samba - Oct 2024 - Error while creating new reverse DNS zones.

Hello,

I'm facing a big problem with my Samba AD configuration :

When trying to create a new reverse DNS zone on a DC, it fails with error :


root at se4ad2:~# samba-tool dns zonecreate se4ad2 54.19.172.in-addr.arpa 
-Uadmin
Password for [XXXXX\admin]:
ERROR(runtime): uncaught exception - (1383, 'WERR_INTERNAL_DB_ERROR')
 ? File "/usr/lib/python3/dist-packages/samba/netcmd/__init__.py",
line
285, in _run
 ??? return self.run(*args, **kwargs)
 ?????????? ^^^^^^^^^^^^^^^^^^^^^^^^^
 ? File "/usr/lib/python3/dist-packages/samba/netcmd/dns.py", line
973,
in run
 ??? dns_conn.DnssrvOperation2(client_version, 0, server, None,
 ? File "/usr/lib/python3/dist-packages/samba/netcmd/dns.py", line
119, in f
 ??? return attr(*args)
 ?????????? ^^^^^^^^^^^

Same kind of error using ADSI? DNS console, and other Domain Admin accounts.

I run dbcheck --cross-ncs --fix,? and tried the same operation on all 
the other DCs.

I even tried to join a new DC, hoping that replication will repair the 
database? but i had exactly the same error with this new one.


Samba Version is 4.20.0, and it is running with internal DNS.

Apart from that, AD is working correctly, it can be read and write 
without problems. I can add or remove records to existing zones too.


So my questions are :

- is the a way to repair/unlock? the root of reverse DNS zones, maybe by 
editing ldb ? maybe some permissions/acls to check ?

- if not, is the a way to destroy completely root of reverse zones and 
recreate it (there are not so much records, i can easily recreate it).

- in last resort, does an offline backup and restore (involving 
rejoining all DCs) can save my life ?


Thanks by advance,

Denis

On Thu, 3 Oct 2024 19:51:30 +0200
denis bonnenfant--- via samba <samba at lists.samba.org> wrote:
> Hello,
> 
> I'm facing a big problem with my Samba AD configuration :
> 
> When trying to create a new reverse DNS zone on a DC, it fails with
> error :
> 
> 
> root at se4ad2:~# samba-tool dns zonecreate se4ad2
> 54.19.172.in-addr.arpa -Uadmin
Does it work if you use the Administrator account ?

Rowland