DNS error when changing/adding or restarting

[kcurtis]

I am having an issue with my Zentyal 6.2.6 upgrade not letting me change or even restart DNS.
This is a server that I vitalized. It is our main domain controller, with a 2nd as an additional.

Somewhere in the back of my mind I remember something about a password expiring but I can't find anything about that.
I did fine that the DNS-[hostname] user was not in the DnsAdmins so I added it there and checked the password never expires box.

When I try to change the IP of one of the hostsname in the GUI I get

Some modules reported error when saving changes . More information on the logs in /var/log/zentyal/

The following modules failed while saving their changes, their state is unknown: dns

The error log shows

Code: [Select]

2021/02/08 12:01:49 INFO> GlobalImpl.pm:617 EBox::GlobalImpl::saveAllModules - Saving config and restarting services: firewall dns
2021/02/08 12:01:49 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: firewall
2021/02/08 12:01:50 INFO> Base.pm:231 EBox::Module::Base::save - Restarting service for module: dns
2021/02/08 12:01:59 INFO> DNS.pm:91 EBox::DNS::appArmorProfiles - Setting DNS apparmor profile
2021/02/08 12:02:05 ERROR> Sudo.pm:240 EBox::Sudo::_rootError - root command nsupdate -g -t 10 /var/lib/zentyal/tmp/5a11iItZTY failed.
Error output: tkey query failed: GSSAPI error: Major = Unspecified GSS failure.  Minor code may provide more information, Minor = No Kerberos credentials available (default cache: FILE:/tmp/krb5cc_0).

Command output: .
Exit value: 2 at root command nsupdate -g -t 10 /var/lib/zentyal/tmp/5a11iItZTY failed.
Error output: tkey query failed: GSSAPI error: Major = Unspecified GSS failure.  Minor code may provide more information, Minor = No Kerberos credentials available (default cache: FILE:/tmp/krb5cc_0).

Command output: .
Exit value: 2 at /usr/share/perl5/EBox/Sudo.pm line 240
EBox::Sudo::_rootError('/usr/bin/sudo -p sudo: /var/lib/zentyal/tmp/PR_Yom_awN.cmd 2> /var/lib/zentyal/tmp/stderr', 'nsupdate -g -t 10 /var/lib/zentyal/tmp/5a11iItZTY', 512, 'ARRAY(0x561491c2b4e8)', 'ARRAY(0x56148c672a28)') called at /usr/share/perl5/EBox/Sudo.pm line 210
EBox::Sudo::_root(1, 'nsupdate -g -t 10 /var/lib/zentyal/tmp/5a11iItZTY') called at /usr/share/perl5/EBox/Sudo.pm line 153
EBox::Sudo::root('nsupdate -g -t 10 /var/lib/zentyal/tmp/5a11iItZTY') called at /usr/share/perl5/EBox/DNS.pm line 967
EBox::DNS::_postServiceHook('EBox::DNS=HASH(0x56148f924228)', 1) called at /usr/share/perl5/EBox/Module/Service.pm line 948
EBox::Module::Service::_regenConfig('EBox::DNS=HASH(0x56148f924228)') called at /usr/share/perl5/EBox/Module/Base.pm line 234
eval {...} at /usr/share/perl5/EBox/Module/Base.pm line 233
EBox::Module::Base::save('EBox::DNS=HASH(0x56148f924228)') called at /usr/share/perl5/EBox/GlobalImpl.pm line 649
eval {...} at /usr/share/perl5/EBox/GlobalImpl.pm line 648
EBox::GlobalImpl::saveAllModules('EBox::GlobalImpl=HASH(0x56148e751af8)', 'progress', 'EBox::ProgressIndicator=HASH(0x56148e7142d0)') called at /usr/share/perl5/EBox/Global.pm line 95
EBox::Global::AUTOLOAD('EBox::Global=HASH(0x56148a592a20)', 'progress', 'EBox::ProgressIndicator=HASH(0x56148e7142d0)') called at /usr/share/zentyal/global-action line 32
eval {...} at /usr/share/zentyal/global-action line 30
2021/02/08 12:02:05 ERROR> GlobalImpl.pm:653 EBox::GlobalImpl::saveAllModules - Failed to save changes in module dns: root command nsupdate -g -t 10 /var/lib/zentyal/tmp/5a11iItZTY failed.
Error output: tkey query failed: GSSAPI error: Major = Unspecified GSS failure.  Minor code may provide more information, Minor = No Kerberos credentials available (default cache: FILE:/tmp/krb5cc_0).

Command output: .
Exit value: 2
2021/02/08 12:02:05 ERROR> GlobalImpl.pm:728 EBox::GlobalImpl::saveAllModules - The following modules failed while saving their changes, their state is unknown: dns  at The following modules failed while saving their changes, their state is unknown: dns  at /usr/share/perl5/EBox/GlobalImpl.pm line 728
EBox::GlobalImpl::saveAllModules('EBox::GlobalImpl=HASH(0x56148e751af8)', 'progress', 'EBox::ProgressIndicator=HASH(0x56148e7142d0)') called at /usr/share/perl5/EBox/Global.pm line 95
EBox::Global::AUTOLOAD('EBox::Global=HASH(0x56148a592a20)', 'progress', 'EBox::ProgressIndicator=HASH(0x56148e7142d0)') called at /usr/share/zentyal/global-action line 32
eval {...} at /usr/share/zentyal/global-action line 30

Any idea what the fix is for this?

[kcurtis]

No ideas? Would removing the DNS component and reinstalling it help? Or will that crash the whole domain active directory?

[altiport]

Having the same issue here.  How did you solve it?

[turalyon]

Hi,

I got that error a few months ago and I was able to fix it by doing the following:

1. I disabled the modules: Domain controller and DNS and save changes.
2. I did a mark in the log files: /var/log/zentyal/zentyal.log and /var/log/syslog.
3. I enabled the DNS module and checked its status, including the mentioned log files.
4. Then, I enabled the domain controller module and again, I checked its status and the log files.
5. Finally, I tried to restart the DNS module just to see if the module still failed.

Hope it helps.

--
“This world is ours, and by the Holy Light we will keep it safe, now and forever".