samba - Apr 2020 - Questions about reverse zone

Hi Guys,
I've two DC (Zentyal Samba 4.7.6) and put new DC (Centos 7, Samba
4.7.6) with additional domain controller and works fine. My question is
about reverse zone. The original DC (zentyal1 and zentyal2) have a reverse
registres
```
root at zentyal1:/etc/bind# dig +noall +answer -x 10.13.250.110
110.250.13.10.in-addr.arpa. 259200 IN PTR zentyal1.example.com.

root at zentyal1:/etc/bind# dig +noall +answer -x 10.13.250.111
111.250.13.10.in-addr.arpa. 259200 IN PTR zentyal2.example.com.
root at zentyal2:/etc/bind#
```

But the new server not have reverse registre

```
root at zentyal1:/etc/bind# dig +noall +answer -x 10.13.250.128
```

I try checks revrse zone but this not exist

root at zentyal1:/etc/bind# samba-tool dns query zentyal1
250.13.10.in-addr.arpa @ ALL -U administrator
Password for [EXAMPLE\administrator]:
ERROR(runtime): uncaught exception - (9714,
'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST')

I have two questions:
1. ?is necesary create this zone and put the new DC inside?
2. From RSAT and DNS administration the domain not have reverse zone . So,
?where does this info come from?

Thanks.

On 27/04/2020 15:58, Miguel Angel Coa M. via samba
wrote:
> Hi Guys,
> I've two DC (Zentyal Samba 4.7.6) and put new DC (Centos 7, Samba
> 4.7.6) with additional domain controller and works fine.
I take it that you mean you had two DC's and have joined another one, 
but using Centos 7, are you using the Centos packages, or have you 
compiled Samba yourself, or are you using third party Packages
?
>   My question is
> about reverse zone. The original DC (zentyal1 and zentyal2) have a reverse
> registres
> ```
> root at zentyal1:/etc/bind# dig +noall +answer -x 10.13.250.110
> 110.250.13.10.in-addr.arpa. 259200 IN PTR zentyal1.example.com.
>
> root at zentyal1:/etc/bind# dig +noall +answer -x 10.13.250.111
> 111.250.13.10.in-addr.arpa. 259200 IN PTR zentyal2.example.com.
> root at zentyal2:/etc/bind#
> ```
>
> But the new server not have reverse registre
>
> ```
> root at zentyal1:/etc/bind# dig +noall +answer -x 10.13.250.128
You will need to create the reverse record for your new
DC.
> I try checks revrse zone but this not exist
>
> root at zentyal1:/etc/bind# samba-tool dns query zentyal1
> 250.13.10.in-addr.arpa @ ALL -U administrator
> Password for [EXAMPLE\administrator]:
> ERROR(runtime): uncaught exception - (9714,
> 'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST')
That isn't querying for the reverse zone, that is querying for a reverse 
zone record ;-)
>
> I have two questions:
> 1. ?is necesary create this zone and put the new DC inside?
If the reverse zone doesn't exist on the new DC, but does on the 
original two, then you would seem to have replication
problems.
> 2. From RSAT and DNS administration the domain not have reverse zone . So,
> ?where does this info come from?
The reverse zone is stored in AD and should be available on all DC's, 
that is unless Zentyal does something strange like using the unsupported 
Bind9 flatfiles.

Rowland

On 27/04/2020 17:15, Miguel Angel Coa M. wrote:
> Hi Rowland, thanks for you response.
>
>
> Ok. I created the reverse zone manually and work fine
>
'zone' != 'record' ;-)

You created a 'record' in the reverse 'zone'

Rowland