[Samba] Migration from Windows to Samba4

[Taylor, Jonn]

On 10/26/2013 01:26 PM, Rob Janssen wrote:
> I have made some progress in this matter...
> I changed to DNS from Bind to Samba internal, having Bind listening on 
> 127.0.0.2
> and Samba forwarding the external queries to there.   Now at least the 
> DNS is working
> OK, i.e. the DNS updates are working and the forward and reverse 
> entries are correctly
> created for workstations.
>
> As I could not demote the Windows 2003 DC cleanly, I forcefully 
> demoted it and removed
> its references from the AD.   That seems to have gone OK.  The Samba4 
> machine is
> now standalone, and operates fine as far as I can test from the client 
> machines.
>
> However, the DNS has not been replicated completely correctly, that 
> was probably also
> the cause of my earlier difficulties.   When I do DNS queries for some 
> of the more
> exotic names, like "host -t srv 
> _ldap._tcp.Sitename._sites.gc._msdcs.example.nl",
> I still get two replies for the old and new DC.  However, when I 
> examine the DNS
> using either the Windows DNS management or the samba-tool dns query, 
> the entry
> for this name is not there.  In the other (less deep) trees in _msdcs 
> things are OK.
>
> When I look using Windows DNS management I see some funny things 
> inside this
> _msdcs hierarchy, e.g. the entry above is shown as a grey envelope 
> instead of yellow.
> And I also saw two yellow envelopes named DomainDnsZones and 
> ForestDnsZones.
> I think those would normally be at toplevel.
>
> However, "samba-tool dbcheck" finds nothing wrong.
>
> What can be done about this?
> Is this some form of database corruption or is it merely some error 
> during replication?
> Is it safe to try to correct things using Windows DNS managament or 
> samba-tool
> commands, or do I risk corrupting the DB even further?
>
> Rob
Run this command to update your DNS.

samba_dnsupdate --verbose --all-names

Also post the output of samba-tool drs showrepl

Jonn