[Samba] Error in log.samba on AD DC when using DNS administration from Windows RSAT

[Peter Milesson]

On 16.06.2024 11:08, Rowland Penny via samba wrote:
> On Sun, 16 Jun 2024 10:17:44 +0200
> Peter Milesson via samba <samba at lists.samba.org> wrote:
>
>> Hi folks,
>>
>> There is always the following error message when using the DNS
>> administration from Windows RSAT:
>>
>> [2024/06/15 06:43:58.941829,  0]
>> source4/rpc_server/dnsserver/dcerpc_dnsserver.c:1076(dnsserver_query_zone)
>>     dnsserver: Invalid zone operation IsSigned
>>
>> What does it mean and are there any negative side effects? Everything
>> seems to work, though.
> It means that something is trying to use dnssec when querying the
> dnsserver, Samba at this time knows nothing about dnssec and 'IsSigned'
> isn't in the list it checks against, hence the message you are getting.
> It looks like Samba needs an update in this area, if only to stop that
> message.
>
>> This was also reported by Mark Petersen on 17 May, but it seems to
>> have been forgotten about.
>>
> I wouldn't say 'forgotten', more ignored because a bug hasn't been
> opened and it is a very minor problem.
>
> Rowland
>
Hi Rowland,

Thanks for the explanation. I will barely survive that nagging ;-)

Peter