Project

General

Profile

Tâche #17612

Scénario #17544: Le module Seth doit respecter le mode de fonctionnement cible

Syncro DNS DC2 => DC1 impossible : erreur

Added by Klaas TJEBBES over 3 years ago. Updated over 3 years ago.

Status:
Fermé
Priority:
Normal
Assigned To:
Start date:
10/17/2016
Due date:
% Done:

100%

Estimated time:
3.00 h
Spent time:
Remaining (hours):
0.0

Description

samba_dnsupdate --verbose --all-names

dns_tkey_negotiategss: TKEY is unacceptable 
Failed nsupdate: 1
root@dc2:~# samba_dnsupdate
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
dns_tkey_negotiategss: TKEY is unacceptable 
Failed update of 25 entries

Associated revisions

Revision 83ca169c (diff)
Added by Klaas TJEBBES over 3 years ago

resolv.conf : modification de l'ordre des DNS pour un controleur de domaine AD REF #17612 @2h

History

#1 Updated by Fabrice Barconnière over 3 years ago

  • Estimated time set to 3.00 h
  • Remaining (hours) set to 1.0

Voir #17610 pour résoudre les problèmes de réplication des comptes et des entrées DNS.
L'erreur dns_tkey_negotiategss: TKEY is unacceptable semble liée à l'utilisation de BIND en DNS :
https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable

#2 Updated by Klaas TJEBBES over 3 years ago

  • Subject changed from Syncro DC2 => DC1 impossible : erreur to Syncro DNS DC2 => DC1 impossible : erreur

#3 Updated by Klaas TJEBBES over 3 years ago

  • Description updated (diff)

#4 Updated by Scrum Master over 3 years ago

  • Status changed from Nouveau to En cours

#5 Updated by Scrum Master over 3 years ago

  • Assigned To set to Klaas TJEBBES

#6 Updated by Klaas TJEBBES over 3 years ago

Lorsqu'on modifie resolv.conf pour obtenir :
search domaine.lan
nameserver l_autre_dc
nameserver ce_dc

L'erreur "dns_tkey_negotiategss: TKEY is unacceptable" disparaît et est remplacée par l'erreur :

; TSIG error with server: tsig verify failure

que l'on peut ignorer car elle ne concerne que les utlisateurs du DNS BIND alors que nous utilisons le DNS interne de Samba4 :
https://lists.samba.org/archive/samba/2013-February/171881.html

#7 Updated by Klaas TJEBBES over 3 years ago

  • Status changed from En cours to Résolu

#8 Updated by Fabrice Barconnière over 3 years ago

  • % Done changed from 0 to 100
  • Remaining (hours) changed from 1.0 to 0.0

En lançant la commande sur DC1, on a toujours cette erreur.
Dans tous les cas cela semble lié à l'utilisation de bind que nous n'utilisons pas.

#9 Updated by Scrum Master over 3 years ago

  • Status changed from Résolu to Fermé

Also available in: Atom PDF