[Samba] Cannot remove old NS record
Paul R. Ganci
ganci at nurdog.com
Sun Dec 22 18:20:08 UTC 2019
Hi All,
A while ago I replaced a Samba AD on old hardware with a another AD on
newer hardware. Everything went smoothly including the demotion of the
old AD. However after I did some cleanup DNS records and turned off the
old hardware I noticed that there still was a NS record associated with
the old AD. So I went to the wiki page
https://wiki.samba.org/index.php/DNS_Administration and followed the
instructions on how to remove an old NS record:
# samba-tool dns delete <Your-AD-DNS-Server-IP-or-hostname> samdom.example.com @ NS
So I followed the instructions. Here is the sequence of commands that
demonstrates the problem (some of the command responses were redacted to
remove unnecessary lines):
> dig nikita.myhome.nurdog.com
;; ANSWER SECTION:
nikita.myhome.nurdog.com. 900 IN A 192.168.1.11
;; AUTHORITY SECTION:
myhome.nurdog.com. 900 IN NS nureyev.myhome.nurdog.com. <- Old NS
myhome.nurdog.com. 900 IN NS nikita.myhome.nurdog.com.
> samba-tool dns delete nureyev.myhome.nurdog.com myhome.nurdog.com @
NS nikita.myhome.nurdog.com
Record deleted successfully
> dig nikita.myhome.nurdog.com
;; ANSWER SECTION:
nikita.myhome.nurdog.com. 900 IN A 192.168.1.11
;; AUTHORITY SECTION:
myhome.nurdog.com. 900 IN NS nikita.myhome.nurdog.com.
myhome.nurdog.com. 900 IN NS nureyev.myhome.nurdog.com.
;; ADDITIONAL SECTION:
nureyev.myhome.nurdog.com. 900 IN A 192.168.1.8
If I try to remove the NS again using the same samba-tool command I
receive a python error indicating 9701,
'WERR_DNS_ERROR_RECORD_DOES_NOT_EXIST'. So why can I not get rid of the
NS nikita.myhome.nurdog.com? That hardware that used to run the AD is
physically gone. But for some reason it seems that Samba still thinks
nikita.myhome.nurdog.com is a NS for the domain, I would love to clean
this up. It seems to me that DNS is trying to use nikita first and then
nureyev but nikita shouldn't be there at all. I am running the Sernet
Samba packages 4-11.4-9 on a CentOS Linux release 7.7.1908 with
bind-9.11.4-9,
Are there any suggestions to to fix the problem?
--
Paul (ganci at nurdog.com)
Cell: (303)257-5208
More information about the samba
mailing list