[Samba] Cannot remove old NS record

[Paul R. Ganci]

On 1/1/20 3:49 PM, Paul R. Ganci via samba wrote:
> I have been running this domain for quite a while and don't quite 
> understand why this problem would occur. What is somewhat strange is 
> the location of certain files. For example my dns.keytab is located here:
>
>
> > ls /var/lib/samba/private/dns.keytab
> /var/lib/samba/private/dns.keytab
>
> Does anyone have an idea how to fix the problem? Can I just create 
> /var/lib/samba/bind-dns/ and re-run? Suggestions are appreciated. Thanks.
>
I just went ahead and created the /var/lib/samba/bind-dns/ directory 
manually and then re-ran the samba_upgradedns command and now it looks 
like it worked:

 > samba_upgradedns --dns-backend=BIND9_DLZ
Reading domain information
DNS accounts already exist
No zone file /var/lib/samba/bind-dns/dns/MYHOME.NURDOG.COM.zone
DNS records will be automatically created
DNS partitions already exist
dns-nureyev account already exists
ATTENTION: The BIND configuration and keytab has been moved to: 
/var/lib/samba/bind-dns
            Please update your BIND configuration accordingly.
Finished upgrading DNS

I didn't realize that at some point the bind configuration had changed. 
However this seemed to only fix some of the problem.

67868145 drwxr-x--- 2 root named      296 Jan  1 16:03 .
   810580 drwxr-x--- 7 root named     4096 Jan  1 16:03 ..
67868196 -rw------- 1 root root  29609984 Nov  7 09:29 
CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb
67868195 -rw------- 1 root root  33222656 Nov  7 09:29 
CN=SCHEMA,CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb
67868192 -rw-rw---- 2 root named  6950912 Jan  1 16:02 
DC=DOMAINDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb
67868194 -rw-rw---- 2 root named  4247552 Nov  7 09:29 
DC=FORESTDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb
67868202 -rw------- 1 root root  10862592 Jan  1 16:05 
DC=MYHOME,DC=NURDOG,DC=COM.ldb
67868159 -rw-rw---- 2 root named   831488 Jan  1 16:02 metadata.tdb

root at nureyev> ls -lai bind-dns/dns/sam.ldb.d/
total 28252
34551301 drwxrwx--- 2 root named     296 Jan  1 16:03 .
     2784 drwxrwx--- 3 root named      38 Jan  1 16:03 ..
68150376 -rw-rw---- 1 root named 7512064 Jan  1 16:03 
CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb
68150375 -rw-rw---- 1 root named 8101888 Jan  1 16:03 
CN=SCHEMA,CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb
67868192 -rw-rw---- 2 root named 6950912 Jan  1 16:02 
DC=DOMAINDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb
67868194 -rw-rw---- 2 root named 4247552 Nov  7 09:29 
DC=FORESTDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb
34551310 -rw-rw---- 1 root named 1286144 Jan  1 16:03 
DC=MYHOME,DC=NURDOG,DC=COM.ldb
67868159 -rw-rw---- 2 root named  831488 Jan  1 16:02 metadata.tdb

The CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb and 
CN=SCHEMA,CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb  and 
DC=MYHOME,DC=NURDOG,DC=COM.ldb are still different. I can add, delete 
and update entries and I do not see the changes in bind. Is there some 
way to fix the problem?

-- 
Paul (ganci at nurdog.com)
Cell: (303)257-5208