samba - Jan 2018 - Samba 4.7.4 + bind9 DLZ /backend/ dropping delegated domain

Hai, 

Check the content of : 
/etc/logrotate.d/named 

If you see
postrotate
   /etc/init.d/smbd reload > /dev/null
endscript

Change that to 
postrotate
  if [ -d /run/systemd/system ]; then; systemctl -q is-active named &&
systemctl reload named; else; /etc/init.d/named reload ; fi';
endscript


Its something like that, so who pointing.. That does not matter, because this is
OS related.
Lots or scripts use /etc/init.d or service .....  
These need to be changed to systemd, if your using systemd, and i guess you do. 

Now, monitor your logs and observice which script is wrongly reloading. 
And report a bug to the packagers. 

And my samba 4.7.4 on debian has this in logrotate.d

/var/log/samba/log.smbd {
        weekly
        missingok
        rotate 7
        postrotate
                [ ! -x /usr/bin/smbcontrol ] || /usr/bin/smbcontrol smbd reload-
config
        endscript
        compress
        delaycompress
        notifempty
}

/var/log/samba/log.nmbd {
        weekly
        missingok
        rotate 7
        postrotate
                [ ! -x /usr/bin/smbcontrol ] || /usr/bin/smbcontrol nmbd reload-
config
        endscript
        compress
        delaycompress
        notifempty
}

/var/log/samba/log.samba {
        weekly
        missingok
        rotate 7
        postrotate
                if [ -d /run/systemd/system ] && command systemctl
>/dev/null 2>                                                             
&1 && systemctl is-active --quiet samba-ad-dc; then
                        systemctl kill --kill-who all --signal=SIGHUP samba-ad-d
c
                elif [ -f /var/run/samba/samba.pid ]; then
                        # This only sends to main pid, See #803924
                        kill -HUP `cat /var/run/samba/samba.pid`
                fi
        endscript
        compress
        delaycompress
        notifempty
}



Greetz, 

Louis


 
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
> Kristján Valur Jónsson via samba
> Verzonden: dinsdag 30 januari 2018 10:29
> Aan: Zdravko Zdravkov
> CC: Samba List
> Onderwerp: Re: [Samba] Samba 4.7.4 + bind9 DLZ /backend/ 
> dropping delegated domain
> 
> Fyi, I've been trying to get the devs to take notice of this problem.
> People keep pointing fingers.  Samba says its Named/bind, 
> bind says its the
> OS vendors....
> See:
> https://bugzilla.samba.org/show_bug.cgi?id=13214
> https://bugzilla.samba.org/show_bug.cgi?id=13230
> 
> Maybe I'll be forced to hack on the code myself to figure out 
> what's really
> happening when a "reload" happens.
> 
> 
> On 29 January 2018 at 11:46, Zdravko Zdravkov 
> <nirayah at gmail.com> wrote:
> 
> > Bingo!
> > That's it. I think I owe you a beer, mate :)
> >
> > On Mon, Jan 29, 2018 at 11:34 AM, Kristján Valur Jónsson via samba
<
> > samba at lists.samba.org> wrote:
> >
> >> Just a wild guess, but I and others have been having problems with
> >> samba_dlz, because of named "reload."
> >> Try to see if
> >> systemctl reload named
> >> and
> >> systemctl restart named
> >> break and fix the server respectively.  (if your're not 
> using systemd, try
> >> "serivice named reload", "service named restart
instead")
> >> If you have a /etc/logrotate.d/named file containing 
> "systemctl reload
> >> named.service"
> >> this could be the reason.  Change the command to
"restart" in the
> >> logrotate
> >> file.
> >>
> >> On 29 January 2018 at 09:52, Zdravko Zdravkov via samba <
> >> samba at lists.samba.org> wrote:
> >>
> >> > Alright. This morning I came to the office and found out that
the
> >> storage
> >> > isnt getting resolved aswell. In Friday it was good. So 
> it takes like 2
> >> > days of inactivity and the record goes off.
> >> >
> >> > On Mon, Jan 22, 2018 at 2:05 PM, Zdravko Zdravkov 
> <nirayah at gmail.com>
> >> > wrote:
> >> >
> >> > > Sure.
> >> > > It's actually a video, the part starts around 2:50 -
> >> > > https://www.youtube.com/watch?v=LSCJSVbFEfc
> >> > >
> >> > >
> >> > > On Mon, Jan 22, 2018 at 1:01 PM, Rowland Penny via samba
<
> >> > > samba at lists.samba.org> wrote:
> >> > >
> >> > >> On Mon, 22 Jan 2018 12:24:00 +0000
> >> > >> Zdravko Zdravkov via samba <samba at
lists.samba.org> wrote:
> >> > >>
> >> > >> > Here's the problem. I've got working
samba AD server. I've
> >> configured
> >> > >> > it to work with bind9 DLZ backend and I'm
managing
> the DNS entries
> >> > >> > from the windows DNS manager.
> >> > >> > I've made delegated DNS record for our EMC
cluster storage,
> >> according
> >> > >> > to a guide.
> >> > >>
> >> > >> Can you post a link to the guide.
> >> > >>
> >> > >> Rowland
> >> > >>
> >> > >>
> >> > >> --
> >> > >> To unsubscribe from this list go to the following
URL
> and read the
> >> > >> instructions: 
https://lists.samba.org/mailman/options/samba
> >> > >>
> >> > >
> >> > >
> >> > --
> >> > To unsubscribe from this list go to the following URL 
> and read the
> >> > instructions:  https://lists.samba.org/mailman/options/samba
> >> >
> >>
> >>
> >>
> >> --
> >> Kv,
> >> Kristján Valur Jónsson, RVX
> >> --
> >> To unsubscribe from this list go to the following URL and read the
> >> instructions:  https://lists.samba.org/mailman/options/samba
> >>
> >
> >
> 
> 
> -- 
> Kv,
> Kristján Valur Jónsson, RVX
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
> 
>

