[Samba] Internal DNS strangeness in 4.1.16

[Andrew Bartlett]

On Fri, 2015-02-27 at 17:08 +0000, Rowland Penny wrote:
> On 27/02/15 16:55, Greg Dickie wrote:
> > Hi,
> >
> >    I have just provisioned a new samba setup with 2 DCs running ISC DHCPd in failover and I’m trying to get it to play nice with samba internal DNS but I’m having some issues.
> >
> > 1) I’m using on commit, etc triggers in the dhcpd config to call a script that calls samba-tool to add, delete or update DNS. This script works fine when I call it from the command line as the dhcpd user but when called from the dhcpd daemon it throws a WERR_INTERNAL_DB_ERROR which is scary. That is coming from the client I guess. What is the best way to figure out what is going on server side. I increased the log level but I get crazy amounts of info that does not seem relevant.
> >
> > 2) I added a reverse zone 80.16.172.in-addr.arpa and when I add records to it all lookups fail with samba saying it’s not authoritative for the lookup.I figured maybe it was a class B vs Class C thing so I created a 16.172.in-addr.arpa zone and tried that. It’s better, now I just get a SERVFAIL like it can’t find it. If I do a samba-tool query ALL I see records in the AD.
> >
> > I haven’t played with 4 since the early days, it’s come a long way. nice.
> >
> > Any ideas for the problems above?
> >
> > Thanks,
> > Greg
> >
> > -- 
> > Greg Dickie
> > just a guy
> > 514-983-5400
> 
> Hi, if I remember correctly, samba-tool uses nsupdate to do the updates, 
> so why not do the same as me and script around nsupdate, I can assure 
> you this works, well it has for me for the last two years.

samba-tool dns uses the RPC management interface, not nsupdate.  It also
doesn't do a lot of error checking - for better or worse, what you put
in will end up in the database, provided you have the right privileges
(the username/password given to samba-tool). 

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba