[SSSD-users] 1.11.5 ddns failure on Ubuntu 14.04

steve steve at steve-ss.com
Wed May 21 10:28:39 UTC 2014


On 21/05/14 12:16, Jakub Hrozek wrote:
> On Wed, May 21, 2014 at 11:54:03AM +0200, steve wrote:
>> Hi
>> We've exhausted all the possibilities over on the samba list and
>> think we have a bug with the Lubuntu version of 1.11.5 against a
>> Samba4 DC. We have 1.11.5 ddns working perfectly against the same DC
>> and nsupdate works fine from the failing lubuntu laptop. I hope you
>> don't mind in me quoting from the samba lists below. Any help would
>> be most gratefully received:
>
> I see you tried nsupdate with the Administrator account, but does it
> work with the machine account as well?

Yes:

steve at lubuntu-laptop:/tmp$ sudo kinit -kt /etc/krb5.keytab LUBUNTU-LAPTOP$
[sudo] password for steve:

steve at lubuntu-laptop:~$ sudo klist
[sudo] password for steve:
Ticket cache: FILE:/tmp/krb5cc_0
Default principal: LUBUNTU-LAPTOP$@HH3.SITE

Valid starting     Expires            Service principal
21/05/14 12:19:54  21/05/14 22:19:54  krbtgt/HH3.SITE at HH3.SITE
	renew until 22/05/14 12:19:54

steve at lubuntu-laptop:/tmp$ nsupdate -g -d
 > server 192.168.1.16
 > realm HH3.SITE
 > update delete lubuntu-laptop.hh3.site 3600 A
 > update add lubuntu-laptop.hh3.site 3600 A 192.168.1.22
 > send
Reply from SOA query:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:  39621
;; flags: qr aa ra; QUESTION: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;lubuntu-laptop.hh3.site.	IN	SOA

;; AUTHORITY SECTION:
hh3.site.		0	IN	SOA	hh16.hh3.site. hostmaster.hh3.site. 805 900 600 86400 0

Found zone name: hh3.site
The master is: hh16.hh3.site
start_gssrequest
send_gssrequest
Outgoing update query:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:  56505
;; flags:; QUESTION: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; QUESTION SECTION:
;359059288.sig-hh16.hh3.site.	ANY	TKEY

