dhcpd create lease error and unable to kinit for dynupdate on domain controller

[Samba - General mailing list]

Hi everyone
following
https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller#DHCP_with_dynamic_DNS_updates,
on my samba dc i have installed the dhcp package and the
samba-dhcpd-updateAUR package
there are two unresolved errors that i cannot fix

1 -: Can't create new lease file: Permission denied
2 -: kinit for dynamic DNS failed

can anyone offer any suggestions.

# journalctl
Jan 02 17:43:28 MYDC dhcpd[25603]: execute_statement argv[0] =
/usr/bin/dhcpd-update-samba-dns.sh
Jan 02 17:43:28 MYDC dhcpd[25603]: execute_statement argv[1] = add
Jan 02 17:43:28 MYDC dhcpd[25603]: execute_statement argv[2] = 192.168.1.233
Jan 02 17:43:28 MYDC dhcpd[25603]: execute_statement argv[3] = salaam
Jan 02 17:43:29 MYDC dhcpd[25603]: Can't create new lease file:
Permission denied
Jan 02 17:43:29 MYDC dhcpd[25603]: DHCPREQUEST for 192.168.1.233 from
f0:7b:cb:0e:f6:02 via eth0
Jan 02 17:43:29 MYDC dhcpd[25603]: DHCPACK on 192.168.1.233 to
f0:7b:cb:0e:f6:02 (salaam) via eth0
Jan 02 17:43:35 MYDC dhcpd[24067]: kinit for dynamic DNS failed

let me know if i need to send more configuration details.
shadrock











--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba - General mailing list]

On Fri, 5 Jan 2018 13:10:10 +0000
niya via samba <[hidden email]> wrote:

> Hi everyone
> following
> https://wiki.archlinux.org/index.php/Samba/Active_Directory_domain_controller#DHCP_with_dynamic_DNS_updates,
> on my samba dc i have installed the dhcp package and the
> samba-dhcpd-updateAUR package
> there are two unresolved errors that i cannot fix
>
> 1 -: Can't create new lease file: Permission denied
> 2 -: kinit for dynamic DNS failed
>
> can anyone offer any suggestions.
>
> # journalctl
> Jan 02 17:43:28 MYDC dhcpd[25603]: execute_statement argv[0] =
> /usr/bin/dhcpd-update-samba-dns.sh
> Jan 02 17:43:28 MYDC dhcpd[25603]: execute_statement argv[1] = add
> Jan 02 17:43:28 MYDC dhcpd[25603]: execute_statement argv[2] =
> 192.168.1.233 Jan 02 17:43:28 MYDC dhcpd[25603]: execute_statement
> argv[3] = salaam Jan 02 17:43:29 MYDC dhcpd[25603]: Can't create new
> lease file: Permission denied
> Jan 02 17:43:29 MYDC dhcpd[25603]: DHCPREQUEST for 192.168.1.233 from
> f0:7b:cb:0e:f6:02 via eth0
> Jan 02 17:43:29 MYDC dhcpd[25603]: DHCPACK on 192.168.1.233 to
> f0:7b:cb:0e:f6:02 (salaam) via eth0
> Jan 02 17:43:35 MYDC dhcpd[24067]: kinit for dynamic DNS failed
>
> let me know if i need to send more configuration details.
> shadrock

You are asking the wrong list, the packages you installed have nothing
to do with Samba.

Although it has this in the main script:

echo -e "\n"`basename ${0}` "uses samba-tool to update DNS records in Samba 4's DNS"
echo "server when using INTERNAL DNS or BIND9 DLZ plugin."

I could never get my version of this script to update the internal dns
server.

Rowland

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba

[Samba - General mailing list]

On Fri, 5 Jan 2018 14:03:58 +0000
niya <[hidden email]> wrote:

> Hi Rowland
> thank for the quick reply
> i did try the version from the samba wiki first which failed when
> getting a new ticket ,
> dhcpd kinit for dynamic dns failed,
> so i tried the arch linux version next,
> i asked in the arch -general list but i got no answers so i tried
> samba, as my dhcpd is working apart from renewing the lease file
> is there another solution to the dynamic dns update or  should i
> leave it as it is until a fix is found for the problem.
> i may be wrong but both the issues seem to be because dhcpd drops
> root privilage after boot ,
> anything further than that i can't say.
> Shadrock
> so should i just give up on

I cannot help with the arch script, but possibly I can help with the
script found on the Samba wiki.
The Samba script was written to be used with debian and here dhcpd
runs as root. It would seem that another way needs to be found to
update the kerberos ticket, perhaps in root's crontab ?

Rowland


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba