[PATCH] Create DC DNS entires at domain join

[Andrew Bartlett]

On Sat, 2017-06-10 at 15:08 +1200, Andrew Bartlett wrote:
> On Fri, 2017-06-09 at 20:03 +0200, Marc Muehlfeld wrote:
> > Hi Andrew,
> > 
> > Am 09.06.2017 um 06:48 schrieb Andrew Bartlett via samba-technical:
> > > > Attached is the patch to have Samba create DNS entries at domain
> > > > join.
> > 
> > I tested the patch with samba-master. If I join a new Samba DC (also 
> > samba-master + patch), the A and objectGUID records are now 
> > automatically created. Good work.
> > 
> > 
> > However, should this also work when a user joins a Windows DC? I joined 
> > 2008 R2 (incl. all available updates), but neither the A nor the 
> > objectGUID record was created.
> 
> That is interesting.  During development I did test it with Windows,
> either 2008R2 or 2012R2 and it did create the records.  That is where I
> noticed the different ACLs I mention in the commit.
> 
> DNS records are only created if the seperate DNS partition is observed.

I just tested with my 2008R2 DC, with a separate DNS partition, and it
worked fine.  

How would you like to proceed from here?  Push the patches and debug
the remaining issues for your environment after they are in master, or
have me examine your logs first, or ?

Naturally I'm rather keen to wrap this up for 4.7, but neither do I
want to brush your findings aside.

Either way, the output of 'samba-tool domain join' would be the first
step I need, followed by a network trace.

Thanks,

Andrew Bartlett
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba