Всем привет.
Решил попробовать установить samba в роле контролера домена по этой инструкции http://www.alexsey-smirnov.ru/node/2.
Samba заводится, пользователи подключаются, но не работает динамическое обновление dns.
[console]
root@DC:~# /opt/samba/sbin/samba -V
Version 4.1.6
[/console]
/opt/samba/sbin/samba_dnsupdate --verbose --all-names
Показать
IPs: ['192.168.10.3']
Calling nsupdate for A marikk.ru 192.168.10.3
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
marikk.ru. 900 IN A 192.168.10.3
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for A dc.marikk.ru 192.168.10.3
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
dc.marikk.ru. 900 IN A 192.168.10.3
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for A gc._msdcs.marikk.ru 192.168.10.3
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
gc._msdcs.marikk.ru. 900 IN A 192.168.10.3
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for CNAME 723cb9c8-4e1b-47e3-a59b-8c0fefa473ba._msdcs.marikk.ru dc.marikk.ru
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
723cb9c8-4e1b-47e3-a59b-8c0fefa473ba._msdcs.marikk.ru. 900 IN CNAME dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _kpasswd._tcp.marikk.ru dc.marikk.ru 464
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kpasswd._tcp.marikk.ru. 900 IN SRV 0 100 464 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _kpasswd._udp.marikk.ru dc.marikk.ru 464
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kpasswd._udp.marikk.ru. 900 IN SRV 0 100 464 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _kerberos._tcp.marikk.ru dc.marikk.ru 88
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.marikk.ru. 900 IN SRV 0 100 88 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.marikk.ru dc.marikk.ru 88
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.dc._msdcs.marikk.ru. 900 IN SRV 0 100 88 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _kerberos._tcp.default-first-site-name._sites.marikk.ru dc.marikk.ru 88
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.default-first-site-name._sites.marikk.ru. 900 IN SRV 0 100 88 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _kerberos._tcp.default-first-site-name._sites.dc._msdcs.marikk.ru dc.marikk.ru 88
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.default-first-site-name._sites.dc._msdcs.marikk.ru. 900 IN SRV 0 100 88 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _kerberos._udp.marikk.ru dc.marikk.ru 88
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._udp.marikk.ru. 900 IN SRV 0 100 88 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _ldap._tcp.marikk.ru dc.marikk.ru 389
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.marikk.ru. 900 IN SRV 0 100 389 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _ldap._tcp.dc._msdcs.marikk.ru dc.marikk.ru 389
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.dc._msdcs.marikk.ru. 900 IN SRV 0 100 389 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _ldap._tcp.gc._msdcs.marikk.ru dc.marikk.ru 3268
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.gc._msdcs.marikk.ru. 900 IN SRV 0 100 3268 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _ldap._tcp.pdc._msdcs.marikk.ru dc.marikk.ru 389
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.pdc._msdcs.marikk.ru. 900 IN SRV 0 100 389 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _ldap._tcp.default-first-site-name._sites.marikk.ru dc.marikk.ru 389
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.default-first-site-name._sites.marikk.ru. 900 IN SRV 0 100 389 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _ldap._tcp.default-first-site-name._sites.dc._msdcs.marikk.ru dc.marikk.ru 389
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.default-first-site-name._sites.dc._msdcs.marikk.ru. 900 IN SRV 0 100 389 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _ldap._tcp.default-first-site-name._sites.gc._msdcs.marikk.ru dc.marikk.ru 3268
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.default-first-site-name._sites.gc._msdcs.marikk.ru. 900 IN SRV 0 100 3268 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _ldap._tcp.70df6153-c913-48fa-9e0f-967a0e8a1690.domains._msdcs.marikk.ru dc.marikk.ru 389
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.70df6153-c913-48fa-9e0f-967a0e8a1690.domains._msdcs.marikk.ru. 900 IN SRV 0 100 389 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _gc._tcp.marikk.ru dc.marikk.ru 3268
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_gc._tcp.marikk.ru. 900 IN SRV 0 100 3268 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Calling nsupdate for SRV _gc._tcp.default-first-site-name._sites.marikk.ru dc.marikk.ru 3268
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_gc._tcp.default-first-site-name._sites.marikk.ru. 900 IN SRV 0 100 3268 dc.marikk.ru.
; TSIG error with server: tsig verify failure
Failed nsupdate: 2
Failed update of 21 entries
Подскажите пожалуйста, как это побороть ?
