[Samba] GPO issues - getting SYSVOL cleaned up again

[Stefan G. Weichinger]

Am 31.07.19 um 15:59 schrieb L.P.H. van Belle via samba:
> Ok, after that reboot
> 
> ! Note, atm dont care about secrets.keytab (yet) 
> .. I was a bit ahead with things...
> 
> One thing at a time, for the keytab to be corrected, you need a perfect correct working
> A PTR CNAME GUIDs for the DC(3) first then we start thinking in kerberos corrections. 
> 
> Run samba_dnsupdate --verbose  ( on both DC's ) 
> Post that output, ill have a look, and im getting a choco. :-) 

Now look at all that fun:

dc.pilsbacher.at entry has been magically created again, it seems:


root at pre01svdeb02:~# samba_dnsupdate --verbose
IPs: ['192.168.16.205']
Looking for DNS entry A dc.pilsbacher.at 192.168.16.205 as dc.pilsbacher.at.
Looking for DNS entry A pilsbacher.at 192.168.16.205 as pilsbacher.at.
Looking for DNS entry SRV _ldap._tcp.pilsbacher.at dc.pilsbacher.at 389
as _ldap._tcp.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.pilsbacher.at dc.pilsbacher.at 389
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.pilsbacher.at dc.pilsbacher.at 389
Looking for DNS entry SRV _ldap._tcp.dc._msdcs.pilsbacher.at
dc.pilsbacher.at 389 as _ldap._tcp.dc._msdcs.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 389
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 389
Looking for DNS entry SRV
_ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at
dc.pilsbacher.at 389 as
_ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at
dc.pilsbacher.at 389
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at
dc.pilsbacher.at 389
Looking for DNS entry SRV _kerberos._tcp.pilsbacher.at dc.pilsbacher.at
88 as _kerberos._tcp.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._tcp.pilsbacher.at dc.pilsbacher.at 88
Checking 0 100 88 dc.pilsbacher.at. against SRV
_kerberos._tcp.pilsbacher.at dc.pilsbacher.at 88
Looking for DNS entry SRV _kerberos._udp.pilsbacher.at dc.pilsbacher.at
88 as _kerberos._udp.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._udp.pilsbacher.at dc.pilsbacher.at 88
Checking 0 100 88 dc.pilsbacher.at. against SRV
_kerberos._udp.pilsbacher.at dc.pilsbacher.at 88
Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.pilsbacher.at
dc.pilsbacher.at 88 as _kerberos._tcp.dc._msdcs.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 88
Checking 0 100 88 dc.pilsbacher.at. against SRV
_kerberos._tcp.dc._msdcs.pilsbacher.at dc.pilsbacher.at 88
Looking for DNS entry SRV _kpasswd._tcp.pilsbacher.at dc.pilsbacher.at
464 as _kpasswd._tcp.pilsbacher.at.
Checking 0 100 464 pre01svdeb03.pilsbacher.at. against SRV
_kpasswd._tcp.pilsbacher.at dc.pilsbacher.at 464
Checking 0 100 464 dc.pilsbacher.at. against SRV
_kpasswd._tcp.pilsbacher.at dc.pilsbacher.at 464
Looking for DNS entry SRV _kpasswd._udp.pilsbacher.at dc.pilsbacher.at
464 as _kpasswd._udp.pilsbacher.at.
Checking 0 100 464 pre01svdeb03.pilsbacher.at. against SRV
_kpasswd._udp.pilsbacher.at dc.pilsbacher.at 464
Checking 0 100 464 dc.pilsbacher.at. against SRV
_kpasswd._udp.pilsbacher.at dc.pilsbacher.at 464
Looking for DNS entry CNAME
e5922d4b-9bf0-4c79-b256-ff5f75a3e4f4._msdcs.pilsbacher.at
dc.pilsbacher.at as
e5922d4b-9bf0-4c79-b256-ff5f75a3e4f4._msdcs.pilsbacher.at.
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at
389 as _ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 389
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 389
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
dc.pilsbacher.at 389 as
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
dc.pilsbacher.at 389
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
