Judging by the "cricket" sounds to my question (and don't blame
anyone)
I need to resort to plan "B" and simply demote one DC and reload all
the
software.
Thanks to COVID-19 (stay at home) I have plenty of time on my hands.
(Sent from home location.)
Bob Wooden
Donelson Trophy
615.885.2846
On 6/8/20 9:16 AM, Bob Wooden via samba wrote:> My dns (bind9) server for my Samba AD has messed up. W10 workstations
> are having connection issues to say the least.
>
> When I dig into the Sambawiki documentation regarding
> /BIND9_DLZ_DNS_Back_End/ the first thing I notice is the change that
> occurred at Samba v4.8.0. That is the change of
> "|/usr/local/samba/_private_/named.conf|" to
> "|/usr/local/samba/_bind-dns_/named.conf|". This DC started life
as a
> v4.7.6. I find within the directory tree both ".../samba/bind-dns
> /..." AND "...samba/private/..." entries. So, when I verify
the
> "metadata.tdb" database I get:
>
> ?? root at ORGdc07:~# ls -lai /usr/local/samba/*private*/sam.ldb.d/
> ?? total 75732
> ?? 26611 drwxr-x--- 2 root bind???? 4096 Jun? 8 08:38? .
> ?? 17275 drwx------ 7 root root???? 4096 Jun? 8 08:38? ..
> ?? 26617 -rw------- 1 root root 25698304 Jun? 7 13:18
> ?? 'CN=CONFIGURATION,DC=domainname,DC=ORG.ldb'
> ?? 26616 -rw------- 1 root root 31580160 Jun? 7 13:18
> ?? 'CN=SCHEMA,CN=CONFIGURATION,DC=domainname,DC=ORG.ldb'
> ?? 26637 -rw-rw---- 2 root bind? 4247552 Jun? 8 07:53
> ?? 'DC=DOMAINDNSZONES,DC=domainname,DC=ORG.ldb'
> ?? 26636 -rw------- 1 root root 10928128 Jun? 8 06:34
> ?? 'DC=domainname,DC=ORG.ldb'
> ?? 26638 -rw-rw---- 2 root bind? 4247552 Jun? 7 16:04
> ?? 'DC=FORESTDNSZONES,DC=domainname,DC=ORG.ldb'
> ?? 26615 -rw-rw---- 2 root bind?? 831488 Jun? 8 07:53 metadata.tdb
>
> ?? But nothing here:
>
> ?? root at ORGdc07:~# ls -lai /usr/local/samba/*bind-dns*/sam.ldb.d/
> ?? ls: cannot access '/usr/local/samba/bind-dns/sam.ldb.d/': No
such
> ?? file or directory
>
> ?? And nothing here:
>
> ?? root at ORGdc07:~# ls -lai /usr/local/samba/*private*/dns/sam.ldb.d/
> ?? ls: cannot access '/usr/local/samba/private/dns/sam.ldb.d/': No
such
> ?? file or directory
>
> ?? And something here:
>
> ?? root at ORGdc07:~# ls -lai /usr/local/samba/*bind-dns*/dns/sam.ldb.d/
> ?? total 25712
> ?? 524524 drwxrwx--- 2 root bind??? 4096 Jun? 8 08:38? .
> ?? 524523 drwxrwx--- 3 root bind??? 4096 Jun? 8 08:38? ..
> ??? ?? 972 -rw-rw---- 1 root bind 7196672 Jun? 8 08:38
> ?? 'CN=CONFIGURATION,DC=domainname,DC=ORG.ldb'
> ??? ?? 794 -rw-rw---- 1 root bind 8503296 Jun? 8 08:38
> ?? 'CN=SCHEMA,CN=CONFIGURATION,DC=domainname,DC=ORG.ldb'
> ??? ?26637 -rw-rw---- 2 root bind 4247552 Jun? 8 07:53
> ?? 'DC=DOMAINDNSZONES,DC=domainname,DC=ORG.ldb'
> ?? 524525 -rw-rw---- 1 root bind 1286144 Jun? 8 08:38
> ?? 'DC=domainname,DC=ORG.ldb'
> ??? ?26638 -rw-rw---- 2 root bind 4247552 Jun? 7 16:04
> ?? 'DC=FORESTDNSZONES,DC=domainname,DC=ORG.ldb'
> ??? ?26615 -rw-rw---- 2 root bind? 831488 Jun? 8 07:53 metadata.tdb
>
> I am having problems with host lookups and if I am understanding what
> I am reading on
> "https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End" page,
under
> the header "New DNS Entries Are Not Resolvable" The above should
be
> under one or the other NOT a mix across both directories.
>
> When I do:
>
> ?? root at host7:~# host -v host7.domainname.org
> ?? Trying "host7.domainname.org"
> ?? ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13526
> ?? ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
>
> ?? ;; QUESTION SECTION:
> ?? ;host7.domainname.org.??? ??? IN??? A
>
> ?? ;; ANSWER SECTION:
> ?? host7.domainname.org.??? 0??? IN??? A??? 192.168.160.48
>
> ?? Received 50 bytes from 127.0.0.53#53 in 0 ms
> ?? Trying "host7.domainname.org"
> ?? ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6427
> ?? ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
>
> ?? ;; QUESTION SECTION:
> ?? ;host7.domainname.org.??? ??? IN??? AAAA
>
> ?? Received 34 bytes from 127.0.0.53#53 in 0 ms
> ?? Trying "host7.domainname.org"
> ?? *Host host7.domainname.org _not found: 3(NXDOMAIN)_*
> ?? Received 34 bytes from 127.0.0.53#53 in 0 ms
> ?? Received 34 bytes from 127.0.0.53#53 in 0 ms
>
> Remember that I mentioned that this machine started life as a v4.7.6.
> There have been many version upgrades since and I am now at v4.11.6.
> (I am surprised dns did not fail sooner but, what do I know?)
>
> So, I could be wrong but, I think the "not found: 3(NXDOMAIN)"
issue
> is being caused, in part, by the old "private" directory to the
new
> "bind-dns" directory issue?
>
> I have worked through my old setup notes and change all the
"private"
> to "bind-dns" but I am still having issues.
>
> How can I correct this?
>
> Any suggestions would be greatly appreciated.
>