On Tue, 30 Jan 2018 11:18:24 +0100
"L.P.H. van Belle via samba" <samba at lists.samba.org> wrote:
> Hai, 
> 
> Check the content of : 
> /etc/logrotate.d/named 
> 
> If you see
> postrotate
>    /etc/init.d/smbd reload > /dev/null
> endscript
> 
> Change that to 
> postrotate
>   if [ -d /run/systemd/system ]; then; systemctl -q is-active named
> && systemctl reload named; else; /etc/init.d/named reload ;
fi';
> endscript
> 
It is 'reload' that is the problem, you need to use 'restart'
instead.

Rowland

Right, that is the _workaround_.  It'd be great to see that documented in
the Wiki.
However, samba_dlz is supposed to support reload, and there has been work
on that file to fix slow reload previously.
I"m currently doing experiments to figure out what is going wrong.

One thing is clear, the messages from samba_dlz is confusing, since it is
actually not "shutting down".
Rather, samba_dlz, maintains a reference counted singleton of its state.
What happens during reload is:
1) dlz_create is called.  The refcount is upped, same internal instance
returned to named and* nothing is logged.*
2) dlz_configure() is called.
3) dlz_destroy() is called.  The refcount is decreased (from 2 to 1),
nothing is destroyed, *but it incorrectly logs that it is shutting down!*

Clearly, bind expects to start a new instance of its dlz, initialize it,
and then destroy the old instance.

I am hacking on this to figure out exactly where things fail.

On 30 January 2018 at 10:26, Rowland Penny via samba <samba at
lists.samba.org>
wrote:
> On Tue, 30 Jan 2018 11:18:24 +0100
> "L.P.H. van Belle via samba" <samba at lists.samba.org>
wrote:
>
> > Hai,
> >
> > Check the content of :
> > /etc/logrotate.d/named
> >
> > If you see
> > postrotate
> >    /etc/init.d/smbd reload > /dev/null
> > endscript
> >
> > Change that to
> > postrotate
> >   if [ -d /run/systemd/system ]; then; systemctl -q is-active named
> > && systemctl reload named; else; /etc/init.d/named reload ;
fi';
> > endscript
> >
>
> It is 'reload' that is the problem, you need to use
'restart' instead.
>
> Rowland
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 
Kv,
Kristján Valur Jónsson, RVX