dc.pilsbacher.at 389
Looking for DNS entry SRV
_kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at
dc.pilsbacher.at 88 as
_kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at
dc.pilsbacher.at 88
Checking 0 100 88 dc.pilsbacher.at. against SRV
_kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at
dc.pilsbacher.at 88
Looking for DNS entry SRV
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
dc.pilsbacher.at 88 as
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
dc.pilsbacher.at 88
Checking 0 100 88 dc.pilsbacher.at. against SRV
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
dc.pilsbacher.at 88
Looking for DNS entry SRV _ldap._tcp.pdc._msdcs.pilsbacher.at
dc.pilsbacher.at 389 as _ldap._tcp.pdc._msdcs.pilsbacher.at.
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.pdc._msdcs.pilsbacher.at dc.pilsbacher.at 389
Looking for DNS entry A gc._msdcs.pilsbacher.at 192.168.16.205 as
gc._msdcs.pilsbacher.at.
Looking for DNS entry SRV _gc._tcp.pilsbacher.at dc.pilsbacher.at 3268
as _gc._tcp.pilsbacher.at.
Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV
_gc._tcp.pilsbacher.at dc.pilsbacher.at 3268
Checking 0 100 3268 dc.pilsbacher.at. against SRV _gc._tcp.pilsbacher.at
dc.pilsbacher.at 3268
Looking for DNS entry SRV _ldap._tcp.gc._msdcs.pilsbacher.at
dc.pilsbacher.at 3268 as _ldap._tcp.gc._msdcs.pilsbacher.at.
Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.gc._msdcs.pilsbacher.at dc.pilsbacher.at 3268
Checking 0 100 3268 dc.pilsbacher.at. against SRV
_ldap._tcp.gc._msdcs.pilsbacher.at dc.pilsbacher.at 3268
Looking for DNS entry SRV
_gc._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at
3268 as _gc._tcp.Default-First-Site-Name._sites.pilsbacher.at.
Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV
_gc._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 3268
Checking 0 100 3268 dc.pilsbacher.at. against SRV
_gc._tcp.Default-First-Site-Name._sites.pilsbacher.at dc.pilsbacher.at 3268
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at
dc.pilsbacher.at 3268 as
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at.
Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at
dc.pilsbacher.at 3268
Checking 0 100 3268 dc.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at
dc.pilsbacher.at 3268
Looking for DNS entry A DomainDnsZones.pilsbacher.at 192.168.16.205 as
DomainDnsZones.pilsbacher.at.
Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.pilsbacher.at
dc.pilsbacher.at 389 as _ldap._tcp.DomainDnsZones.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.DomainDnsZones.pilsbacher.at dc.pilsbacher.at 389
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.DomainDnsZones.pilsbacher.at dc.pilsbacher.at 389
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at
dc.pilsbacher.at 389 as
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at
dc.pilsbacher.at 389
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at
dc.pilsbacher.at 389
Looking for DNS entry A ForestDnsZones.pilsbacher.at 192.168.16.205 as
ForestDnsZones.pilsbacher.at.
Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.pilsbacher.at
dc.pilsbacher.at 389 as _ldap._tcp.ForestDnsZones.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.ForestDnsZones.pilsbacher.at dc.pilsbacher.at 389
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.ForestDnsZones.pilsbacher.at dc.pilsbacher.at 389
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at
dc.pilsbacher.at 389 as
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at
dc.pilsbacher.at 389
Checking 0 100 389 dc.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at
dc.pilsbacher.at 389
No DNS updates needed


