[Samba] new DC preparation, nslookup and dig errors

[Rowland Penny]

On Mon, 25 Sep 2023 11:24:45 +0000
Paul Littlefield via samba <samba at lists.samba.org> wrote:

> Hi,
> 
> I am preparing a DC to replace our old Ubuntu version which is
> unpatched.
> 
> I have followed all the OS preparation, software installation and
> testing from the official docs but when I got to this part, I get
> this error ...
> 
> 
> root at dc5.mydomain.com ~ $ (screen) nslookup
> > set type=SRV
> > _ldap._tcp.mydomain.com;; communications error to 130.130.0.219#53:
> > timed out
> Server:         130.130.0.219
> Address:        130.130.0.219#53
> _ldap._tcp.mydomain.com      service = 0 100 389 dc3.mydomain.com.
> _ldap._tcp.mydomain.com      service = 0 100 389 dc4.mydomain.com.
> > exit
> 
> 
> ... also dig to the main DC gives this error ...
> 
> 
> 
> ;; WARNING: recursion requested but not available
> 
> 
> 
> Details for you:-
> 
> 'DC3' = Ubuntu 18.04.6 LTS, Samba Version 4.7.6-Ubuntu, 130.130.0.218
> 'DC4' = Ubuntu 18.04.6 LTS, Samba Version 4.7.6-Ubuntu, 130.130.0.218
> 'DC5' = Ubuntu 22.04.3 LTS, Samba Version 4.15.13-Ubuntu,
> 130.130.251.5 and soon ...
> 'DC6' = Ubuntu 22.04.3 LTS, Samba Version 4.15.13-Ubuntu,
> 130.130.251.6
> 
> 
> 
> Any ideas please?
> 
> 
> Regards,
> 
> Paul
> 

Are you using Bind9 ? 
If you are, have you got 'allow-recursion' set ?

Rowland