[Samba] Another DNS problem

Paul R. Ganci ganci at nurdog.com
Sun Oct 9 04:29:54 UTC 2016

On 10/08/2016 08:59 PM, Paul R. Ganci via samba wrote:
> I just changed a DNS/rDNS record using samba-tool. According to 
> samba-tool the change actually occurred. I can query the new record:
> > samba-tool dns query nikita.samdom.example.com samdom.example.com 
> dc1 ALL
>   Name=, Records=1, Children=0
>     A: (flags=f0, serial=149, ttl=900)
> Similarly the rDNS shows:
> samba-tool dns query nikita.samdom.example.com 1.168.192.in-addr.arpa 
>   Name=, Records=1, Children=0
>     PTR: dc1.samdom.example.com (flags=f0, serial=108, ttl=900)
> But named says otherwise:
> > dig -x +short @nikita.samdom.example.com
> www-new.samdom.example.com.
> > dig dc1.samdom.example.com +short @nikita.samdom.example.com
> > dig www-new.samdom.example.com +short @nikita.samdom.example.com
> I had this happen once before and had to do something to force the 
> change. I don't remember what or why. Can anyone help? I would love to 
> get this problem fixed so it doesn't occur again.

Maybe I found the root problem. I want back to backups to find the 
command I used the last time this issue occurred.

 > samba_upgradedns --dns-backend=BIND9_DLZ
Reading domain information
DNS accounts already exist
No zone file /var/lib/samba/private/dns/SAMDOM.EXAMPLE.COM.zone
DNS records will be automatically created
DNS partitions already exist
dns-nikita account already exists
See /var/lib/samba/private/named.conf for an example configuration 
include file for BIND
and /var/lib/samba/private/named.txt for further documentation required 
for secure DNS updates
Finished upgrading DNS
You have switched to using BIND9_DLZ as your dns backend, but still have 
the internal dns starting. Please make sure you add '-dns' to your 
server services line in your smb.conf.

I added the -dns to the smb.conf, restarted samba-ad and named and now 
it seems like the DNS changes to effect:
 > dig dc1.samdom.example.com +short
 > dig -x +short

I am not sure why I had to do the above. Back when I provisioned the 
domain samba-4.0 I definitely provisioned to use the bind back-end. I 
guess things have evolved not that samba-4.4.6 is running.
Paul (ganci at nurdog.com)
Cell: (303)257-5208

More information about the samba mailing list