[Samba] Internal DNS migrate to Bind9_DLZ

Rowland Penny rpenny at samba.org
Wed Jan 16 12:59:32 UTC 2019

On Wed, 16 Jan 2019 14:13:52 +0200
Eben Victor via samba <samba at lists.samba.org> wrote:

> Hello Roland/Louis & All,
> All the best for the new year.
> Sorry to bring this up again.
> I finally managed to give some more attention to this issue of mine.
> I've set up a new test domain server, and I managed to seamless
> migrate from SAMBA_INTERNAL to BIND9_DLZ and the other way again.
> With a little help of new software we purchased, I exported all data

What software did you purchase ?

> from production and imported the data on the new test domain, before
> the import I changed the test system back to SAMBA_INTENRAL.
> As soon as the imported completed I tried to migrate back to
> BIND9_DLZ and got the same errors as I'm getting in production.

Does the test domain and production use the same DNS domain ?

> ....
> 16-Jan-2019 14:13:22.279 generating session key for dynamic DNS
> 16-Jan-2019 14:13:22.279 sizing zone task pool based on 3 zones
> 16-Jan-2019 14:13:22.280 Loading 'AD DNS Zone' using driver dlopen
> 16-Jan-2019 14:13:22.472 samba_dlz: started for DN
> DC=samdom,DC=example,DC=com
> 16-Jan-2019 14:13:22.472 samba_dlz: starting configure
> 16-Jan-2019 14:13:22.474 samba_dlz: configured writeable zone '
> samdom.example.com'
> 16-Jan-2019 14:13:22.475 dns_rdata_fromtext: buffer-0x7f944d595da0:1:
> near eof: unexpected end of input

To me, it looks like more data was expected.

> 16-Jan-2019 14:13:22.475 Failed to put rr
> 16-Jan-2019 14:13:22.476 zone _msdcs.samdom.example.com/NONE: has 0
> SOA records
> 16-Jan-2019 14:13:22.476 zone _msdcs.samdom.example.com/NONE: has no
> NS records
> 16-Jan-2019 14:13:22.476 samba_dlz: Failed to configure zone '_
> msdcs.samdom.example.com'
> 16-Jan-2019 14:13:22.476 loading configuration: bad zone
> 16-Jan-2019 14:13:22.476 exiting (due to fatal error)
> 16-Jan-2019 14:13:22.476 samba_dlz: shutting down
> ....
> Could this be that my current data in production is corrupt somewhere?
> We have been running sernet-samba pacakges from version 4 until
> 4.9.4-SerNet-RedHat-11.el7
> Is there anything specific I can check in the DB?

The problem is, you aren't supposed to update in the way you are
trying, you just join a new DC to the domain.


More information about the samba mailing list