me at tdiehl.org
2021-Jan-29 14:56 UTC
[Samba] Dynamic Updates to Bind DLZ through DHCP have repeated errors in syslog
On Thu, 28 Jan 2021, Rowland penny via samba wrote:> On 28/01/2021 09:59, Rowland penny via samba wrote: >> On 27/01/2021 20:43, ralph strebbing via samba wrote: >>> So I'm upgrading our current NT4 domain to Samba AD with Bind9 DNS. Our >>> current DHCP/DNS setup is on one server, separate from the Domain server. >>> With Samba AD, we'll be using Samba's tools to manage the DNS, thus >>> allowing use of things like the Windows Server Admin Tool suite (DNS, AD >>> Users & Groups, etc.). So Bind9, isc-dhcp-server, and Samba is all going >>> to >>> be on the same machine for the new setup. >>> >> OK, you have identified a problem with the script ? >> >> However, this error has nothing to do with the script: >> >> ERROR(runtime): uncaught exception - (9711, >> 'WERR_DNS_ERROR_RECORD_ALREADY_EXISTS') >> >> This is being caused by a bug in the 'samba-tool dns' code and was fixed >> in early 2020, so you need to upgrade Samba to 4.13.xAm I correct that this fix is not in the 4.12.x series?>> >> I will have a look at the dhcp update script and get back to you. >> >> You also shouldn't need the 'rndc.key' > > OK Ralph, can you try the attached new version of the script ?Has the wiki been updated with this latest version of the script? I would like to see the changes given that I also have problems with the current script. Regards, -- Tom me at tdiehl.org
Rowland penny
2021-Jan-29 15:09 UTC
[Samba] Dynamic Updates to Bind DLZ through DHCP have repeated errors in syslog
On 29/01/2021 14:56, me at tdiehl.org wrote:> > Am I correct that this fix is not in the 4.12.x series?No, it went in to 4.13.0 and as far as I am aware it wasn't backported.> > Has the wiki been updated with this latest version of the script?No, I wanted the OP to try it out before updating the wiki, that was before I found out the OP was misusing the script. The changes are pretty simple, 'DHCID' is now only used if the script stores 'macAddress' in AD, so the check for it has been moved to that section and is now not fatal to the main part of the script.> > I would like to see the changes given that I also have problems with > the current > script.I will update the wikipage now. Rowland