Samba 4.12.0 on Fedora32: bind DNS say "named: client @...: update 'fedora.loc/IN' denied"

[Dario Lesca]

Hi, I have post this request on samba ml:

https://lists.samba.org/archive/samba/2020-March/228791.html

someone here have some suggest to resolve this issue?

I'm looking for the best way to register into DNS bind the windows
clients joined to domain into DNS zone

In a test environment, when the client is joined to domain, the
associated record A it's not added into DNS zone, and after few minutes
or if I run on Windows "ipconfig/updatedns" I get this error:

mar 05 14:45:43 addc1.fedora.loc dhcpd[773]: DHCPREQUEST for 192.168.122.102 from
52:54:00:7e:c7:bb (win10b) via ens3
mar 05 14:45:43 addc1.fedora.loc dhcpd[773]: DHCPACK on 192.168.122.102 to
52:54:00:7e:c7:bb (win10b) via ens3
mar 05 14:45:43 addc1.fedora.loc named[718]: samba_dlz: starting transaction on zone
fedora.loc
mar 05 14:45:43 addc1.fedora.loc named[718]: client @0x7f5ef03e5ed0 192.168.122.102#56448:
update 'fedora.loc/IN' denied

Another method is use the samba team proposal script run from dhcp.

But I think this operation should be execute by samba, the zone DNS
(bind_dlz) in which these records are to be recorded is managed
directly by samba
   
Someone can help me?

Thanks

-- 
Dario Lesca
(inviato dal mio Linux Fedora 31 Workstation)