PfSense als Nameserver für Samba4 DC

Weis jemand Wie man ein AD DC an die pfSense hängt ?
pfSens + TinyDNS Server <
Debian + Samba 4 (Host anfragen functionieren nicht)


Error:
/usr/sbin/samba_dnsupdate: Traceback (most recent call last):
/usr/sbin/samba_dnsupdate: File "/usr/sbin/samba_dnsupdate", line 612, in <module>
/usr/sbin/samba_dnsupdate: get_credentials(lp)
/usr/sbin/samba_dnsupdate: File "/usr/sbin/samba_dnsupdate", line 125, in get_credentials
/usr/sbin/samba_dnsupdate: raise e
/usr/sbin/samba_dnsupdate: RuntimeError: kinit for NVN-CC-UBS$@NVN-GROUP.DE failed (Cannot contact any KDC for requested realm)
/usr/sbin/samba_dnsupdate:


Einstellungen:
pfSense:
DNS Forwoarder active (Require domain= on, )
hostoverrides->nvn-cc-ubs nvn-group.de 192.168.3.11
Domäinoverrides _> nvn-group.de 127.0.0.1


TinyDNS Server auch ()
Records =:
NVN-GROUP.DE SOA 192.168.3.11
NVN-GROUP.DE SOA 8.8.8.8

IpAdress = 127.0.0.1
Responseip = 192.168.3

Netwerl = LAN

ZoneTransfers:
192.168.3.11 NVN-CC-UBS


Debian:
NVN-CC-UBS:/home/afrauenstein# cat /etc/hosts
127.0.0.1 localhost
127.0.0.1 NVN-CC-UBS.NVN-GROUP.DE NVN-CC-UBS
127.0.0.1 NVN-GROUP.DE

The following lines are desirable for IPv6 capable hosts

::1 localhost ip6-localhost ip6-loopback
ff02::1 ip6-allnodes
ff02::2 ip6-allrouters


NVN-CC-UBS:/home/afrauenstein# cat /etc/resolv.conf
domain NVN-GROUP.DE
nameserver 192.168.3.1
search NVN-GROUP.DE


NVN-CC-UBS:/home/afrauenstein# host -l NVN-GROUP.DE
Host NVN-GROUP.DE not found: 9(NOTAUTH)
; Transfer failed.