How to get DNS replication working properly?

Juan Pablo Lorier jplorier at gmail.com
Thu Jul 5 11:29:35 MDT 2012


Hi Andrew,

I don't know if you received the reply to your last mail. I'm back at 
the office and I'm compiling beta3 to test everything with the patch 
(that if I don't get it wrong should be at the master branch at this 
time, isn't it?).
I told you in the last mail that I get partial things running, I get the 
partitions right at joing time with your patch but I don't get dynamic 
dns to update from the windows controllers to samba and I don't get bind 
to work.
I get the right dns records if I samba-tool dns qerry but I don't get 
them if I use dig (that should querry the bind instead of samba, doesn't 
it?).
I also get an error if I upgradedns complaining about not finding the 
zone file in the private directory (I've tried creating it manually but 
the script deletes it).

With beta3 I get this error in one of my samba DCs:

   UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 
for 20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
DC=ForestDnsZones,DC=montecarlotv,DC=com,DC=uy
[2012/07/05 12:27:47,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 
for 20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
CN=Configuration,DC=montecarlotv,DC=com,DC=uy
[2012/07/05 12:27:49,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 
for 20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
CN=Schema,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
[2012/07/05 12:27:52,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 
for 20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
DC=montecarlotv,DC=com,DC=uy
[2012/07/05 12:27:53,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 
for 20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
DC=DomainDnsZones,DC=montecarlotv,DC=com,DC=uy
[2012/07/05 12:27:53,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 
for 20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
DC=ForestDnsZones,DC=montecarlotv,DC=com,DC=uy
[2012/07/05 12:27:53,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 
for 20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
CN=Configuration,DC=montecarlotv,DC=com,DC=uy
[2012/07/05 12:27:54,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 
for 20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
CN=Schema,CN=Configuration,DC=montecarlotv,DC=com,DC=uy
[2012/07/05 12:27:54,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_ACCESS_DENIED/NT code 0xc0002105 
for 20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
DC=montecarlotv,DC=com,DC=uy
[2012/07/05 12:48:51,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_BUSY/NT code 0xc00020f6 for 
20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy 
DC=montecarlotv,DC=com,DC=uy
[2012/07/05 13:02:31,  0] ../lib/util/util.c:455(dump_data)
   [0000] 00 00 00 00 62 00 00 00   00 00 00 00 20 00 20 00 ....b... 
.... . .
   [0010] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0020] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0030] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0040] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0050] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0060] 20 00 20 00 20 00 20 00   20 00 20 00 50 00 B4      . . . .  . 
.P..
[2012/07/05 13:02:31,  0] ../lib/util/util.c:455(dump_data)
   [0000] 00 00 00 00 62 00 00 00   00 00 00 00 20 00 20 00 ....b... 
.... . .
   [0010] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0020] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0030] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0040] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0050] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0060] 20 00 20 00 20 00 20 00   20 00 20 00 50 00 B4      . . . .  . 
.P..
[2012/07/05 13:02:41,  0] ../lib/util/util.c:455(dump_data)
   [0000] 00 00 00 00 62 00 00 00   00 00 00 00 20 00 20 00 ....b... 
.... . .
   [0010] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0020] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0030] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0040] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0050] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0060] 20 00 20 00 20 00 20 00   20 00 20 00 50 00 B4      . . . .  . 
.P..
[2012/07/05 13:02:42,  0] ../lib/util/util.c:455(dump_data)
   [0000] 00 00 00 00 62 00 00 00   00 00 00 00 20 00 20 00 ....b... 
.... . .
   [0010] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0020] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0030] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0040] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0050] 20 00 20 00 20 00 20 00   20 00 20 00 20 00 20 00    . . . .  
. . . .
   [0060] 20 00 20 00 20 00 20 00   20 00 20 00 50 00 B4      . . . .  . 
.P..


and in the other I get :

[2012/07/05 12:34:44,  0] 
../source4/librpc/rpc/dcerpc_util.c:660(dcerpc_pipe_auth_recv)
   Failed to bind to uuid e3514235-4b06-11d1-ab04-00c04fc2dcd2 for 
e3514235-4b06-11d1-ab04-00c04fc2dcd2 at ncacn_ip_tcp:20496a7b-2667-426f-be0b-7157b0cf2910._msdcs.montecarlotv.com.uy[1024,seal,krb5] 
NT_STATUS_INVALID_PARAMETER
[2012/07/05 13:02:22,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_BUSY/NT code 0xc00020f6 for 
c341141f-9731-4860-978d-dc5012d989e9._msdcs.montecarlotv.com.uy 
DC=montecarlotv,DC=com,DC=uy
[2012/07/05 13:36:52,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_BUSY/NT code 0xc00020f6 for 
c341141f-9731-4860-978d-dc5012d989e9._msdcs.montecarlotv.com.uy 
DC=montecarlotv,DC=com,DC=uy
[2012/07/05 13:52:00,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_BUSY/NT code 0xc00020f6 for 
c341141f-9731-4860-978d-dc5012d989e9._msdcs.montecarlotv.com.uy 
DC=montecarlotv,DC=com,DC=uy
[2012/07/05 14:02:14,  0] 
../source4/dsdb/repl/drepl_out_helpers.c:829(dreplsrv_update_refs_done)
   UpdateRefs failed with WERR_DS_DRA_BUSY/NT code 0xc00020f6 for 
c341141f-9731-4860-978d-dc5012d989e9._msdcs.montecarlotv.com.uy 
DC=montecarlotv,DC=com,DC=uy


So it seems replica is not working.
Another thing that I'll confirm if is fixed in beta3 is that in beta2 I 
had samba eating the ram of the system. I had to kill samba every 2 days 
at most to release the memory (virtual machine with 2GB ram and about 
100 users and 100 machines in the domain).
If you can point me a direction so I can look for a way to test what is 
not working, I'll be happy to work to get this running.
Regards,

Juan Pablo Lorier


More information about the samba-technical mailing list