Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to configurate dinamic update to bind

I have samba4.0.0rc5 running with bind 9.8 on Ubuntu 12.04.

by default the provision command dont create necesary dns.keytab. i've tested with the folloewing

# samba-tool domain exportkeytab /usr/local/samba/private/dns.keytab --principal DNS/

but when i try the command samba_dnsupdate always i get dns_tkey_negotiategss: TKEY is unacceptable

the second method is create the dns.keytab file with this guide but i get the same result

share|improve this question

Samba 4.1.9 + Ubuntu 14.04 (with BIND9_FLATFILE backend for DNS) but same issue here. The problem is access to the private directory of Samba (in my case /var/lib/samba/private/) and to the file dns.keytab.

My solution is:

chgrp bind /var/lib/samba/private/
chmod 750 /var/lib/samba/private/
chgrp bind /var/lib/samba/private/dns.keytab
chmod 640 /var/lib/samba/private/dns.keytab
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.