Web lists-archives.com

[Samba] Dynamic DNS Update Error GSS failure

Hi @ all,


I try to update the DNS records from my DHCP Clients to my AD DC but there
ist an issue with the GSSAPI I don't know how to solve.


For this I followed this guide.





tkey query failed: GSSAPI error: Major = Unspecified GSS failure.  Minor
code may provide more information, Minor = No credentials found with
supported encryption types (filename: /tmp/dhcp-dyndns.cc).


Here is my keytab file:


ktutil -k /etc/dhcpduser.keytab list



Vno  Type                     Principal                Aliases

  2  aes256-cts-hmac-sha1-96  dhcpduser@xxxxxxxxxxxxx

  2  aes128-cts-hmac-sha1-96  dhcpduser@xxxxxxxxxxxxx

  2  arcfour-hmac-md5         dhcpduser@xxxxxxxxxxxxx

  2  des-cbc-md5              dhcpduser@xxxxxxxxxxxxx

  2  des-cbc-crc              dhcpduser@xxxxxxxxxxxxx


System Information


- Raspberry Pi 3 Model B

- Raspian Stretch

- Samba Version 4.7.4

- BIND Version 9.11.2

- BIND9 built by

make '--prefix' '/usr/local/bind9' '--enable-shared'


   '--enable-static' '--with-openssl=/usr'

   '--with-gssapi=/usr/include/gssapi' '--with-libtool'

   '--with-dlopen=yes' '--enable-threads' '--enable-largefile'

   '--with-gnu-ld' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing'



bind9 named.conf https://pastebin.com/HW88rwbe


samba named.conf https://pastebin.com/zi7Fm27T


samba smb.conf https://pastebin.com/i1fmj56T


If more information needed, feel free and ask me, I'll do my best to provide


Greetings Ronny

To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba