samba - Nov 2024 - samba-tool computer delete does not work

On 19/11/24 02:40, Heinz H?lzl via samba wrote:
> hi,
> 
> I have to delete about 6000 old machine accounts.
> 
> samba-tool computer delete RESERVE23 does not end.
What this command does is delete the record itself, then tries to delete 
related DNS records.

I think what is happening is the initial delete is working, but DNS is 
not, and samba-tool is left waiting for a response.

To verify this theory:
1. check the account has a dNSHostName attribute
2. look up that adress with `dig` or something.

If it hangs, then DNS is not working.
> when I interrupt it with CRTL + C, the PC is deleted.
> deleting the computer accounts with RSAT works.
> 
> can i also delete the computer accounts with ldapdelete?
Probably. The DNS records will not be cleaned up, but they weren't being 
anyway with samba-tool hanging.

Douglas

On Wed, 20 Nov 2024 10:35:40 +1300
Douglas Bagnall via samba <samba at lists.samba.org> wrote:
> On 19/11/24 02:40, Heinz H?lzl via samba wrote:
> > hi,
> > 
> > I have to delete about 6000 old machine accounts.
> > 
> > samba-tool computer delete RESERVE23 does not end.
> 
> What this command does is delete the record itself, then tries to
> delete related DNS records.
> 
> I think what is happening is the initial delete is working, but DNS
> is not, and samba-tool is left waiting for a response.
From my reading of the code, the initial delete shouldn't happen unless
the computer records are also deleted, they are both inside the same
'try'. If it is awaiting a response, then it must be a dns response,
they isn't any other response requested.
> 
> To verify this theory:
> 1. check the account has a dNSHostName attribute
> 2. look up that adress with `dig` or something.
> 
> If it hangs, then DNS is not working.
> 
This has 'DNS' written all over it. I think we need to know more about
the domain, what is the DC ? If it is a Samba DC, then seeing the
smb.conf may help and is bind9 being used ?

Rowland