samba - Apr 2014 - host command output showing wrong domain (Samba4)

Hi
I never seen this before, and dont understand where too look for

Please share some light on this.

the host output is adding a extra domain.

example bellow, its showing right IPs followed by NXDOMAIN !!!


[root at 171-SYSLOG ~]# host  171-dc-a.xxxx.acc
171-dc-a.test.acc has address 10.254.228.226
171-dc-a.test.acc has address 10.254.225.45
Host 171-dc-a.test.acc not found: 3(NXDOMAIN)
Host 171-dc-a.test.acc not found: 3(NXDOMAIN)

now if i do host -v , look how its works



[root at 171-SYSLOG ~]# host -v  171-dc-a.test.acc
Trying "171-dc-a.test.acc"
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15208
;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0

;; QUESTION SECTION:
;171-dc-a.test.acc.          IN      A

;; ANSWER SECTION:
171-dc-a.test.acc.   900     IN      A       10.254.228.226
171-dc-a.test.acc.   900     IN      A       10.254.225.45

Received 70 bytes from 10.254.228.226#53 in 1 ms
Trying "171-dc-a.test.acc"
Received 38 bytes from 10.254.228.226#53 in 0 ms
Trying "171-dc-a.test.acc.test.acc"   
------------------------------------
Host 171-dc-a.test.acc not found: 3(NXDOMAIN)
Received 50 bytes from 10.254.228.226#53 in 0 ms
Trying "171-dc-a.test.acc"
Received 38 bytes from 10.254.228.226#53 in 0 ms
Trying "171-dc-a.test.acc.test.acc"
-----------------------------------------
Host 171-dc-a.test.acc not found: 3(NXDOMAIN)
Received 50 bytes from 10.254.228.226#53 in 0 ms
[root at 171-SYSLOG ~]#


As you can see its adding double domain.

Trying "171-dc-a.test.acc.test.acc"

any idea why host output doing this ??

dig command is good

[root at 171-SYSLOG ~]# dig +short 171-dc-a.test.acc @10.254.228.226
10.254.228.226
10.254.225.45
[root at 171-SYSLOG ~]#

Note : here bellow 2 ips are same server ip

10.254.228.226
10.254.225.45

-- 
Regards
Fosiul Alam

Hi
I recently attempted to promote another dc into my domain and then 
removed it which apparently didn't go well.

The message said removal was successful however: I'm left with:

DC=ForestDnsZones,DC=domain,DC=local
         NTDS DN: CN=NTDS 
Settings\0ADEL:0b41b6fb-d606-47c1-a7bd-61b8c84d4300,CN=VDC02\0ADEL:0e9bb614-0644-4b4d-9929-04f3137aa958,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=domain,DC=local
                 DSA object GUID: 0b41b6fb-d606-47c1-a7bd-61b8c84d4300
                 Last attempt @ Tue Apr  8 11:41:07 2014 EDT failed, 
result 2 (WERR_BADFILE)
                 13798 consecutive failure(s).
                 Last success @ NTTIME(0)


I've cleared out any references to the now orphaned DC via adsiedit and 
ensured there were no more DNS entries remaining and yet the error 
persists.  I can not find any more references anywhere to remove. Is 
there a hidden DB or something else I need to remove?


  Andy

On 11:13:52 wrote Fosiul Alam:
> Hi
> I never seen this before, and dont understand where too look for
> 
> Please share some light on this.
> 
> the host output is adding a extra domain.
> 
> example bellow, its showing right IPs followed by NXDOMAIN !!!
> 
> 
> [root at 171-SYSLOG ~]# host  171-dc-a.xxxx.acc
> 171-dc-a.test.acc has address 10.254.228.226
> 171-dc-a.test.acc has address 10.254.225.45
> Host 171-dc-a.test.acc not found: 3(NXDOMAIN)
> Host 171-dc-a.test.acc not found: 3(NXDOMAIN)
> 
> now if i do host -v , look how its works
> 
> 
> 
> [root at 171-SYSLOG ~]# host -v  171-dc-a.test.acc
> Trying "171-dc-a.test.acc"
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 15208
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 0
> 
> ;; QUESTION SECTION:
> ;171-dc-a.test.acc.          IN      A
> 
> ;; ANSWER SECTION:
> 171-dc-a.test.acc.   900     IN      A       10.254.228.226
> 171-dc-a.test.acc.   900     IN      A       10.254.225.45
> 
> Received 70 bytes from 10.254.228.226#53 in 1 ms
> Trying "171-dc-a.test.acc"
> Received 38 bytes from 10.254.228.226#53 in 0 ms
> Trying "171-dc-a.test.acc.test.acc"   
> ------------------------------------ Host 171-dc-a.test.acc not
> found: 3(NXDOMAIN)
> Received 50 bytes from 10.254.228.226#53 in 0 ms
> Trying "171-dc-a.test.acc"
> Received 38 bytes from 10.254.228.226#53 in 0 ms
> Trying "171-dc-a.test.acc.test.acc"
> -----------------------------------------
> Host 171-dc-a.test.acc not found: 3(NXDOMAIN)
> Received 50 bytes from 10.254.228.226#53 in 0 ms
> [root at 171-SYSLOG ~]#
> 
> 
> As you can see its adding double domain.
> 
> Trying "171-dc-a.test.acc.test.acc"
> 
> any idea why host output doing this ??
> 
> dig command is good
> 
> [root at 171-SYSLOG ~]# dig +short 171-dc-a.test.acc @10.254.228.226
> 10.254.228.226
> 10.254.225.45
> [root at 171-SYSLOG ~]#
> 
> Note : here bellow 2 ips are same server ip
> 
> 10.254.228.226
> 10.254.225.45
host reads /etc/resolv.conf, dig does not.
So check your local resolv.conf at 171-SYSLOG.

-- 

Gruss
	Harry Jede