samba - Oct 2017 - Samba 4.6.8 (Non packaged version) dns update issue

Hi Guys,

I am running into an issue here.

We have 2 domain controllers using BIND_DLZ as dns backend

OS: CentOS 6.9
Samba version: Samba 4.6.8 self compiled on another host and
distributed internally as RPM packages
Bind version: BIND 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4

Almost daily I need to restart the named process (service named
restart) to make dynamic dns updates from the member servers (mix of
linux and windows) and desktops (windows) working.

Note that I have changed some of the hostnames for security sake
(paranoia strikes again)

Before the restart I get:
[root at archive1 ~]# net ads dns register -Uianc
Enter ianc's password:
DNS Update for archive1.[DOM_FQDN] failed: ERROR_DNS_UPDATE_FAILED
DNS update failed!
[root at archive1 ~]# net ads info
LDAP server: 10.10.10.4
LDAP server name: dc2.[DOM_FQDN]
Realm: [DOM_FQDN]
Bind Path: []
LDAP port: 389
Server time: Tue, 24 Oct 2017 08:14:49 UTC
KDC server: 10.10.10.4
Server time offset: 0
Last machine account password change: Tue, 24 Oct 2017 07:24:11 UTC
[root at archive1 ~]# net -V
Version 4.6.2
[root at archive1 ~]# cat /etc/redhat-release
CentOS Linux release 7.4.1708 (Core)

I then restart bind on the relevant DC
10:14:59 [ianc at dc2 ~]$ sudo service named restart
[sudo] password for ianc:
Stopping named: .                                          [  OK  ]
Starting named:                                            [  OK  ]

After the restart
[root at archive1 ~]# net ads dns register -Uianc
Enter ianc's password:
Successfully registered hostname with DNS

Has anybody else experienced an issue like this?

I haven't found anything in the logs pointing me where to look.

I am trying the samba list first. I will cross post to bind list if we
are out of ideas here.

Kind regards

On Tue, 24 Oct 2017 12:05:14 +0200
Ian Coetzee via samba <samba at lists.samba.org> wrote:
> Hi Guys,
> 
> I am running into an issue here.
> 
> We have 2 domain controllers using BIND_DLZ as dns backend
> 
> OS: CentOS 6.9
> Samba version: Samba 4.6.8 self compiled on another host and
> distributed internally as RPM packages
> Bind version: BIND 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
> 
> Almost daily I need to restart the named process (service named
> restart) to make dynamic dns updates from the member servers (mix of
> linux and windows) and desktops (windows) working.
> 
> Note that I have changed some of the hostnames for security sake
> (paranoia strikes again)
> 
> Before the restart I get:
> [root at archive1 ~]# net ads dns register -Uianc
> Enter ianc's password:
> DNS Update for archive1.[DOM_FQDN] failed: ERROR_DNS_UPDATE_FAILED
> DNS update failed!
> [root at archive1 ~]# net ads info
> LDAP server: 10.10.10.4
> LDAP server name: dc2.[DOM_FQDN]
> Realm: [DOM_FQDN]
> Bind Path: []
> LDAP port: 389
> Server time: Tue, 24 Oct 2017 08:14:49 UTC
> KDC server: 10.10.10.4
> Server time offset: 0
> Last machine account password change: Tue, 24 Oct 2017 07:24:11 UTC
> [root at archive1 ~]# net -V
> Version 4.6.2
> [root at archive1 ~]# cat /etc/redhat-release
> CentOS Linux release 7.4.1708 (Core)
> 
> I then restart bind on the relevant DC
> 10:14:59 [ianc at dc2 ~]$ sudo service named restart
> [sudo] password for ianc:
> Stopping named: .                                          [  OK  ]
> Starting named:                                            [  OK  ]
> 
> After the restart
> [root at archive1 ~]# net ads dns register -Uianc
> Enter ianc's password:
> Successfully registered hostname with DNS
> 
> Has anybody else experienced an issue like this?
> 
> I haven't found anything in the logs pointing me where to look.
> 
> I am trying the samba list first. I will cross post to bind list if we
> are out of ideas here.
> 
> Kind regards
> 
Will you please post your Bind conf files.
Also the smb.conf from the DCs

Rowland

Hi Rowland,

Sure, I have pastebinned the configs (and done some public ip masking)
DC1 - bind config
https://www.jacklin.co.za/privatebin/?be125b7e578c53d4#q9nGwU3f9Tz7wtHLTf3UIcFhz/GIJjryq6/cN2rip1kDC2
- bind config
https://www.jacklin.co.za/privatebin/?c1c921a4289a4e91#URHcPgK0B1fgeoTCeWXL6QDKdUxR6YpHZ1dcwXR44Iw
DC1 - Samba Config
https://www.jacklin.co.za/privatebin/?ed9cb025a144be44#NA4HNPN/ms8wZfxWI9FaPN4TZpGA7DhB/d/VCXakR4EDC2
- Samba Config
https://www.jacklin.co.za/privatebin/?ab6a4260f9c0dc5e#ogp+o+xRmd4tMJYNaHZFEZPcvqqzyDPIJARe2W6FnDI
Kind regards

On 24 October 2017 at 12:45, Rowland Penny via samba
<samba at lists.samba.org> wrote:
> On Tue, 24 Oct 2017 12:05:14 +0200
> Ian Coetzee via samba <samba at lists.samba.org> wrote:
>
>> Hi Guys,
>>
>> I am running into an issue here.
>>
>> We have 2 domain controllers using BIND_DLZ as dns backend
>>
>> OS: CentOS 6.9
>> Samba version: Samba 4.6.8 self compiled on another host and
>> distributed internally as RPM packages
>> Bind version: BIND 9.8.2rc1-RedHat-9.8.2-0.62.rc1.el6_9.4
>>
>> Almost daily I need to restart the named process (service named
>> restart) to make dynamic dns updates from the member servers (mix of
>> linux and windows) and desktops (windows) working.
>>
>> Note that I have changed some of the hostnames for security sake
>> (paranoia strikes again)
>>
>> Before the restart I get:
>> [root at archive1 ~]# net ads dns register -Uianc
>> Enter ianc's password:
>> DNS Update for archive1.[DOM_FQDN] failed: ERROR_DNS_UPDATE_FAILED
>> DNS update failed!
>> [root at archive1 ~]# net ads info
>> LDAP server: 10.10.10.4
>> LDAP server name: dc2.[DOM_FQDN]
>> Realm: [DOM_FQDN]
>> Bind Path: []
>> LDAP port: 389
>> Server time: Tue, 24 Oct 2017 08:14:49 UTC
>> KDC server: 10.10.10.4
>> Server time offset: 0
>> Last machine account password change: Tue, 24 Oct 2017 07:24:11 UTC
>> [root at archive1 ~]# net -V
>> Version 4.6.2
>> [root at archive1 ~]# cat /etc/redhat-release
>> CentOS Linux release 7.4.1708 (Core)
>>
>> I then restart bind on the relevant DC
>> 10:14:59 [ianc at dc2 ~]$ sudo service named restart
>> [sudo] password for ianc:
>> Stopping named: .                                          [  OK  ]
>> Starting named:                                            [  OK  ]
>>
>> After the restart
>> [root at archive1 ~]# net ads dns register -Uianc
>> Enter ianc's password:
>> Successfully registered hostname with DNS
>>
>> Has anybody else experienced an issue like this?
>>
>> I haven't found anything in the logs pointing me where to look.
>>
>> I am trying the samba list first. I will cross post to bind list if we
>> are out of ideas here.
>>
>> Kind regards
>>
>
> Will you please post your Bind conf files.
> Also the smb.conf from the DCs
>
> Rowland
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba