samba - Mar 2020 - Delete or repair corrupt records in zone data?

Hello all,

I inherited a Samba4 domain controller also acting as DNS and unfortunately this
is all new to me.

Asking the DNS for the content of a certain zone with
# samba-tool dns query ip_of_domain_controller name_of_zone @ ALL -U
administrator
brings up two entries that look different.

A good and working entry looks like this:
  Name=1, Records=1, Children=0
    PTR: pcname.our_domain.local (flags=f0, serial=25, ttl=900)

But there are two incomplete entries with just one line like this:
  Name=7, Records=0, Children=1
  Name=44, Records=0, Children=1

Deleting a record needs the parameters[1] of the record to delete. But these
records have none, so I'm lost how to get rid of the corrupt the records or
how to repair them.

[1]from the samba wiki:
# samba-tool dns delete <Your-AD-DNS-Server-IP-or-hostname>
samdom.example.com demo A 192.168.0.55

Any help appreciated,
Hans

On 20/03/2020 18:15, Hans Hermann Meyer via samba wrote:
> Hello all,
>
> I inherited a Samba4 domain controller also acting as DNS and unfortunately
this is all new to me.
>
> Asking the DNS for the content of a certain zone with
> # samba-tool dns query ip_of_domain_controller name_of_zone @ ALL -U
administrator
> brings up two entries that look different.
>
> A good and working entry looks like this:
>    Name=1, Records=1, Children=0
>      PTR: pcname.our_domain.local (flags=f0, serial=25, ttl=900)
That looks like the reverse zone, if so, why not tells us ?

If it is, then your problem is easily repaired, delete the reverse zone 
and then recreate it. You will probably have to also recreate any fixed 
ip's , but the dhcp machines should recreate their own PTR records.

Rowland

On 20/03/2020 18:59, Hans Hermann Meyer wrote:
>> On 20/03/2020 18:15, Hans Hermann Meyer via samba wrote:
>>> Hello all,
>>>
>>> I inherited a Samba4 domain controller also acting as DNS and
>>> unfortunately this is all new to me.
>>>
>>> Asking the DNS for the content of a certain zone with
>>> # samba-tool dns query ip_of_domain_controller name_of_zone @ ALL
-U
>>> administrator
>>> brings up two entries that look different.
>>>
>>> A good and working entry looks like this:
>>>     Name=1, Records=1, Children=0
>>>       PTR: pcname.our_domain.local (flags=f0, serial=25, ttl=900)
>> That looks like the reverse zone, if so, why not tells us ?
>>
> It is, I apologize for the incomplete information.
>
>> If it is, then your problem is easily repaired, delete the reverse
>> zone and then recreate it. You will probably have to also recreate
>> any fixed ip's , but the dhcp machines should recreate their own
PTR
>> records.
>>
>> Rowland
>>
> We do not use DHCP in this zone, all IP are administered manually.
> So if deleting the reverse zone an adding all records manually is what it
takes, I'll do that.
> I was hoping to save some work by only handling the corrupt records.
>
> Best regards,
> Hans
OK, you could try finding out what 'xxx.xxx.xxx.7' &
'xxx.xxx.xxx.44'
are, then delete them from the reverse zone and recreate them.

Rowland

On Fri, 2020-03-20 at 19:15 +0100, Hans Hermann Meyer via samba
wrote:
> Hello all,
> 
> I inherited a Samba4 domain controller also acting as DNS and
> unfortunately this is all new to me.
> 
> Asking the DNS for the content of a certain zone with
> # samba-tool dns query ip_of_domain_controller name_of_zone @ ALL -U
> administrator
> brings up two entries that look different.
> 
> A good and working entry looks like this:
>   Name=1, Records=1, Children=0
>     PTR: pcname.our_domain.local (flags=f0, serial=25, ttl=900)
> 
> But there are two incomplete entries with just one line like this:
>   Name=7, Records=0, Children=1
>   Name=44, Records=0, Children=1
> 
> Deleting a record needs the parameters[1] of the record to delete.
> But these records have none, so I'm lost how to get rid of the
> corrupt the records or how to repair them.
What makes you say these are corrupt, rather than just empty?  

That said, perhaps add a PTR record and delete it again?

Andrew Bartlett
-- 
Andrew Bartlett                       https://samba.org/~abartlet/
Authentication Developer, Samba Team  https://samba.org
Samba Developer, Catalyst IT          
https://catalyst.net.nz/services/samba