[Samba] samba 4.12.2: WERR_DNS_ERROR_DS_UNAVAILABLE, unable to manage samba DNS

[Rowland penny]

On 29/04/2020 17:29, Olaf Dreyer wrote:
> Hi Rowland,
>
> this is a good question. Does this listing help or answer?
>
> root at OMTNDC3:/usr/local/samba/private/sam.ldb.d# ls -al
> total 93220 Node,CN=Schema,CN=Configuration,DC=omtn,DC=de
> drwxr-x--- 2 root bind      4096 Apr 28 16:03 .
> drwx------ 7 root root      4096 Apr 29 11:25 ..
> -rw------- 1 root staff 30384128 Apr 29 12:46 
> 'CN=CONFIGURATION,DC=OMTN,DC=DE.ldb'
> -rw------- 1 root staff 33878016 Apr 29 12:46 
> 'CN=SCHEMA,CN=CONFIGURATION,DC=OMTN,DC=DE.ldb'
> -rw-rw---- 1 root bind   4247552 Apr 29 12:46 
> 'DC=DOMAINDNSZONES,DC=OMTN,DC=DE.ldb'
> -rw-rw---- 1 root bind   6885376 Apr 29 12:46 
> 'DC=FORESTDNSZONES,DC=OMTN,DC=DE.ldb'
> -rw------- 1 root staff 19218432 Apr 29 12:46 'DC=OMTN,DC=DE.ldb'
> -rw-rw---- 1 root bind    831488 Apr 29 11:07 metadata.tdb
>
> Some output from ldb
> /usr/local/samba/bin/ldbsearch --cross-ncs --show-binary -H 
> /usr/local/samba/private/sam.ldb -b dc=omtn,dc=de -s sub 
> '(&(objectclass=dnsNode)(name=*))' > ~/addns
>
> oot at OMTNDC8:~# grep dn: ~/addns | grep DNS | grep "_ms"
> dn: 
> DC=_kerberos._tcp.dc._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=_ldap._tcp.dc._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=_ldap._tcp.b66950c4-e9b8-4bc9-b625-5b7d8a36f903.domains._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=_ldap._tcp.CorporateDataCenter._sites.gc._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=7abd666f-d3bc-4e8f-9ff3-cf3abd802ee5._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=_ldap._tcp.gc._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=_tcp.CorporateDataCenter._sites.gc._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=gc._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: DC=_msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=_kerberos._tcp.CorporateDataCenter._sites.dc._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=_ldap._tcp.pdc._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=8e100b0b-c414-4fef-9137-a16749633c5d._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=2d035437-cec0-4a24-bdd0-0b599915e3b6._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de
> dn: 
> DC=_ldap._tcp.CorporateDataCenter._sites.dc._msdcs,DC=omtn.de,CN=MicrosoftDNS,DC=ForestDnsZones,DC=omtn,DC=de


You have the 2000K dns, there appears to be nothing in ' 
CN=MicrosoftDNS,DC=DomainDnsZones,DC=omtn,DC=de'

Rowland