forum.lissyara.su

Добрый день всем!
Краткое описание проблемы:
ОС - Linux dc 3.19.0-58-generic #64~14.04.1-Ubuntu SMP Fri Mar 18 19:05:43 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux
Samba - Version 4.1.6-Ubuntu. Настроена как PDC, DNS-сервер интегрированный в Samba
Всё крутится на виртуальной машине, но это особого значения не имеет.

После недавнего времени перестали добавляться и обновляться DNS-записи в домене. При вводе машины в домен она появляется в AD, но в DNS её нет.
При попытке добавить вручную какую-то А-запись в DNS появляется ошибка "Локальная база данных защиты содержит внутренние несоответствия"
В логе Samba (log.samba) следующие ошибки:
[2016/08/03 13:33:26.463606, 0] ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3328(replmd_delete_internals)
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3328: Failed to rename object from 'DC=MC-221,DC=megimc.loc,CN=MicrosoftDNS,DC=DomainDnsZones,DC=megimc,DC=loc' to 'DC=MC-221\0ADEL:bf67842b-be7d-4fad-a539-2439dfab78e2,CN=Deleted Objects,DC=DomainDnsZones,DC=megimc,DC=loc' - attribute 'objectCategory': no such attribute for delete on 'DC=MC-221,DC=megimc.loc,CN=MicrosoftDNS,DC=DomainDnsZones,DC=megimc,DC=loc'
[2016/08/03 13:33:26.463933, 0] ../source4/dns_server/dns_utils.c:282(dns_replace_records)
Deleting record failed; 1
[2016/08/03 13:33:26.710248, 0] ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3328(replmd_delete_internals)
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3328: Failed to rename object from 'DC=MCM-CC5,DC=megimc.loc,CN=MicrosoftDNS,DC=DomainDnsZones,DC=megimc,DC=loc' to 'DC=MCM-CC5\0ADEL:044e610b-5e0d-4f1f-ae8f-4250f8aad176,CN=Deleted Objects,DC=DomainDnsZones,DC=megimc,DC=loc' - attribute 'objectCategory': no such attribute for delete on 'DC=MCM-CC5,DC=megimc.loc,CN=MicrosoftDNS,DC=DomainDnsZones,DC=megimc,DC=loc'
[2016/08/03 13:33:26.710582, 0] ../source4/dns_server/dns_utils.c:282(dns_replace_records)
Deleting record failed; 1

Может кто помочь с проблемой?
Листинги конфигов:
smb.conf
[global]
workgroup = MEGIMC
realm = MEGIMC.LOC
netbios name = DC
server role = active directory domain controller
dns forwarder = 192.168.112.1
idmap_ldb:use rfc2307 = yes
allow dns updates = nonsecure and secure


[netlogon]
path = /var/lib/samba/sysvol/megimc.loc/scripts
read only = No

[sysvol]
path = /var/lib/samba/sysvol
read only = No

krb5.conf
[libdefaults]
default_realm = MEGIMC.LOC

# The following krb5.conf variables are only for MIT Kerberos.
krb4_config = /etc/krb.conf
krb4_realms = /etc/krb.realms
kdc_timesync = 1
ccache_type = 4
forwardable = true
proxiable = true

# The following encryption type specification will be used by MIT Kerberos
# if uncommented. In general, the defaults in the MIT Kerberos code are
# correct and overriding these specifications only serves to disable new
# encryption types as they are added, creating interoperability problems.
#
# Thie only time when you might need to uncomment these lines and change
# the enctypes is if you have local software that will break on ticket
# caches containing ticket encryption types it doesn't know about (such as
# old versions of Sun Java).

# default_tgs_enctypes = des3-hmac-sha1
# default_tkt_enctypes = des3-hmac-sha1
# permitted_enctypes = des3-hmac-sha1

# The following libdefaults parameters are only for Heimdal Kerberos.
v4_instance_resolve = false
v4_name_convert = {
host = {
rcmd = host
ftp = ftp
}
plain = {
something = something-else
}
}
fcc-mit-ticketflags = true

[realms]
MEGIMC.LOC = {
kdc = 192.168.112.2
admin_server = 192.168.112.2
default_domain = megimc.loc
}

[domain_realm]
.megimc.loc = MEGIMC.LOC
megimc.loc = MEGIMC.LOC

[login]
krb4_convert = true
krb4_get_tickets = false

Заранее благодарен за ответы

Ошибку победил исправив /var/lib/samba/private/krb5.conf

Но теперь возникла другая:
[2016/09/02 23:37:11.848090, 0] ../lib/util/util_runcmd.c:317(samba_runcmd_io_handler)
/usr/sbin/samba_dnsupdate: tkey query failed: GSSAPI error: Major = Unspecified GSS failure. Minor code may provide more information, Minor = Server not found in Kerberos database.
[2016/09/02 23:37:22.840319, 0] ../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3328(replmd_delete_internals)
../source4/dsdb/samdb/ldb_modules/repl_meta_data.c:3328: Failed to rename object from 'DC=MC-Kassa,DC=megimc.loc,CN=MicrosoftDNS,DC=DomainDnsZones,DC=megimc,DC=loc' to 'DC=MC-Kassa\0ADEL:c1fb85e9-39c7-4e5f-a952-ed46910c4ac9,CN=Deleted Objects,DC=DomainDnsZones,DC=megimc,DC=loc' - attribute 'objectCategory': no such attribute for delete on 'DC=MC-Kassa,DC=megimc.loc,CN=MicrosoftDNS,DC=DomainDnsZones,DC=megimc,DC=loc'
[2016/09/02 23:37:22.840749, 0] ../source4/dns_server/dns_utils.c:282(dns_replace_records)
Deleting record failed; 1

Помогите победить...

победили ?