;; ADDITIONAL SECTION:
359059288.sig-hh16.hh3.site. 0	ANY	TKEY	gss-tsig. 1400667719 1400667719 
3 NOERROR 1328 YIIFLAYGKwYBBQUCoIIFIDCCBRygDTALBgkqhkiG9xIBAgKiggUJBIIF 
BWCCBQEGCSqGSIb3EgECAgEAboIE8DCCBOygAwIBBaEDAgEOogcDBQAg 
AAAAo4ID6GGCA+QwggPgoAMCAQWhChsISEgzLlNJVEWiHzAdoAMCAQGh 
FjAUGwNETlMbDWhoMTYuaGgzLnNpdGWjggOqMIIDpqADAgEXoQMCAQGi 
ggOYBIIDlLiL8nFs9p8cWni0RMsj2Ugfe2TtlWejVv9eKaHncqoxvaE+ 
ym7ponHzrRoam1LdKNHFu8M63srvJ/cj5LnDkIXh9N8p3Y546yUXdPGv 
FH9sonE/Yt6UQUcAsJlESYMqyTIMiFWDVxw+dIxai6C16j27AXCQIJ0g 
Jwi95pTxcbzrngDAV6am8Xt1rh6fBaiGEUa1pDyMPvy61A/MY4eEFIGa 
cpHTldCL2rnd7G+jLR2GHcAU3Zg9s23WCNJMO8aVjoYqFH0TxI+s/dlU 
Gyh9VSNbGWp81kHGGRtsvhGh4jLidCFnGP+6f1xN90O8xmzDHRvUlucm 
P+cYBP7NN6/TaG4Lig/X04tM3r8Cvy81VXys1mQwufsZwK54mra5tDqX 
xnpUMfJOLFjX4T80R+wNsI2eQw+B+kxyktDCutpjePHSHCCiJBAGywtz 
LWohuM2WHoZ/uAWJ0CXFjbPJVQLsEkLjYqt7TGAh/9uuVVR/0ELeV0l4 
oRfnPP81AzhxI1xT5dZwvX1RC77PBDPIkZZUDRTfBTyRBsu5RcVp3KU8 
LdwOjHraFdKa/NcTZopNuBpjbjZMeB6NlPjZ+1sHF1XMGcU8oYoqtQa9 
LhdvMzTj8YQcGSm5P39bNrAiFMUSWHq3U2UjoIfZFGI5i5vTIzNrvTnK 
jek5s+IK/Ftq2uleBy7ANmSUDM7QA5nlQXy60iELtJrgLqv3sOjWYhtp 
UYe4cMwGwhBRp6sWkevLzJL3Z85sscbbxo2jZ3WOlkiRoReRqnSwbvet 
WrwoaRDAQ8id1F4uIkpCAZc7xgigL7WNxIWP9SDHu3qgCgWDCUHPQPVK 
dpqxC66chvrkTyh2r6jvM6vCPSzBeZMllzcr91zSS5pSmWw5CAqow4nj 
J85aP1LAHLHSV5336iE651vzbwZsjaIV7X7zSIx4vp3SqW7a9L4BQ9Nb 
ZIqgrNh/F2i2P/Wlhr4WQ4NVEaJzGTNwwWMq4rCmU6lVKJYuvPPmrxud 
Rkq5p1QUtrRyWnYXCoqOkfZD+IV3gT/r3rmQOe7kE+2hLvVEPCYQfoxA 
zK4L5UEJ+kFnTxb5uRINMTcndandftIVa19I/xADiyDukaJ1tHRVTFeX 
fBps6pn5FBVSRIkNrbdNimn88sVzluUN2rXp4nhFwN0rPOX2mFC9xy6G 
HpLMmtl6MkXlurjrDRjEdMHN3xSXuwcBz62Kxf6BeuxjaRW1y5AUUmCk 
geowgeegAwIBF6KB3wSB3CVaebAMoW+vTvCEVpQt5Y9Lc46T5lwgKN80 
4NsoIb4NK31YETJMad9uMUHSK89JGnS4bR0m6Y0LfGmppQlMEH8vQ3i3 
WJh4c9IoLMj3sp/8av/1RauU67Ids436JKWI6UJki6s9vX/jhIpd6Rku 
4asp67rtTdbGgy2qE+TPeVP2Eq+knxTzauPRyf2W7mxwIG8Mop4hDvuB 
qVjWASN4uViGJcprh7btM21vosUIO4zOifD1I4vLzGsPctQp6CUYaw99 
Q3OtszFT7MYYyiAhcezAiwSy93FJwWT22k8= 0

recvmsg reply from GSS-TSIG query
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id:  56505
;; flags: qr ra; QUESTION: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUESTION SECTION:
;359059288.sig-hh16.hh3.site.	ANY	TKEY

;; ANSWER SECTION:
359059288.sig-hh16.hh3.site. 0	ANY	TKEY	gss-tsig. 1400667720 1400671320 
3 NOERROR 182 oYGzMIGwoAMKAQChCwYJKoZIhvcSAQICooGbBIGYYIGVBgkqhkiG9xIB 
AgICAG+BhTCBgqADAgEFoQMCAQ+idjB0oAMCAReibQRrmG2aUzTud750 
dAxBNQT7BT/drSv220n3U6ng4sjW3+MEgGOPagMSt1EwIPV0JgC1vU6I 
HU3GgmSJwA6Gqm/OFJ8iFB1nIsk43DqNLo8UzZyv1ZE2nA5VtI+r/Cso 
17XZaklnnDkhWe0hBCg= 0

Sending update to 192.168.1.16#53
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:  61044
;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 2, ADDITIONAL: 1
;; UPDATE SECTION:
lubuntu-laptop.hh3.site. 0	ANY	A	
lubuntu-laptop.hh3.site. 3600	IN	A	192.168.1.22

;; TSIG PSEUDOSECTION:
359059288.sig-hh16.hh3.site. 0	ANY	TSIG	gss-tsig. 1400667720 300 28 
BAQE//////8AAAAAJqqHjzxJfbqs+6sTpuxvHA== 61044 NOERROR 0


Reply from update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:  61044
;; flags: qr ra; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1
;; ZONE SECTION:
;hh3.site.			IN	SOA

;; TSIG PSEUDOSECTION:
359059288.sig-hh16.hh3.site. 0	ANY	TSIG	gss-tsig. 1400667720 300 28 
BAQF//////8AAAAAMz5NEdNzQNm3fDU6PirFMA== 61044 NOERROR 0

 > quit



More information about the sssd-users mailing list