samba - Feb 2024 - Samba trying to connect to a non-existant DC for NTP?

Thu Feb 15 18:07:50 UTC 2024 Rowland Penny rpenny at samba.org
wrote:
>
> Except somehow the 'SRV' went walk about.
>
I deleted the excess SRV RR:

samba-tool dns delete LOCALHOST \
  _msdcs.brockley.harte-lyne.ca \
  _ldap._tcp.pdc \
  SRV \
  "SMB4-1.brockley.harte-lyne.ca 389 0 100"
Password for [administrator at BROCKLEY.HARTE-LYNE.CA]:
Record deleted successfully

samba-ldbsearch --cross-ncs --show-binary \
  -H /var/db/samba4/private/sam.ldb \
  -b 'DC=brockley,DC=harte-lyne,DC=ca' \
  -s sub '(&(objectclass=dnsnode)(name=_ldap._tcp.pdc))'
# record 1
dn:
DC=_ldap._tcp.pdc,DC=_msdcs.brockley.harte-lyne.ca,CN=MicrosoftDNS,DC=ForestDnsZones,DC=brockley,DC=harte-lyne,DC=ca
objectClass: top
objectClass: dnsNode
instanceType: 4
whenCreated: 20200626203452.0Z
uSNCreated: 5218
showInAdvancedViewOnly: TRUE
name: _ldap._tcp.pdc
objectGUID: 7ae43ab4-454b-4aae-b411-f151c32a9078
objectCategory:
CN=Dns-Node,CN=Schema,CN=Configuration,DC=brockley,DC=harte-lyne,DC=ca
dc: _ldap._tcp.pdc
dnsRecord:     NDR: struct dnsp_DnssrvRpcRecord
        wDataLength              : 0x0027 (39)
        wType                    : DNS_TYPE_SRV (33)
        version                  : 0x05 (5)
        rank                     : DNS_RANK_ZONE (240)
        flags                    : 0x0000 (0)
        dwSerial                 : 0x0000006e (110)
        dwTtlSeconds             : 0x00000384 (900)
        dwReserved               : 0x00000000 (0)
        dwTimeStamp              : 0x00000000 (0)
        data                     : union dnsRecordData(case 33)
        srv: struct dnsp_srv
            wPriority                : 0x0000 (0)
            wWeight                  : 0x0064 (100)
            wPort                    : 0x0185 (389)
            nameTarget               : smb4-2.brockley.harte-lyne.ca

whenChanged: 20240215191826.0Z
uSNChanged: 785394
distinguishedName:
DC=_ldap._tcp.pdc,DC=_msdcs.brockley.harte-lyne.ca,CN=MicrosoftDNS,DC=ForestDnsZones,DC=brockley,DC=harte-lyne,DC=ca

# returned 1 records
# 1 entries
# 0 referrals

samba-tool dns query LOCALHOST _msdcs.brockley.harte-lyne.ca _ldap._tcp.pdc 
SRV -U administrator
Password for [BROCKLEY\administrator]:
  Name=, Records=1, Children=0
    SRV: smb4-2.brockley.harte-lyne.ca. (389, 0, 100) (flags=f0, serial=110,
ttl=900)

I also restarted samba_server for good measure.

However, the error messages are still being recorded in /var/log/messages:

Feb 15 14:27:36 smb4-2 samba[37524]: [2024/02/15 14:27:36.902610,  0]
../../source4/librpc/rpc/dcerpc_sock.c:63(continue_socket_connect)

Feb 15 14:27:36 smb4-2 samba[37524]:   Failed to connect host 192.168.18.161 on
port 135 - NT_STATUS_UNSUCCESSFUL

Feb 15 14:27:36 smb4-2 samba[37524]: [2024/02/15 14:27:36.902780,  0]
../../source4/librpc/rpc/dcerpc_sock.c:245(continue_ip_open_socket)

Feb 15 14:27:36 smb4-2 samba[37524]:   Failed to connect host 192.168.18.161
(aac648b2-aac8-411d-afe0-7cbd5455841c._msdcs.brockley.harte-lyne.ca) on port
135 - NT_STATUS_UNSUCCESSFUL.

What else can I do to get this to stop?

-- 
***          e-Mail is NOT a SECURE channel          ***
        Do NOT transmit sensitive data via e-Mail
   Unencrypted messages have no legal claim to privacy
 Do NOT open attachments nor follow links sent by e-Mail

James B. Byrne                mailto:ByrneJB at Harte-Lyne.ca
Harte & Lyne Limited          http://www.harte-lyne.ca
9 Brockley Drive              vox: +1 905 561 1241
Hamilton, Ontario             fax: +1 905 561 0757
Canada  L8E 3C3

On Thu, 15 Feb 2024 14:30:36 -0500
"James B. Byrne via samba" <samba at lists.samba.org>
wrote:
> However, the error messages are still being recorded in
> /var/log/messages:
> 
> Feb 15 14:27:36 smb4-2 samba[37524]: [2024/02/15 14:27:36.902610,  0]
> ../../source4/librpc/rpc/dcerpc_sock.c:63(continue_socket_connect)
> 
> Feb 15 14:27:36 smb4-2 samba[37524]:   Failed to connect host
> 192.168.18.161 on port 135 - NT_STATUS_UNSUCCESSFUL
> 
> Feb 15 14:27:36 smb4-2 samba[37524]: [2024/02/15 14:27:36.902780,  0]
> ../../source4/librpc/rpc/dcerpc_sock.c:245(continue_ip_open_socket)
> 
> Feb 15 14:27:36 smb4-2 samba[37524]:   Failed to connect host
> 192.168.18.161
> (aac648b2-aac8-411d-afe0-7cbd5455841c._msdcs.brockley.harte-lyne.ca)
> on port 135 - NT_STATUS_UNSUCCESSFUL.
> 
> What else can I do to get this to stop?
> 
Is there a firewall blocking this ?
What is 192.168.18.161 ?
Is it
aac648b2-aac8-411d-afe0-7cbd5455841c._msdcs.brockley.harte-lyne.ca ?
Do they exist ?

Rowland