[Samba] Samba 4 internal DNS - how to modify SOA record

[Rustam K.]

I thought I would update this email thread. So far editing the records via
ADSI messes up ldb database, if you do that zones won't load anymore, just
like Dmitry stated in his first email.
I had to revert to a snapshot to get samba back, up and running.

I am curious If I have to modify record manually via ldbmodify(ldbedit),
would it understand hex/binary?
because when I run ldbedit it shows me nothing compared to hex in my
previous email, what is this format?

# record 50
dn: DC=@,DC=officenet.local,CN=MicrosoftDNS,DC=DomainDnsZones,DC=officenet,DC=local
objectClass: top
objectClass: dnsNode

..... (cut)

dnsRecord:: BAABAAXwAAB6AAAAAAADhAAAAAAAAAAAwKj6Aw==
dnsRecord:: BAABAAXwAABuAAAAAAACWAAAAAAAAAAAwKj6Bg==
dnsRecord:: GwACAAXwAAB6AAAAAAAAAAAAAAAjKzcAGQMHc3J2LXdpbglvZmZpY2VuZXQFbG9jYW
 wA
dnsRecord:: GgACAAXwAACGAAAAAAADhAAAAAArtw0IGAMGYWxmYWRjCW9mZmljZW5ldAVsb2NhbA
 A=
dnsRecord:: TgAGAAXwAAC9AAAAAAAAAAAAAAAYMDcAAAAAvQAAA4QAAAJYAAFRgAAAAAAaAwhzcn
 YtYWxmYQlvZmZpY2VuZXQFbG9jYWwAHAMKaG9zdG1hc3RlcglvZmZpY2VuZXQFbG9jYWwA

Cheers



2013/8/9 Rustam K. <rkovhaev at gmail.com>

> Hi,
>
> thanks for the follow up.
>
> I found the SOA record via ADSI edit :
>
>
> DC=@,DC=officenet.local,CN=MicrosoftDNS,DC=DomainDnsZones,DC=officenet,DC=local
>
> DC=@,DC=_msdcs.officenet.local,CN=MicrosoftDNS,DC=ForestDnsZones,DC=officenet,DC=local
>
> there are two of them,and every one of them has attribute dnsRecord which
> is in hex, and it has string "srv-alfa" (apart from hostmaster email ttl
> etc) which I need to change to "alfadc"
>
> 4E 00 06 00 05 F0 00 00 BE 00 00 00 00 00 00 00 00 00 00 00 1C 30 37 00 00
> 00 00 BE 00 00 03 84 00 00 02 58 00 01 51 80 00 00 00 00 1A 03 08 73 72 76
> 2D 61 6C 66 61 09 6F 66 66 69 63 65 6E 65 74 05 6C 6F 63 61 6C 00 1C 03 0A
> 68 6F 73 74 6D 61 73 74 65 72 09 6F 66 66 69 63 65 6E 65 74 05 6C 6F 63 61
> 6C 00
>
> This is where I am headed, and I'll try not to screw it up.
>
>
> Cheers
>
>
> 2013/8/9 Nico Kadel-Garcia <nkadel at gmail.com>
>
>> On Thu, Aug 8, 2013 at 4:14 AM, Kai Blin <kai at samba.org> wrote:
>> > On 2013-08-08 10:02, Rustam K. wrote:
>> >>
>> >> Hello,
>> >> I run samba 4.0.7, samba tool can't do the job, at least help/syntax
>> >> doesn't show that I can
>> >
>> >
>> > Ah, yes. Apparently this functionality only exists in 4.1 and master,
>> sorry.
>> > Should you try and run with that the command syntax is
>> >
>> > samba-tool dns update SOA "fqdn_dns fqdn_email serial refresh retry
>> expire
>> > minimumttl"
>> >
>> > HTH,
>> >
>> > Kai
>>
>> Rustam, I do hope that if you're manipulating your SOA directly, that
>> you've actually looked up the guidelines for manipulating them? Just
>> so you don't get surprised by things like the wraparound values for
>> the serial numbers, or what reasonable values are for TTL's.
>>
>
>
>
> --
>
> Rustam
>