[Samba] V4 - New Install - Missing Zone File

[Amitay Isaacs]

Hi Jeremy,

On Thu, Feb 23, 2012 at 4:01 AM,  <jdfire at cox.net> wrote:
> Hello All,
>
> Thank you for your help that you have provided so far regarding my issue. I have cleared out this email to reduce the confusion of my current issue. Here is a recap of my issue and the logs you requested below.
>
> Currently, I have resolved the DNSSEC issue that I was seeing in my /var/log/messages log.
>
> I am still having problems with Bind 9.8.1 on CentOS 6.2 updating records using Samba4 latest from git. Steve emailed me offline and stated that Bind 9.8.1 has issues with updates and suggested 9.9 to resolve the issue. I have not tried that yet as I wanted to provide some more information to see if we can resolve this issue on 9.8.1.
>
> It seems the everything else in samba4 that I have used is working. I can add new servers to the domain without much issue. Once they are added I can ping/resolve the DC samba4 server but I can't resolve any of the other servers. Below you will find the output you all requested. Seems like it can't find some files or something. From bind logs it appears everything is loading correct.y.
>
>
> /usr/local/samba/sbin/samba_dnsupdate --verbose
> IPs: ['2002:4b46:c8ad:0:a00:27ff:fe14:5491', 'fe80::a00:27ff:fe14:5491%eth0', 'fe80::a00:27ff:fee5:5840%eth1', '192.168.7.30', '192.168.30.1']
> Looking for DNS entry A bob-dc.com 192.168.7.30 as bob-dc.com.
> Looking for DNS entry A dc1.bob-dc.com 192.168.7.30 as dc1.bob-dc.com.
> Looking for DNS entry AAAA bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 as bob-dc.com.
> Failed to find matching DNS entry AAAA bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
> Looking for DNS entry AAAA dc1.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 as dc1.bob-dc.com.
> Failed to find matching DNS entry AAAA dc1.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
> Looking for DNS entry A gc._msdcs.bob-dc.com 192.168.7.30 as gc._msdcs.bob-dc.com.
> Looking for DNS entry AAAA gc._msdcs.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 as gc._msdcs.bob-dc.com.
> Failed to find matching DNS entry AAAA gc._msdcs.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
> Looking for DNS entry CNAME 48c0fc0c-dcc1-425d-bcb2-a229d40ab48c._msdcs.bob-dc.com dc1.bob-dc.com as 48c0fc0c-dcc1-425d-bcb2-a229d40ab48c._msdcs.bob-dc.com.
> Looking for DNS entry SRV _kpasswd._tcp.bob-dc.com dc1.bob-dc.com 464 as _kpasswd._tcp.bob-dc.com.
> Checking 0 100 464 dc1.bob-dc.com. against SRV _kpasswd._tcp.bob-dc.com dc1.bob-dc.com 464
> Looking for DNS entry SRV _kpasswd._udp.bob-dc.com dc1.bob-dc.com 464 as _kpasswd._udp.bob-dc.com.
> Checking 0 100 464 dc1.bob-dc.com. against SRV _kpasswd._udp.bob-dc.com dc1.bob-dc.com 464
> Looking for DNS entry SRV _kerberos._tcp.bob-dc.com dc1.bob-dc.com 88 as _kerberos._tcp.bob-dc.com.
> Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._tcp.bob-dc.com dc1.bob-dc.com 88
> Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.bob-dc.com dc1.bob-dc.com 88 as _kerberos._tcp.dc._msdcs.bob-dc.com.
> Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._tcp.dc._msdcs.bob-dc.com dc1.bob-dc.com 88
> Looking for DNS entry SRV _kerberos._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 88 as _kerberos._tcp.default-first-site-name._sites.bob-dc.com.
> Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 88
> Looking for DNS entry SRV _kerberos._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com dc1.bob-dc.com 88 as _kerberos._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com.
> Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com dc1.bob-dc.com 88
> Looking for DNS entry SRV _kerberos._udp.bob-dc.com dc1.bob-dc.com 88 as _kerberos._udp.bob-dc.com.
> Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._udp.bob-dc.com dc1.bob-dc.com 88
> Looking for DNS entry SRV _ldap._tcp.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.bob-dc.com.
> Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.bob-dc.com dc1.bob-dc.com 389
> Looking for DNS entry SRV _ldap._tcp.dc._msdcs.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.dc._msdcs.bob-dc.com.
> Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.dc._msdcs.bob-dc.com dc1.bob-dc.com 389
> Looking for DNS entry SRV _ldap._tcp.gc._msdcs.bob-dc.com dc1.bob-dc.com 3268 as _ldap._tcp.gc._msdcs.bob-dc.com.
> Checking 0 100 3268 dc1.bob-dc.com. against SRV _ldap._tcp.gc._msdcs.bob-dc.com dc1.bob-dc.com 3268
> Looking for DNS entry SRV _ldap._tcp.pdc._msdcs.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.pdc._msdcs.bob-dc.com.
> Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.pdc._msdcs.bob-dc.com dc1.bob-dc.com 389
> Looking for DNS entry SRV _ldap._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.default-first-site-name._sites.bob-dc.com.
> Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 389
> Looking for DNS entry SRV _ldap._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com.
> Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com dc1.bob-dc.com 389
> Looking for DNS entry SRV _ldap._tcp.default-first-site-name._sites.gc._msdcs.bob-dc.com dc1.bob-dc.com 3268 as _ldap._tcp.default-first-site-name._sites.gc._msdcs.bob-dc.com.
> Checking 0 100 3268 dc1.bob-dc.com. against SRV _ldap._tcp.default-first-site-name._sites.gc._msdcs.bob-dc.com dc1.bob-dc.com 3268
> Looking for DNS entry SRV _ldap._tcp.2d1290ec-d837-4f59-8730-9deb5078c8f0.domains._msdcs.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.2d1290ec-d837-4f59-8730-9deb5078c8f0.domains._msdcs.bob-dc.com.
> Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.2d1290ec-d837-4f59-8730-9deb5078c8f0.domains._msdcs.bob-dc.com dc1.bob-dc.com 389
> Looking for DNS entry SRV _gc._tcp.bob-dc.com dc1.bob-dc.com 3268 as _gc._tcp.bob-dc.com.
> Checking 0 100 3268 dc1.bob-dc.com. against SRV _gc._tcp.bob-dc.com dc1.bob-dc.com 3268
> Looking for DNS entry SRV _gc._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 3268 as _gc._tcp.default-first-site-name._sites.bob-dc.com.
> Checking 0 100 3268 dc1.bob-dc.com. against SRV _gc._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 3268
> Looking for DNS entry A bob-dc.com 192.168.30.1 as bob-dc.com.
> Failed to find matching DNS entry A bob-dc.com 192.168.30.1
> Looking for DNS entry A dc1.bob-dc.com 192.168.30.1 as dc1.bob-dc.com.
> Failed to find matching DNS entry A dc1.bob-dc.com 192.168.30.1
> Looking for DNS entry A gc._msdcs.bob-dc.com 192.168.30.1 as gc._msdcs.bob-dc.com.
> Failed to find matching DNS entry A gc._msdcs.bob-dc.com 192.168.30.1
> Calling nsupdate for AAAA bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
> Failed nsupdate: AAAA bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 : [Errno 2] No such file or directory
> Calling nsupdate for AAAA dc1.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
> Failed nsupdate: AAAA dc1.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 : [Errno 2] No such file or directory
> Calling nsupdate for AAAA gc._msdcs.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
> Failed nsupdate: AAAA gc._msdcs.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 : [Errno 2] No such file or directory
> Calling nsupdate for A bob-dc.com 192.168.30.1
> Failed nsupdate: A bob-dc.com 192.168.30.1 : [Errno 2] No such file or directory
> Calling nsupdate for A dc1.bob-dc.com 192.168.30.1
> Failed nsupdate: A dc1.bob-dc.com 192.168.30.1 : [Errno 2] No such file or directory
> Calling nsupdate for A gc._msdcs.bob-dc.com 192.168.30.1
> Failed nsupdate: A gc._msdcs.bob-dc.com 192.168.30.1 : [Errno 2] No such file or directory
> Failed update of 6 entries

That error message needs to be fixed. :)

Looks like "nsupdate" command is not in the path. samba_dnsupdate
script uses nsupdate to dynamically update DNS entries.

Try adding "nsupdate command = /path/to/nsupdate" in smb.conf.

Amitay.