root at pre01svdeb03:~# samba_dnsupdate  --verbose
IPs: ['192.168.16.206']
Looking for DNS entry A pre01svdeb03.pilsbacher.at 192.168.16.206 as
pre01svdeb03.pilsbacher.at.
Looking for DNS entry NS pilsbacher.at pre01svdeb03.pilsbacher.at as
pilsbacher.at.
Looking for DNS entry NS _msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at
as _msdcs.pilsbacher.at.
Looking for DNS entry A pilsbacher.at 192.168.16.206 as pilsbacher.at.
Looking for DNS entry SRV _ldap._tcp.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 389
Looking for DNS entry SRV _ldap._tcp.dc._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.dc._msdcs.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 389
Looking for DNS entry SRV
_ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 as
_ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.317d1ccc-8df7-4ec6-9a6b-031a060da9b7.domains._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 389
Looking for DNS entry SRV _kerberos._tcp.pilsbacher.at
pre01svdeb03.pilsbacher.at 88 as _kerberos._tcp.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 88
Looking for DNS entry SRV _kerberos._udp.pilsbacher.at
pre01svdeb03.pilsbacher.at 88 as _kerberos._udp.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._udp.pilsbacher.at pre01svdeb03.pilsbacher.at 88
Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 88 as _kerberos._tcp.dc._msdcs.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._tcp.dc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 88
Looking for DNS entry SRV _kpasswd._tcp.pilsbacher.at
pre01svdeb03.pilsbacher.at 464 as _kpasswd._tcp.pilsbacher.at.
Checking 0 100 464 pre01svdeb03.pilsbacher.at. against SRV
_kpasswd._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 464
Looking for DNS entry SRV _kpasswd._udp.pilsbacher.at
pre01svdeb03.pilsbacher.at 464 as _kpasswd._udp.pilsbacher.at.
Checking 0 100 464 pre01svdeb03.pilsbacher.at. against SRV
_kpasswd._udp.pilsbacher.at pre01svdeb03.pilsbacher.at 464
Looking for DNS entry CNAME
a60fbb5f-926b-484d-992c-c1ef5cc0936d._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at as
a60fbb5f-926b-484d-992c-c1ef5cc0936d._msdcs.pilsbacher.at.
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 as
_ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.pilsbacher.at
pre01svdeb03.pilsbacher.at 389
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 as
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 389
Looking for DNS entry SRV
_kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at
pre01svdeb03.pilsbacher.at 88 as
_kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._tcp.Default-First-Site-Name._sites.pilsbacher.at
pre01svdeb03.pilsbacher.at 88
Looking for DNS entry SRV
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 88 as
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at.
Checking 0 100 88 pre01svdeb03.pilsbacher.at. against SRV
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 88
Looking for DNS entry A gc._msdcs.pilsbacher.at 192.168.16.206 as
gc._msdcs.pilsbacher.at.
Looking for DNS entry SRV _gc._tcp.pilsbacher.at
pre01svdeb03.pilsbacher.at 3268 as _gc._tcp.pilsbacher.at.
Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV
_gc._tcp.pilsbacher.at pre01svdeb03.pilsbacher.at 3268
Looking for DNS entry SRV _ldap._tcp.gc._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 3268 as _ldap._tcp.gc._msdcs.pilsbacher.at.
Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.gc._msdcs.pilsbacher.at pre01svdeb03.pilsbacher.at 3268
Looking for DNS entry SRV
_gc._tcp.Default-First-Site-Name._sites.pilsbacher.at
pre01svdeb03.pilsbacher.at 3268 as
_gc._tcp.Default-First-Site-Name._sites.pilsbacher.at.
Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV
_gc._tcp.Default-First-Site-Name._sites.pilsbacher.at
pre01svdeb03.pilsbacher.at 3268
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 3268 as
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at.
Checking 0 100 3268 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.pilsbacher.at
pre01svdeb03.pilsbacher.at 3268
Looking for DNS entry A DomainDnsZones.pilsbacher.at 192.168.16.206 as
DomainDnsZones.pilsbacher.at.
Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.DomainDnsZones.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.DomainDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 as
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at
pre01svdeb03.pilsbacher.at 389
Looking for DNS entry A ForestDnsZones.pilsbacher.at 192.168.16.206 as
ForestDnsZones.pilsbacher.at.
Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 as _ldap._tcp.ForestDnsZones.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.ForestDnsZones.pilsbacher.at pre01svdeb03.pilsbacher.at 389
Looking for DNS entry SRV
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at
pre01svdeb03.pilsbacher.at 389 as
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at.
Checking 0 100 389 pre01svdeb03.pilsbacher.at. against SRV
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.pilsbacher.at
pre01svdeb03.pilsbacher.at 389
No DNS updates needed