[Samba] WERR_DNS_ERROR_NAME_DOES_NOT_EXIST when samba_dnsupdate tries to add to _msdcs

[Rick Hollinbeck]

I'm been stumped trying to resolve a samba error when it runs samba_dnsupdate to resync 
with a Windows Server 2008 DC. 

This is on a Debian 9 VM on which I have configured a Samba 4.5.16 / BIND 9.10.3 server 
joined as a DC to an existing Windows 2008 domain. 

It's mostly working now, but I can't get rid of one error that is preventing some additions to the 
_msdcs for the new Samba DC when samba_dnsupdate is run. 

Here's a portion of the output of "samba_dnsupdate --verbose --use-samba-tool" 
showing the failures... 
---- 
... 
(samba_dnsupdate detects 9 missing _msdcs records for the samba server (dc2) in two 
other windows 2008 DC's) 
... 
9 DNS updates and 0 DNS deletes needed 
Successfully obtained Kerberos ticket to DNS/dc2.office.example.com as DC2$ 
update (samba-tool): NS _msdcs.office.example.com dc2.office.example.com 
Calling samba-tool dns for NS _msdcs.office.example.com dc2.office.example.com (add) 
Calling samba-tool dns add -k no -P ['192.168.0.10', '_msdcs.office.example.com', '@', 'NS', 
'dc2.office.example.com'] 
ERROR(runtime): uncaught exception - (9714, 
'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST') 
File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run 
return self.run(*args, **kwargs) 
File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 1076, in run 
0, server, zone, name, add_rec_buf, None) 
update (samba-tool): SRV _ldap._tcp.dc._msdcs.office.example.com 
dc2.office.example.com 389 
Calling samba-tool dns for SRV _ldap._tcp.dc._msdcs.office.example.com 
dc2.office.example.com 389 (add) 
Calling samba-tool dns add -k no -P ['192.168.0.10', '_msdcs.office.example.com', 
'_ldap._tcp.dc', 'SRV', 'dc2.office.example.com 389 0 100'] 
ERROR(runtime): uncaught exception - (9714, 
'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST') 
File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 176, in _run 
return self.run(*args, **kwargs) 
File "/usr/lib/python2.7/dist-packages/samba/netcmd/dns.py", line 1076, in run 
0, server, zone, name, add_rec_buf, None) 
... ETC. 
---- 
It's weird because other similar entries were made successfully during the join (e.g. under 
_msdcs._sites ) 
Has anyone else seen an issue like this???? 
Thanks for any advice...