Ansible Run Started: 2026-05-14T23:16:04.692930
User: chrisfu
Machine: morgana
Command: /opt/homebrew/bin/ansible-playbook playbooks/site.yml -i inventory/hosts.ini -l ad_dc --tags samba_dns --ask-vault-pass
----------------------------------------

PLAY [Tier 1 - Boot / kernel (cgroups)]
Targets: ['k3s_hosts']

PLAY [Tier 1.5 - Quiesce k3s and detach migrated iSCSI LUNs (myrddin)]
Targets: ['myrddin.prole.org']

PLAY [Tier 2 - Storage (iSCSI auth/login)]
Targets: ['iscsi']

PLAY [Tier 3 - Filesystem mounts (iSCSI)]
Targets: ['iscsi']

PLAY [Tier 4 - OS configuration (Pi-hole DNS and resilience)]
Targets: ['pihole']

PLAY [Tier 4 - OS configuration (Samba AD DNS reverse zones and PTRs)]
Targets: ['ad_dc']
OK: myrddin.prole.org - samba_dns : Assert Samba DNS admin password is set (vault loaded)
FAILED: myrddin.prole.org - samba_dns : List Samba DNS zones (ignore_errors=None)
Error: {"ansible_facts": {"discovered_interpreter_python": "/usr/bin/python3.13"}, "changed": false, "cmd": ["samba-tool", "dns", "zonelist", "127.0.0.1", "-U", "Administrator", "--password=6XirwhGsfx_7g.FEXYXH"], "delta": "0:00:00.192015", "end": "2026-05-14 23:16:05.765290", "msg": "non-zero return code", "rc": 255, "start": "2026-05-14 23:16:05.573275", "stderr": "WARNING: Using passwords on command line is insecure. Installing the setproctitle python module will hide these from shortly after program start.\ncli_credentials_failed_kerberos_login: krb5_cc_get_principal failed: No such file or directory\nFailed to bind to uuid 50abc2a4-574d-40b3-9d66-ee4fd5fba076 for ncacn_ip_tcp:127.0.0.1[49153,sign,abstract_syntax=50abc2a4-574d-40b3-9d66-ee4fd5fba076/0x00000005,localaddress=127.0.0.1] NT_STATUS_LOGON_FAILURE\nERROR: Connecting to DNS RPC server 127.0.0.1 failed with (3221225581, 'The attempted logon is invalid. This is either due to a bad username or authentication information.')", "stderr_lines": ["WARNING: Using passwords on command line is insecure. Installing the setproctitle python module will hide these from shortly after program start.", "cli_credentials_failed_kerberos_login: krb5_cc_get_principal failed: No such file or directory", "Failed to bind to uuid 50abc2a4-574d-40b3-9d66-ee4fd5fba076 for ncacn_ip_tcp:127.0.0.1[49153,sign,abstract_syntax=50abc2a4-574d-40b3-9d66-ee4fd5fba076/0x00000005,localaddress=127.0.0.1] NT_STATUS_LOGON_FAILURE", "ERROR: Connecting to DNS RPC server 127.0.0.1 failed with (3221225581, 'The attempted logon is invalid. This is either due to a bad username or authentication information.')"], "stdout": "", "stdout_lines": []}

STATS
myrddin.prole.org: ok=1 changed=0 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0

Ansible Run Ended: 2026-05-14T23:16:05.816069
Duration: 0:00:01.123139