samba - Jun 2018 - Remove Redundant DCs internal DNS

On Thu, 31 May 2018 09:42:50 +0000
Paul Littlefield via samba <samba at lists.samba.org> wrote:
> On 29/05/18 12:55, Paul Littlefield via samba wrote:
> > Hello List,
> > 
> > I have successfully migrated my DCs to 4.7.6-Ubuntu
> > 
> > However, I still have some traces of the old DCs in the DNS...
> > 
> > $ samba-tool dns query dc3 mydomain.com @ ALL
> >    Name=, Records=8, Children=0
> >      SOA: serial=570, refresh=900, retry=600, expire=86400,
> > minttl=0, ns=dc3.mydomain.com. NS: samba.mydomain.com.
> > (flags=600000f0, serial=110, ttl=900) NS: dc3.mydomain.com.
> > (flags=600000f0, serial=110, ttl=900) NS: dc4.mydomain.com.
> > (flags=600000f0, serial=110, ttl=900) A: 192.168.0.208
> > (flags=600000f0, serial=110, ttl=900) A: 192.168.0.209
> > (flags=600000f0, serial=110, ttl=900) A: 192.168.0.218
> > (flags=600000f0, serial=110, ttl=900) A: 192.168.0.219
> > (flags=600000f0, serial=110, ttl=900) Name=_msdcs, Records=0,
> > Children=0 Name=_sites, Records=0, Children=1
> >    Name=_tcp, Records=0, Children=4
> >    Name=_udp, Records=0, Children=2
> > 
> > 
> > ...so 'samba', '192.168.0.208' and
'192.168.0.209' are now gone.
> > 
> > How do I remove all entries in the DNS for these?
> > 
> > I can use 'samba-tool' or the RSAT gui.
> > 
> > Thanks in advance.
> > 
> > Regards,
> > 
> 
> 
> Hello List,
> 
> Sorry to repost this, but could do with an answer.
> 
> Many thanks,
> 
> :-)
> 
Well, you could have run this on a DC:

samba-tool dns --help

and from the output, you could have thought about running this:

samba-tool dns delete --help

Which would have got you this:

Usage: samba-tool dns delete <server> <zone> <name>
<A|AAAA|PTR|CNAME|NS|MX|SRV|TXT> <data>

So using your data:

samba-tool dns delete 127.0.0.1 mydomain.com @ A 192.168.0.208

Rowland

On 31/05/18 11:14, Rowland Penny via samba wrote:
> samba-tool dns delete 127.0.0.1 mydomain.com @ A 192.168.0.208
Thanks Rowland,

I thought it would be that, but as this is a production server and very
important domain wanted to double check with the experts before I go removing
something I shouldn't.

;-)

-- 

Paul Littlefield

Telephone: 07801 125705
Email: info at paully.co.uk
Wiki: http://wiki.indie-it.com/wiki/Special:AllPages
LinkedIn: https://uk.linkedin.com/in/paullittlefield

Paul Littlefield is environmentally responsible. Please consider the environment
before printing this email. This email and any attachment is intended for the
named addressee only, or person authorised to receive it on their behalf. The
content should be treated as confidential and the recipient may not disclose
this message or any attachment to anyone else without authorisation. If this
transmission is received in error please notify the sender immediately and
delete this message from your email system. All electronic transmissions to and
from me are recorded and may be monitored. Finally, the recipient should check
this email and any attachments for viruses. Paul Littlefield accepts no
liability for any damage caused by any virus transmitted by this email.

Ubuntu 18.04 LTS (x86_64)

On Thu, 2018-05-31 at 11:14 +0100, Rowland Penny via samba
wrote:
> 
> Well, you could have run this on a DC:
> 
> samba-tool dns --help
> 
> and from the output, you could have thought about running this:
> 
> samba-tool dns delete --help
> 
> Which would have got you this:
> 
> Usage: samba-tool dns delete <server> <zone> <name>
<A|AAAA|PTR|CNAME|NS|MX|SRV|TXT> <data>
> 
> So using your data:
> 
> samba-tool dns delete 127.0.0.1 mydomain.com @ A 192.168.0.208
> 
> Rowland
And in master for Samba 4.9 there is a new command 'samba-tool dns
cleanup' that will help with this.  

So there is also an easier option in the long term.  Plus we will make
the online demote clean up the extra records.

Andrew Bartlett

-- 
Andrew Bartlett                       http://samba.org/~abartlet/
Authentication Developer, Samba Team  http://samba.org
Samba Developer, Catalyst IT          http://catalyst.net.nz/services/samba

On 31/05/18 18:44, Andrew Bartlett via samba wrote:
> And in master for Samba 4.9 there is a new command 'samba-tool dns
> cleanup' that will help with this.
> 
> So there is also an easier option in the long term.  Plus we will make
> the online demote clean up the extra records.

Wow, thanks Andrew.

:-)

-- 

Paul Littlefield

On 31/05/18 18:44, Andrew Bartlett via samba wrote:
> So there is also an easier option in the long term.  Plus we will make
> the online demote clean up the extra records.
That would be great, because I've just cleaned up about 40 entries using the
Windows DNS Manager gui tool!

I also learnt a lot about adding extra NS and PTR records using this gui tool
(mydomain.com and _msdcs.mydomain.com), which would be nice to be able to do
using 'samba-tool'.

I have rebooted both DCs and tested logins and DNS. Everything is now definitely
quicker without those old DCs in the DNS and AD.

I can now perform the same cleanup on the live production network this weekend.

Thanks,

:)

-- 

Paul Littlefield