Since scavenging is implemented the samba_dnsupdate command always updates all dns records required by the dc.
Running the nsupdate command against the samba internal dns server shows the "TSIG error with server: tsig verify failure" error message.
These messages fill the samba log on log level 0.
I'll propose a patch on samba-technical, soon.
Created attachment 14485 [details]
fix bug 13605
The attached patch is currently still in the autobuild process, but I already did a successful private autobuild over night.
The tests on github are fine, too:
Pushed to autobuild-v4-9-test.
Pushed to v4-9-test.
Closing out bug report.