[Samba] reverse DNS not working for some reason ...

Patrick Goetz pgoetz at math.utexas.edu
Wed Nov 3 08:33:30 UTC 2021

Hi Daniel -

Thanks for the suggestion!

I'm using Samba 4.15.1 with the built in DNS. I have my own bind9 server 
(not part of the domain) as the next level up reference DNS.

The A records are set up automatically, but not the PTR records.

I ran `ipconfig /registerdns` as administrator on the W10 domain member, 
but nothing changed:

root at samba-dc:/var/lib/samba/bind-dns# host ibs100
ibs100.ea.linuxcs.com has address

root at samba-dc:/var/lib/samba# host
Host not found: 3(NXDOMAIN)

Oddly, Samba sets up a bind-dns folder (where one would presumably find 
zone files), but it's empty:

root at samba-dc:/var/lib/samba/bind-dns# pwd
root at samba-dc:/var/lib/samba/bind-dns# ls -a
.  ..

I'm OK with setting this up by hand, but not sure how to go about doing 
this. On the other hand, everything seems to be working without the PTR 
records, maybe it's fine.

I haven't tried this, but if absolutely necessary I could probably set 
up a zone file on my bind9 server for the Samba domain PTR records, and 
the Samba DNS server could just refer the request to bind9. This works 
perfectly for A and CNAME records, never tried it with PTR (and probably 
won't unless it becomes an issue).

Christopher Cox mentioned that there are many network applications which 
do reverse DNS lookups. What's an example of such a program that does 
something other than say network discovery (e.g. host, nslookup, ss, 
netstat, nmap, etc.)?

On 11/3/21 01:43, Mueller wrote:
> If bind , bind_dlz then in fact you should create you reverse dns before you
> join any windows pc.
> Normally if all your settings are right the windows clients do there job and
> register as they should.
> In most cases if they will not it is usefull to restart bind and then it
> will do.
> On your windows 10  clients if they will not do  -->  open cmd as admin
> than: ipconfig /registerdns , restart.
> With your linux clients (samba 4 member server? They should be registered
> after joining) not in your domain
> you have to do everything by hand.
> Greetings
> Daniel
> -----Ursprüngliche Nachricht-----
> Von: Patrick Goetz via samba [mailto:samba at lists.samba.org]
> Gesendet: Dienstag, 2. November 2021 22:59
> An: samba at lists.samba.org
> Betreff: Re: [Samba] reverse DNS not working for some reason ...
> On 11/2/21 16:29, Rowland Penny via samba wrote:
>> On Tue, 2021-11-02 at 16:14 -0500, Patrick Goetz via samba wrote:
>>> On 11/2/21 16:09, Rowland Penny via samba wrote:
>>>> On Tue, 2021-11-02 at 15:53 -0500, Patrick Goetz via samba wrote:
>>>>> On 11/2/21 15:32, Rowland Penny via samba wrote:
>>>>>> On Tue, 2021-11-02 at 15:25 -0500, Patrick Goetz via samba
>>>>>> wrote:
>>>>>>> As per the Wiki instructions for setting up a Samba DC, I ran
>>>>>>>        # samba-tool dns zonecreate samba-dc 1.168.192.in-
>>>>>>> addr.arpa -U administrator
>>>>>>> (while samba-ad-dc was running)
>>>>>> That is how you are supposed to do it.
>>>>>>> on my domain controller.  Everything seems to work; I can bind
>>>>>>> W10
>>>>>>> machines to this domain, use RSAT, etc., but reverse DNS searches
>>>>>>> aren't
>>>>>>> working:
>>>>>> I refer you to my last reply, well sort of :-D
>>>>>> You have to tell your Windows clients to update their dns records,
>>>>>> they do not do it as standard.
>>>>> I set static IP/DNS entries on my Windows clients -- that's not
>>>>> sufficient?
>>>> If you just set the forward (A) records, then no, you also have to
>>>> set the reverse (PTR) records in AD and tell your Windows clients to
>>>> use the reverse records.
>>> The forward records are created automatically (I thought); I'm not
>>> doing anything I know of to facilitate this. You're saying the PTR
>>> records have to be entered by hand?  How does one go about doing
>>> this?  And if it's not necessary for anything, no reason to bother
>>> with it?
>> No, Windows will do it, you just have to tick a box on the Windows
>> network device gui (if I remember correctly), something along the
>> lines of 'update this clients IP in dns'
> What do I do for my linux domain members?
> Also, I just checked on my domain bound W10 machine. Under
>      Adapter Properties -> Internet Protocol version 4 (TCP/IPv4) -> Advanced
> -> DNS Tab
>      "Register this connector's addresses in DNS" is checked, but no go on
> the reverse search:
> root at samba-dc:~# host
> Host not found: 3(NXDOMAIN)
> If nothing uses the reverse search, I'm not going to worry about it.
>> Rowland
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>>> This message is from an external sender. Learn more about why this <<
>>> matters at https://links.utexas.edu/rtyclf.                        <<

More information about the samba mailing list