Samba4 internal DNS problems - fresh start

[Andrew Bartlett]

On Tue, 2013-05-21 at 08:38 +0100, Mike Howard wrote:
> On 21/05/2013 08:17, Kai Blin wrote:
> > On 21/05/13 08:58, Mike Howard wrote:
> >
> > Hi Mike,
> >
> >> I'm currently having problems with Samba4's internal DNS. Originally, it
> >> was working, in that client's dhcp addresses were being updated. Then it
> >> seemed to stop.
> >
> > There seems to be some issue with updating records that I didn't quite 
> > identify yet. It only seems to bite us on updating records that 
> > already exist, and basically happen in the middle of the process. So 
> > the old record gets deleted ok, but no new record is added.
> > I suspect that's also what is causing your problem here.
> >
> 
> Yes, I do have the client's name but no ip data associated.
> 
> >> Is there a easy way to delete all the internal dns stuff and reinstall
> >> it afresh? Obviously, I don't want to lose my domain data, users,
> >> computers, groups, gpo's etc?
> >> I did try going back to the bind9 backend, which worked, but I would
> >> like to get the internal backend working and suspect it's my
> >> installation at fault.
> >
> > The Bind9 DLZ module and the internal server use the same data to do 
> > their job. If one works and the other doesn't then your AD data is 
> > fine and there's a bug in the DNS implementation.
> >
> >
> Ah, so a 'samba_upgradedns --dns-backend=BIND9_DLZ' copies the internal 
> server's data from 'sam.ldb.d' to the 'dns' directory for bind9 to work 
> with and presumably vice versa?

It sets up the links - we always operate on the live data.  The work
this tool does tries to provide a small manner of privilege separation
between bind and the rest of the AD DC, by only giving it access to the
dns partitions.

Andrew Bartlett

-- 
Andrew Bartlett                                http://samba.org/~abartlet/
Authentication Developer, Samba Team           http://samba.org