[Samba] Cannot remove old NS record

[Rowland penny]

On 01/01/2020 23:11, Paul R. Ganci via samba wrote:
> On 1/1/20 3:49 PM, Paul R. Ganci via samba wrote:
>> I have been running this domain for quite a while and don't quite 
>> understand why this problem would occur. What is somewhat strange is 
>> the location of certain files. For example my dns.keytab is located 
>> here:
>>
>>
>> > ls /var/lib/samba/private/dns.keytab
>> /var/lib/samba/private/dns.keytab
>>
>> Does anyone have an idea how to fix the problem? Can I just create 
>> /var/lib/samba/bind-dns/ and re-run? Suggestions are appreciated. 
>> Thanks.
>>
> I just went ahead and created the /var/lib/samba/bind-dns/ directory 
> manually and then re-ran the samba_upgradedns command and now it looks 
> like it worked:
>
> > samba_upgradedns --dns-backend=BIND9_DLZ
> Reading domain information
> DNS accounts already exist
> No zone file /var/lib/samba/bind-dns/dns/MYHOME.NURDOG.COM.zone
> DNS records will be automatically created
> DNS partitions already exist
> dns-nureyev account already exists
> ATTENTION: The BIND configuration and keytab has been moved to: 
> /var/lib/samba/bind-dns
>            Please update your BIND configuration accordingly.
> Finished upgrading DNS
>
> I didn't realize that at some point the bind configuration had 
> changed. However this seemed to only fix some of the problem.
>
> 67868145 drwxr-x--- 2 root named      296 Jan  1 16:03 .
>   810580 drwxr-x--- 7 root named     4096 Jan  1 16:03 ..
> 67868196 -rw------- 1 root root  29609984 Nov  7 09:29 
> CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 67868195 -rw------- 1 root root  33222656 Nov  7 09:29 
> CN=SCHEMA,CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 67868192 -rw-rw---- 2 root named  6950912 Jan  1 16:02 
> DC=DOMAINDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 67868194 -rw-rw---- 2 root named  4247552 Nov  7 09:29 
> DC=FORESTDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 67868202 -rw------- 1 root root  10862592 Jan  1 16:05 
> DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 67868159 -rw-rw---- 2 root named   831488 Jan  1 16:02 metadata.tdb
>
> root at nureyev> ls -lai bind-dns/dns/sam.ldb.d/
> total 28252
> 34551301 drwxrwx--- 2 root named     296 Jan  1 16:03 .
>     2784 drwxrwx--- 3 root named      38 Jan  1 16:03 ..
> 68150376 -rw-rw---- 1 root named 7512064 Jan  1 16:03 
> CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 68150375 -rw-rw---- 1 root named 8101888 Jan  1 16:03 
> CN=SCHEMA,CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 67868192 -rw-rw---- 2 root named 6950912 Jan  1 16:02 
> DC=DOMAINDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 67868194 -rw-rw---- 2 root named 4247552 Nov  7 09:29 
> DC=FORESTDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 34551310 -rw-rw---- 1 root named 1286144 Jan  1 16:03 
> DC=MYHOME,DC=NURDOG,DC=COM.ldb
> 67868159 -rw-rw---- 2 root named  831488 Jan  1 16:02 metadata.tdb
>
> The CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb and 
> CN=SCHEMA,CN=CONFIGURATION,DC=MYHOME,DC=NURDOG,DC=COM.ldb  and 
> DC=MYHOME,DC=NURDOG,DC=COM.ldb are still different. I can add, delete 
> and update entries and I do not see the changes in bind. Is there some 
> way to fix the problem?
>
If you read the wiki page correctly, the important files are:

DC=DOMAINDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb

DC=FORESTDNSZONES,DC=MYHOME,DC=NURDOG,DC=COM.ldb

metadata.tdb

Yours now match, you just need to update the paths in your Bind9 config 
files.

Rowland