Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Error: Error updating DNS record: Error negotiating GSS context: [Root cause: Networking_Error] Networking_Error: AS Exchange Error: failed sending AS_REQ to KDC: failed to communicate with KDC #241

Open
1 task done
RahmanBadru opened this issue Nov 1, 2022 · 2 comments
Labels

Comments

@RahmanBadru
Copy link

Terraform CLI and Provider Versions

Terraform v1.3.3
on linux_amd64
and provider registry.terraform.io/hashicorp/dns v3.2.3

Terraform Configuration

provider "dns"{
    update {
      server = "172.254.10.57"
      gssapi {
      realm    = "TESTSERVER.COM"
      username = var.username
      password  = var.password
      }
    } 
}

resource "dns_a_record_set" "dolapo" {
  zone = "testserver.com."
  name = "interswitch"
  addresses = [
    "192.168.0.1"
  ]
  ttl = 300
}

Expected Behavior

An A record should have been created on the dns server configured in the provider block

Actual Behavior

It doesnt create and i get the error "Error updating DNS record: Error negotiating GSS context: [Root cause: Networking_Error] Networking_Error: AS Exchange Error: failed sending AS_REQ to KDC: failed to communicate with KDC. Attempts made with UDP (error sending to a KDC: error sneding to WINDOWS-MCW2020.testserver.com:53: sending over UDP failed to 76.223.65.111:53: read udp 172.254.10.55:57425->76.223.65.111:53: i/o timeout) and then TCP (error in getting a TCP connection to any of the KDCs)"

Steps to Reproduce

  1. terraform apply

How much impact is this issue causing?

Medium

Logs

No response

Additional Information

No response

Code of Conduct

  • I agree to follow this project's Code of Conduct
@RahmanBadru RahmanBadru added the bug label Nov 1, 2022
@jmyers82
Copy link

jmyers82 commented Feb 6, 2023

@RahmanBadru did you get this working? Where did you put your krb5.conf file on windows? Did you have to install any kerb packages? I am actually getting the Error negotiating GSS context: configuration file could not be opened: open : no such file or directory, so wondering / assuming my setup is still off somewhere?

@peshay
Copy link

peshay commented Feb 2, 2024

I run into the same error message.

│ Error: Error updating DNS record: error negotiating GSS context: [Root cause: Networking_Error] Networking_Error: AS Exchange Error: failed sending AS_REQ to KDC: failed to communicate with KDC. Attempts made with TCP (no KDCs defined in configuration for realm my.domain) and then UDP (no KDCs defined in configuration for realm my.domain)
│
│   with module.dns.dns_a_record_set.server_entry,
│   on ../../../modules/censhareDNS/main.tf line 3, in resource "dns_a_record_set" "server_entry":
│    3: resource "dns_a_record_set" "server_entry" {
│
╵

What I think is weird is failed sending AS_REQ to KDC, because in Wireshark I cant even see it trying to send AS_REQ to any server. If I do this with kinit from my macOS or Ubuntu 22 it works fine and I can see the requests on the network. Even tho the terraform provider has everything it requires (keytab, realm infos, krb5.conf) it seems not even trying to send out the request. I have no idea where this get stuck and why it's not getting processed.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants