[Samba] Internal DNS strangeness in 4.1.16

[Rowland Penny]

On 01/03/15 02:47, Andrew Bartlett wrote:
> On Fri, 2015-02-27 at 17:08 +0000, Rowland Penny wrote:
>> On 27/02/15 16:55, Greg Dickie wrote:
>>> Hi,
>>>
>>>     I have just provisioned a new samba setup with 2 DCs running ISC DHCPd in failover and I’m trying to get it to play nice with samba internal DNS but I’m having some issues.
>>>
>>> 1) I’m using on commit, etc triggers in the dhcpd config to call a script that calls samba-tool to add, delete or update DNS. This script works fine when I call it from the command line as the dhcpd user but when called from the dhcpd daemon it throws a WERR_INTERNAL_DB_ERROR which is scary. That is coming from the client I guess. What is the best way to figure out what is going on server side. I increased the log level but I get crazy amounts of info that does not seem relevant.
>>>
>>> 2) I added a reverse zone 80.16.172.in-addr.arpa and when I add records to it all lookups fail with samba saying it’s not authoritative for the lookup.I figured maybe it was a class B vs Class C thing so I created a 16.172.in-addr.arpa zone and tried that. It’s better, now I just get a SERVFAIL like it can’t find it. If I do a samba-tool query ALL I see records in the AD.
>>>
>>> I haven’t played with 4 since the early days, it’s come a long way. nice.
>>>
>>> Any ideas for the problems above?
>>>
>>> Thanks,
>>> Greg
>>>
>>> -- 
>>> Greg Dickie
>>> just a guy
>>> 514-983-5400
>> Hi, if I remember correctly, samba-tool uses nsupdate to do the updates,
>> so why not do the same as me and script around nsupdate, I can assure
>> you this works, well it has for me for the last two years.
> samba-tool dns uses the RPC management interface, not nsupdate.  It also
> doesn't do a lot of error checking - for better or worse, what you put
> in will end up in the database, provided you have the right privileges
> (the username/password given to samba-tool).
>
> Andrew Bartlett
>

Hi, thanks for that, as I keep saying, you learn something new everyday. 
It also backs up what I said, use a script around nsupdate instead of 
samba-tool.

Rowland