[Samba] Changing IP Scope on a Samba DC

[Rowland penny]

On 01/09/2020 00:33, Peter Pollock wrote:
> I just ran  samba_dnsupdate --all-names and got this:
>
> itadmin at genesis:~$ sudo samba_dnsupdate --all-names
> add_interface: not adding duplicate interface 192.168.1.11
You said that you were using the 192.168.2.0/24 network, where is that 
ipaddress coming from ?
> ldb_wrap open of secrets.ldb
>
> update failed: NOTAUTH
> update failed: NOTAUTH
> Traceback (most recent call last):
>   File "/usr/sbin/samba_dnsupdate", line 925, in <module>
>     call_nsupdate(d)
>   File "/usr/sbin/samba_dnsupdate", line 498, in call_nsupdate
>     server = get_krb5_rw_dns_server(creds, zone)
>   File "/usr/sbin/samba_dnsupdate", line 156, in get_krb5_rw_dns_server
>     rw_dns_servers = get_possible_rw_dns_server(creds, domain)
>   File "/usr/sbin/samba_dnsupdate", line 140, in 
> get_possible_rw_dns_server
>     ans_ns = check_one_dns_name(domain, 'NS')
>   File "/usr/sbin/samba_dnsupdate", line 291, in check_one_dns_name
>     ans = resolver.query(name, name_type)
>   File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 1053, 
> in query
>     raise_on_no_answer)
>   File "/usr/lib/python2.7/dist-packages/dns/resolver.py", line 234, 
> in __init__
>     raise NoAnswer(response=response)
> dns.resolver.NoAnswer: The DNS response does not contain an answer to 
> the question: _msdcs.kcs.local. IN NS

Is your TLD really '.local' ?

If it is, ensure that Avahi is turned off.

>
> It looks to me like there is an NS record missing. Do I create this 
> through Samba somehow or should I use Windows RSAT tools to create the 
> missing entry. I'm not 100% certain what answer it is looking for though.

Can you please download this script:

https://github.com/thctlo/samba4/blob/master/samba-collect-debug-info.sh

Run it on a DC and post the output (sanitised if required) into a reply 
to this, do not attach it, this list removes attachments.

Rowland