[Samba] Can't use DNS Manager in MMC on Samba 4.12.0

[Andrew Bartlett]

We normally do this via attachments to bugzilla bugs restricted to the
samba developers group.  Start by filing a bug about this.

Andrew Bartlett

On Sat, 2020-03-14 at 22:30 +0000, Alex MacCuish via samba wrote:
> No worries Andrew. I haven't upgraded all servers yet so it's not urgent!
> 
> Is there a secure place I can upload my logs for when there's time to 
> take a look?
> 
> Cheers
> 
> Alex
> 
> On 05/03/2020 23:21, Andrew Bartlett via samba wrote:
> > On Wed, 2020-03-04 at 18:07 +0000, Alex MacCuish via samba wrote:
> > > On Samba 4.12.0, I receive the error "ndr_pull_uint32:
> > > ndr_pull_error(Buffer Size Error): Pull bytes 4
> > > (../../librpc/ndr/ndr_basic.c:152) at
> > > ../../librpc/ndr/ndr_basic.c:152"
> > > when opening the DNS Manager in MMC.
> > > 
> > > This jumped out at me from the log-level 10 output (I'm happy to
> > > send
> > > the full logs but would rather do that somewhere more private):
> > G'Day Alex,
> > 
> > I just wanted to say that I've seen your mails and am aware of your
> > report but have been dealing with other Samba issues.
> > 
> > I would say that logs from 'dnsserver' and port 135 not listening are
> > mutually exclusive conditions, unless the RPC server has crashed, but
> > that should be pretty loud in the logs if so.
> > 
> > I don't have any more clues or suggestions right now.
> > 
> > Sorry!
> > 
> > Andrew Bartlett
> > 
> > > /dnsserver: Found DNS zone xxx.xxx.xxx//
> > > //ndr_pull_uint32: ndr_pull_error(Buffer Size Error): Pull bytes 4
> > > (../../librpc/ndr/ndr_basic.c:152) at
> > > ../../librpc/ndr/ndr_basic.c:152//
> > > //     DnssrvComplexOperation2: struct DnssrvComplexOperation2//
> > > //        out: struct DnssrvComplexOperation2//
> > > //            pdwTypeOut               : *//
> > > //                pdwTypeOut               : DNSSRV_TYPEID_NULL (0)//
> > > //            ppDataOut                : *//
> > > //                ppDataOut                : union
> > > DNSSRV_RPC_UNION(case
> > > 0)//
> > > //                Null                     : NULL//
> > > //            result                   :
> > > WERR_DNS_ERROR_DS_UNAVAILABLE//
> > > //Sealed 16 bytes, and got 76 bytes header/signature.//
> > > //dcerpc_pull_auth_trailer: auth_pad_length 0//
> > > //Unsealed 112 bytes, with 76 bytes header/signature.//
> > > //     DnssrvComplexOperation2: struct DnssrvComplexOperation2//
> > > //        in: struct DnssrvComplexOperation2//
> > > //            dwClientVersion          : DNS_CLIENT_VERSION_LONGHORN
> > > (458752)//
> > > //            dwSettingFlags           : 0x00000000 (0)//
> > > //            pwszServerName           : *//
> > > //                pwszServerName           : 'xxx.xxx.xxx.xxx'//
> > > //            pszZone                  : NULL//
> > > //            pszOperation             : *//
> > > //                pszOperation             : 'EnumZones'//
> > > //            dwTypeIn                 : DNSSRV_TYPEID_DWORD (1)//
> > > //            pDataIn                  : union DNSSRV_RPC_UNION(case
> > > 1)//
> > > //            Dword                    : 0x00000013 (19)/
> > > 
> > > 
> > > I'm thinking the DNS RPC server isn't running:
> > > 
> > > samba-tool dns serverinfo dc01:
> > > 
> > > /Failed to connect host xxx.xxx.xxx.xxx on port 135 -
> > > NT_STATUS_CONNECTION_REFUSED/
> > > 
> > > /Failed to connect host xxx.xxx.xxx.xxx (dc01) on port 135 -
> > > NT_STATUS_CONNECTION_REFUSED./
> > > 
> > > /ERROR: Connecting to DNS RPC server dc01 failed with (3221226038,
> > > 'The
> > > transport-connection attempt was refused by the remote system.')/
> > > 
> > > Anyone have any ideas on how I can get the DNS RPC server up and
> > > running
> > > again? I notice also in the bind9 logs that it prints the normal
> > > "found
> > > zone xxx" message but doesn't list all my zones. I have also opened
> > > a
> > > bug (14310)
> > > 
-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba