samba - Jun 2024 - Error in log.samba on AD DC when using DNS administration from Windows RSAT

Hi folks,

There is always the following error message when using the DNS 
administration from Windows RSAT:

[2024/06/15 06:43:58.941829,? 0] 
source4/rpc_server/dnsserver/dcerpc_dnsserver.c:1076(dnsserver_query_zone)
 ? dnsserver: Invalid zone operation IsSigned

What does it mean and are there any negative side effects? Everything 
seems to work, though.

This was also reported by Mark Petersen on 17 May, but it seems to have 
been forgotten about.

Best regards,

Peter

On Sun, 16 Jun 2024 10:17:44 +0200
Peter Milesson via samba <samba at lists.samba.org> wrote:
> Hi folks,
> 
> There is always the following error message when using the DNS 
> administration from Windows RSAT:
> 
> [2024/06/15 06:43:58.941829,? 0] 
> source4/rpc_server/dnsserver/dcerpc_dnsserver.c:1076(dnsserver_query_zone)
>  ? dnsserver: Invalid zone operation IsSigned
> 
> What does it mean and are there any negative side effects? Everything 
> seems to work, though.
It means that something is trying to use dnssec when querying the
dnsserver, Samba at this time knows nothing about dnssec and 'IsSigned'
isn't in the list it checks against, hence the message you are getting.
It looks like Samba needs an update in this area, if only to stop that
message.
> 
> This was also reported by Mark Petersen on 17 May, but it seems to
> have been forgotten about.
> 
I wouldn't say 'forgotten', more ignored because a bug hasn't
been
opened and it is a very minor problem.

Rowland