samba - Feb 2014 - Samba 4 replication causes bind dns to freeze

Hello,

Joined a new samba 4 dc to an existing pair of samba 4 domain controllers,
but i have a problem with replication.

5-10 minutes after starting samba services on the new samba 4 server,
both   dns servers on the old Domain controllers freeze.  Nothing works.

all i can do is to kill all the services (ntp,named,samba) and start over
again.

i get this message  on new dc in this file: /usr/local/samba/var/log.samba:
....
dreplsrv_notify: Failed to send DsReplicaSync to
4d2038d4-3b1c-41a8-9865-142f7e9cadba._msdcs.example.com for
DC=example,DC=com - NT_STATUS_IO_TIMEOUT : WERR_SEM_TIMEOUT
.....
environment:
Redhat 6.5
Bind with dlz v9.9.5

Thanks for your help

Hello Nikos,

Am 24.02.2014 21:49, schrieb Nikos Mitas:
> Joined a new samba 4 dc to an existing pair of samba 4 domain controllers,
> but i have a problem with replication.
Is the replication working before it hangs ('samba tool drs showrepl')?



> 5-10 minutes after starting samba services on the new samba 4 server,
> both   dns servers on the old Domain controllers freeze.  Nothing works.
>
> all i can do is to kill all the services (ntp,named,samba) and start over
> again.
>
> i get this message  on new dc in this file: /usr/local/samba/var/log.samba:
> ....
> dreplsrv_notify: Failed to send DsReplicaSync to
> 4d2038d4-3b1c-41a8-9865-142f7e9cadba._msdcs.example.com for
> DC=example,DC=com - NT_STATUS_IO_TIMEOUT : WERR_SEM_TIMEOUT
> .....
> environment:
> Redhat 6.5
> Bind with dlz v9.9.5
Which DNS server have you configured as primary in your old and new DCs 
/etc/resolv.conf?

Can you query the DNS on both hosts from each other?

Any firewall stuff prevent from accessing port 53?

Is the DLZ module for 9.9 enabled in /usr/local/samba/private/named.conf?

What Samba version are you running and is it self compiled or from where 
you got it?


Regards,
Marc