359059288.sig-hh16.hh3.site.   ANY     TKEY

;; ANSWER SECTION:
359059288.sig-hh16.hh3.site. 0 ANY TKEY gss-tsig. 1400667720 1400671320 3 NOERROR 182 oYGzMIGwoAMKAQChCwYJKoZIhvcSAQICooGbBIGYYIGVBgkqhkiG9xIB AgICAG+BhTCBgqADAgEFoQMCAQ+idjB0oAMCAReibQRrmG2aUzTud750 dAxBNQT7BT/drSv220n3U6ng4sjW3+MEgGOPagMSt1EwIPV0JgC1vU6I HU3GgmSJwA6Gqm/OFJ8iFB1nIsk43DqNLo8UzZyv1ZE2nA5VtI+r/Cso 17XZaklnnDkhWe0hBCg= 0

Sending update to 192.168.1.16#53
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:  61044
;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 2, ADDITIONAL: 1
;; UPDATE SECTION:
lubuntu-laptop.hh3.site. 0      ANY     A       
lubuntu-laptop.hh3.site. 3600   IN      A       192.168.1.22

;; TSIG PSEUDOSECTION:
359059288.sig-hh16.hh3.site. 0 ANY TSIG gss-tsig. 1400667720 300 28 BAQE//////8AAAAAJqqHjzxJfbqs+6sTpuxvHA== 61044 NOERROR 0


Reply from update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:  61044
;; flags: qr ra; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1
;; ZONE SECTION:
;hh3.site.                      IN      SOA

;; TSIG PSEUDOSECTION:
359059288.sig-hh16.hh3.site. 0 ANY TSIG gss-tsig. 1400667720 300 28 BAQF//////8AAAAAMz5NEdNzQNm3fDU6PirFMA== 61044 NOERROR 0

> quit

_______________________________________________
sssd-users mailing list
[email protected]
https://lists.fedorahosted.org/mailman/listinfo/sssd-users

Reply via email to