[Samba] bind9 and samba 4.9.1

[Rowland Penny]

On Mon, 15 Oct 2018 20:59:14 +0200
Benedikt Kaleß via samba <samba at lists.samba.org> wrote:

> Hello,
> I have the following problem with my bind9 together with samba 4.9
> SerNet. If I start the bind9 I got the following error-message:
> ---------------
> Oct 15 20:35:50 addc2 named[2269]: Loading 'AD DNS Zone' using driver
> dlopen Oct 15 20:35:50 addc2 named[2269]: samba_dlz: started for DN
> DC=zfd,DC=forumzfd,DC=de
> Oct 15 20:35:50 addc2 named[2269]: samba_dlz: starting configure
> Oct 15 20:35:50 addc2 named[2269]: zone
> 168.168.192.in-addr.arpa\010CNF:4fe640b0-6748-4746-848a-a012f56eaa36/NONE:
> has 0 SOA records
> Oct 15 20:35:50 addc2 named[2269]: zone
> 168.168.192.in-addr.arpa\010CNF:4fe640b0-6748-4746-848a-a012f56eaa36/NONE:
> has no NS records
> Oct 15 20:35:50 addc2 named[2269]: samba_dlz: Failed to configure zone
> '168.168.192.in-addr.arpa#012CNF:4fe640b0-6748-4746-848a-a012f56eaa36'
> ---------------
> When I list all the zones with samba-tool I got the following
> informations: ---------------
>  5 zone(s) found
> 
>   pszZoneName                 : 168.168.192.in-addr.arpa
>   Flags                       : DNS_RPC_ZONE_DSINTEGRATED
> DNS_RPC_ZONE_UPDATE_SECURE
>   ZoneType                    : DNS_ZONE_TYPE_PRIMARY
>   Version                     : 50
>   dwDpFlags                   : DNS_DP_AUTOCREATED
> DNS_DP_DOMAIN_DEFAULT DNS_DP_ENLISTED
>   pszDpFqdn                   : DomainDnsZones.SUBDOMAIN.MYDOMAIN.de
> 
>   pszZoneName                 : 168.168.192.in-addr.arpa
> CNF:4fe640b0-6748-4746-848a-a012f56eaa36
>   Flags                       : DNS_RPC_ZONE_DSINTEGRATED
> DNS_RPC_ZONE_UPDATE_SECURE
>   ZoneType                    : DNS_ZONE_TYPE_PRIMARY
>   Version                     : 50
>   dwDpFlags                   : DNS_DP_AUTOCREATED
> DNS_DP_DOMAIN_DEFAULT DNS_DP_ENLISTED
>   pszDpFqdn                   : DomainDnsZones.SUBDOMAIN.MYDOMAIN.de
> 
>   pszZoneName                 : SUBDOMAIN.MYDOMAIN.de
>   Flags                       : DNS_RPC_ZONE_DSINTEGRATED
> DNS_RPC_ZONE_UPDATE_SECURE
>   ZoneType                    : DNS_ZONE_TYPE_PRIMARY
>   Version                     : 50
>   dwDpFlags                   : DNS_DP_AUTOCREATED
> DNS_DP_DOMAIN_DEFAULT DNS_DP_ENLISTED
>   pszDpFqdn                   : DomainDnsZones.SUBDOMAIN.MYDOMAIN.de
> 
>   pszZoneName                 : 10.168.192.in-addr.arpa
>   Flags                       : DNS_RPC_ZONE_DSINTEGRATED
> DNS_RPC_ZONE_UPDATE_SECURE
>   ZoneType                    : DNS_ZONE_TYPE_PRIMARY
>   Version                     : 50
>   dwDpFlags                   : DNS_DP_AUTOCREATED
> DNS_DP_DOMAIN_DEFAULT DNS_DP_ENLISTED
>   pszDpFqdn                   : DomainDnsZones.SUBDOMAIN.MYDOMAIN.de
> 
>   pszZoneName                 : _msdcs.SUBDOMAIN.MYDOMAIN.de
>   Flags                       : DNS_RPC_ZONE_DSINTEGRATED
> DNS_RPC_ZONE_UPDATE_SECURE
>   ZoneType                    : DNS_ZONE_TYPE_PRIMARY
>   Version                     : 50
>   dwDpFlags                   : DNS_DP_AUTOCREATED
> DNS_DP_FOREST_DEFAULT DNS_DP_ENLISTED
>   pszDpFqdn                   : ForestDnsZones.SUBDOMAIN.MYDOMAIN.de
> 
> ---------------
> The problem seems to be the second zone. I try to delete the zone but
> I could not delete it.
> How can I delete the zone with the CNF: value? Or is the problem
> something else?
> 
> Best regards
> Benedikt Kaleß 
> 

It looks like you have a replication collision, the reverse zone was
created on on DC and before it could be replicated, it was created
again on another. The long number after the 'CNF' is the objects guid.

Because it is a reverse zone, I would delete (or try to) both of them
and then recreate the zone.

Rowland