samba - Apr 2024 - Strange problem with samba-tool dns query ...

Hello

I have a strange problem on a brand new installation of samba AD
(samba-4.19.5 on Fedora 39). 

Domain controller is dc01.some.domain.org
Secondary (replicated) controller is dc02.some.domain.org

After clean installation all basic tests seams to be ok.

All these command return correct responses:

smbclient -L localhost -N
smbclient //localhost/netlogon -U Administrator -c 'ls'

host -t SRV _ldap._tcp.${HOSTNAME#*.}.
host -t SRV _kerberos._udp.${HOSTNAME#*.}.
host -t A ${HOSTNAME}.

kinit Administrator
klist

sudo samba-tool drs showrepl

sudo samba-tool user list --full-dn
sudo samba-tool group list --full-dn
sudo samba-tool computer list --full-dn


Problem is on dc01.some.domain.org
this command (and all other variants of "samba-tool dns"):

sudo samba-tool dns zonelist $(hostname) -U Administrator

gets stuck and returns nothing when parameter <server> is
$(hostname)or$(hostname --short)

when I change $(hostname) to localhost or ip address command is
responding correctly.


This problem is only on primary controller dc01. 

The same commands works on?dc02.some.domain.org?without problems.


Even when I run samba-tool dns on?dc02.some.domain.org?with <server>
dc01
sudo samba-tool dns zonelist dc01 -U Administrator

it returns correct results.

How can I make samba-tool dns on primary work? 
What this behavior could be?

I will appreciate any advice.

Pavel

On Fri, 05 Apr 2024 08:06:10 +0200
PaLi via samba <samba at lists.samba.org> wrote:
> Hello
> 
> I have a strange problem on a brand new installation of samba AD
> (samba-4.19.5 on Fedora 39). 
> 
> Domain controller is dc01.some.domain.org
> Secondary (replicated) controller is dc02.some.domain.org
> 
> After clean installation all basic tests seams to be ok.
> 
> All these command return correct responses:
> 
> smbclient -L localhost -N
> smbclient //localhost/netlogon -U Administrator -c 'ls'
> 
> host -t SRV _ldap._tcp.${HOSTNAME#*.}.
> host -t SRV _kerberos._udp.${HOSTNAME#*.}.
> host -t A ${HOSTNAME}.
> 
> kinit Administrator
> klist
> 
> sudo samba-tool drs showrepl
> 
> sudo samba-tool user list --full-dn
> sudo samba-tool group list --full-dn
> sudo samba-tool computer list --full-dn
> 
> 
> Problem is on dc01.some.domain.org
> this command (and all other variants of "samba-tool dns"):
> 
> sudo samba-tool dns zonelist $(hostname) -U Administrator
> 
> gets stuck and returns nothing when parameter <server> is
> $(hostname)or$(hostname --short)
> 
> when I change $(hostname) to localhost or ip address command is
> responding correctly.
> 
> 
> This problem is only on primary controller dc01. 
What primary controller ?
All DCs are equal, it is just some may have FSMO roles, this does not
make any a 'primary' . A 'Primary Domain Controller' is
something else
entirely.
> 
> The same commands works on?dc02.some.domain.org?without problems.
> 
> 
> Even when I run samba-tool dns on?dc02.some.domain.org?with <server>
> dc01
> sudo samba-tool dns zonelist dc01 -U Administrator
> 
> it returns correct results.
> 
> How can I make samba-tool dns on dco1 work? 
> What this behavior could be?
> 
It sounds like DNS.
Can you post the contents of:
/etc/resolv.conf
/etc/hosts

Rowland