[Samba] Samba 4 & W2k8_R2 - No automatic DNS Updates

Wed Nov 21 02:32:01 MST 2012

What works:
- Samba4 Server migrated from Samba3 data.
- adding a 2008_R2 DC.
- Replication sofar as I could monitor.
- internal DNS Server on Samba.

What fails:
Automatic DNS Updates are not working, althought "allow dns updates = true"
in smb.conf is set - which seems to enable secure AND unsecure updates.

Manual adding an Record works on both machines, and it gets replicated on
both.

I also raised the Domain and Forest Level from 2003 to 2008 R2.

Did I miss a security setting on the used Client, Samba or W2K8-Server?

I also tried disabling IPv6 on Win7:
http://support.microsoft.com/kb/929852/en-us

I read several wiki pages but found no real hint, some of them are outdated
I think...no changes since 2006 etc.

Additional Info:
samba-tool drs showrepl
Default-First-Site-Name\SAMBA4SRV
DSA Options: 0x00000001
DSA object GUID: e0c557b0-2ea7-41af-9298-a6cee7fde615
DSA invocationId: 50a38aa7-2774-4131-ac6c-edd349915945

==== INBOUND NEIGHBORS ====

DC=DomainDnsZones,DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Wed Nov 21 10:14:06 2012 CET was successful
0 consecutive failure(s).
Last success @ Wed Nov 21 10:14:06 2012 CET

DC=ForestDnsZones,DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Wed Nov 21 10:14:06 2012 CET was successful
0 consecutive failure(s).
Last success @ Wed Nov 21 10:14:06 2012 CET

DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Wed Nov 21 10:14:06 2012 CET was successful
0 consecutive failure(s).
Last success @ Wed Nov 21 10:14:06 2012 CET

CN=Schema,CN=Configuration,DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Wed Nov 21 10:14:06 2012 CET was successful
0 consecutive failure(s).
Last success @ Wed Nov 21 10:14:06 2012 CET

CN=Configuration,DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Wed Nov 21 10:14:06 2012 CET was successful
0 consecutive failure(s).
Last success @ Wed Nov 21 10:14:06 2012 CET

==== OUTBOUND NEIGHBORS ====

DC=DomainDnsZones,DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Tue Nov 20 16:24:22 2012 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 20 16:24:22 2012 CET

DC=ForestDnsZones,DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Tue Nov 20 16:24:22 2012 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 20 16:24:22 2012 CET

DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Tue Nov 20 16:24:22 2012 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 20 16:24:22 2012 CET

CN=Schema,CN=Configuration,DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Tue Nov 20 16:24:22 2012 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 20 16:24:22 2012 CET

CN=Configuration,DC=bfetv,DC=bfe-systemhaus,DC=de
Default-First-Site-Name\BFETVSRV via RPC
DSA object GUID: cdf7bc5f-28c8-4477-a3cb-459aa4390db0
Last attempt @ Tue Nov 20 16:24:22 2012 CET was successful
0 consecutive failure(s).
Last success @ Tue Nov 20 16:24:22 2012 CET

==== KCC CONNECTION OBJECTS ====

Connection --
Connection name: ba1c7365-189f-4cfd-945e-a2c9ac4e6cb7
Enabled        : TRUE
Server DNS name : BFETVSRV.bfetv.bfe-systemhaus.de
Server DN name  : CN=NTDS
Settings,CN=BFETVSRV,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=bfetv,DC=bfe-systemhaus,DC=de
TransportType: RPC
options: 0x00000001
Warning: No NC replicated for Connection!

samba-tool domain level show
Domain and forest function level for domain
'DC=bfetv,DC=bfe-systemhaus,DC=de'

Forest function level: (Windows) 2008 R2
Domain function level: (Windows) 2008 R2
Lowest function level of a DC: (Windows) 2008 R2

Any troubleshooting advice or ideas? Debuglevel for debugging internal DNS?

cu Joh.
-- 
Johannes Paechnatz

--> googleplus: http://goo.gl/GVNoM
--> facebook: http://www.facebook.com/jpaechnatz
--> jabber/xmpp:
jpaechnatz at gmail.com<https://mail.google.com/mail/u/0/?view=cm&fs=1&tf=1&to=jpaechnatz@gmail.com>
--> icq: 22621122
--> skype: jpaechnatz
--> blog: http://simplyroot.blogspot.com/

amazon wishlist:
--> http://www.amazon.de/registry/wishlist/3L6U7SE47GQ1Z

Callsign: DO2PJ