Samba4 DNS - Some objects grayed out in Windows DNS tool

[Amitay Isaacs]

Hi Brian,

On Wed, Aug 8, 2012 at 10:56 PM, Brian C. Huffman
<bhuffman at etinternational.com> wrote:
> Amitay,
>
> Certainly!  In what format do you want the traffic dump?  What filters
> should I use on tcpdump (aside from source and destination host) to limit
> the traffic?

I'm really interested in the MS-RPC dnsserver traffic. But don't worry
about filtering while capture. If the capture file is too big, then
may be you can filter based on dnsserver RPC.

Make sure you do not start windows dns management tool before you
start wireshark capture. Windows dns management tool caches the zone
information once it's loaded. So you might have to reload zone to
refresh if the display is not correct. Also try to expand all the
folders under a zone. That should transfer all the relevant zone
information.  It would be great if you can capture a screenshot of the
zone information as displayed by dns tool first time you expand the
zone folder.

Amitay.

> On 08/07/2012 05:54 PM, Amitay Isaacs wrote:
>>
>> Hi Brian,
>>
>> On Sat, Aug 4, 2012 at 12:00 AM, Brian C. Huffman
>> <bhuffman at etinternational.com> wrote:
>>>
>>> All,
>>>
>>> I've seen this before, but I'm getting ready to migrate to Samba4 for
>>> directory services in my company and it makes me a little wary not
>>> knowing
>>> why this happens.  I see some entries at the top of my Windows DNS tool
>>> that
>>> are folders instead of standard entries and then some more that are
>>> folders
>>> that are grayed out.  In all cases these should be standard host records
>>> but
>>> somehow they're also listed here as folders (I'm not referring to the
>>> system
>>> ones like "_sites", "_tcp", etc).  Each folder also has a correct
>>> matching
>>> host record.  I believe in the past I've been able to make some of the
>>> gray
>>> entries go away by restarting samba.  But currently I'm not able to get
>>> rid
>>> of them all.
>>>
>>> Can someone explain if this is expected behavior?  Is there any harm in
>>> it?
>>>
>>> Thanks,
>>> Brian
>>
>> Usually if you refresh the zone, all the greyed entries + directory
>> entries disappear and the zone is displayed correctly. I am aware of
>> this problem, but haven't figured out why windows considers some of
>> the records are containers and are shown as folders. If you can send
>> me the capture of network traffic when you are using windows DNS
>> management tool, I should be able to find out why this happening.
>>
>> Amitay.
>>
>