samba - Nov 2020 - Joining Samba to Upgraded 2003 domain failing

H Rowland

Thank you for your insight. I have checked over the article and have found
a remnant from the old domain. I think :)
Let's assume the domain is travis.com and the samdom is net.travis.com.
Under this I have a subdomain called _msdcs so I would think this would be
called _msdcs.net.travis.com.
In the RSAT DNS tool I right click and try to delete.
I get "The DNS domain cannot be deleted. This function is not supported on
this system."
So my next logical step is to use samba-tool to remove it.
I cannot wrap my head around how to do so.
I am guessing something like
sudo samba-tool dns delete localhost _msdcs.net.travis.com (but what goes
here)
Thank you in advance for your help

Travis

On Fri, Nov 13, 2020 at 12:11 PM Rowland penny via samba <
samba at lists.samba.org> wrote:
> On 13/11/2020 19:45, Travis Wenks via samba wrote:
> > join attempted via
> > sudo samba-tool domain join net.example.com DC
> > -U'NET.EXAMPLE.COM\administrator'
> > --option='idmap_ldb:use rfc2307 = yes
> The '-U NET.EXAMPLE.COM\administrator' should be either '-U
> NET\administrator' or just '-U administrator'
> >
> > failure lines
> >
> > gensec_gssapi: NO credentials were delegated
> > GSSAPI Connection will be cryptographically signed
> > INFO 2020-11-13 09:00:44,891 pid:12210
> > /usr/local/samba/lib/python3.8/site-packages/samba/join.py #1178:
Adding
> > DNS A record TLA-DC06.NET.EXAMPLE.COM for IPv4 IP: 10.74.20.69
> > Join failed - cleaning up
> The error was adding a DNS record, the rest of the output up to the
> python error message is just an artefact
> > ERROR(runtime): uncaught exception - (9714,
> > 'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST')
> > File
> >
"/usr/local/samba/lib/python3.8/site-packages/samba/netcmd/__init__.py",
> > line 186, in _run
> > return self.run(*args, **kwargs)
> > File
>
"/usr/local/samba/lib/python3.8/site-packages/samba/netcmd/domain.py",
> > line 661, in run
> > join_DC(logger=logger, server=server, creds=creds, lp=lp,
domain=domain,
> > File
"/usr/local/samba/lib/python3.8/site-packages/samba/join.py", line
> > 1558, in join_DC
> > ctx.do_join()
> > File
"/usr/local/samba/lib/python3.8/site-packages/samba/join.py", line
> > 1455, in do_join
> > ctx.join_add_dns_records()
> > File
"/usr/local/samba/lib/python3.8/site-packages/samba/join.py", line
> > 1196, in join_add_dns_records
> > = ctx.samdb.dns_lookup("%s.%s" % (name, zone),
> > File
"/usr/local/samba/lib/python3.8/site-packages/samba/samdb.py", line
> > 1245, in dns_lookup
> > return dsdb_dns.lookup(self, dns_name,
> >
> >
> > This happens when trying to join a DC from packages or sources to a
> > existing domain that started as a 2003 server, was upgraded to 2008r2
> them
> > migrated to samba.
>
> OK, you say it was a 2003 server upgraded to 2008R2, but was the DNS
> upgraded as well, see here:
>
>
>
https://support.microsoft.com/en-gb/help/817470/how-to-reconfigure-an-msdcs-subdomain-to-a-forest-wide-dns-application
>
> Windows seems to work with the old DNS, Samba doesn't, so this could be
> your problem.
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>

On 14/11/2020 01:05, Travis Wenks wrote:
> HRowland
>
> Thank you for your insight. I have checked over the article and have 
> found a remnant from the old domain. I think :)
> Let's assume the domain is travis.com <http://travis.com> and the
> samdom is net.travis.com <http://net.travis.com>.
> Under this I have a subdomain called _msdcs so I would think this 
> would be called _msdcs.net.travis.com <http://msdcs.net.travis.com>.
> In the RSAT DNS tool I right click and try to delete.
> I get "The DNS domain cannot be deleted. This function is not 
> supported on this system."
> So my next logical step is to use samba-tool to remove it.
> I cannot wrap my head around how to do so.
> I am guessing something like
> sudo samba-tool dns delete localhost _msdcs.net.travis.com 
> <http://msdcs.net.travis.com> (but what goes here)
As for 'what goes here', absolutely nothing, that is your forest dns 
zone, I suggest you read the link again.

Rowland

Hi Rowland

I am trying to follow the article but am having the error. That's why I am
trying to clean up this bad subdomain.
I don't know if these lists allow image attachments.
So I uploaded a screenshot here.
https://ibb.co/Ct3BLjL

I built a new domain for this problem in our lab. The domain listed with #1
is the one created by the domain provision.
However the one listed with the #2 is an example of the sub domain that I
need to delete.
As is pointed out in the article, in our live environment there is a
subdomain labeled _msdcs where the #2 is pointed.
This is in addition to the one that a new samba domain creates.

I guess the issue that I am facing is that I get an error trying to follow
the article.
This is using RSAT
https://ibb.co/C1TJBG7

I just don't know how to do this in samba-tool or in any other methods.

Thanks


On Sat, Nov 14, 2020 at 1:03 AM Rowland penny via samba <
samba at lists.samba.org> wrote:
> On 14/11/2020 01:05, Travis Wenks wrote:
> > HRowland
> >
> > Thank you for your insight. I have checked over the article and have
> > found a remnant from the old domain. I think :)
> > Let's assume the domain is travis.com <http://travis.com>
and the
> > samdom is net.travis.com <http://net.travis.com>.
> > Under this I have a subdomain called _msdcs so I would think this
> > would be called _msdcs.net.travis.com
<http://msdcs.net.travis.com>.
> > In the RSAT DNS tool I right click and try to delete.
> > I get "The DNS domain cannot be deleted. This function is not
> > supported on this system."
> > So my next logical step is to use samba-tool to remove it.
> > I cannot wrap my head around how to do so.
> > I am guessing something like
> > sudo samba-tool dns delete localhost _msdcs.net.travis.com
> > <http://msdcs.net.travis.com> (but what goes here)
>
> As for 'what goes here', absolutely nothing, that is your forest
dns
> zone, I suggest you read the link again.
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>