samba - Jul 2025 - WERR_DNS_ERROR_DS_UNAVAILABLE when asking for local dns server info

Hello

VDCE is a samba version 4.22.2 debian running as ROLE_ACTIVE_DIRECTORY_DC

I can access the server with RSAT and change the AD configuration 
(users, computers) and it will replicate

DNS works (as in nslookup) but apparently the RPC management is not active

# samba-tool dns serverinfo vdce

provide the password and the reply is

ERROR(runtime): Could not contact RPC server [WERR_DNS_ERROR_DS_UNAVAILABLE] -
(9717, 'WERR_DNS_ERROR_DS_UNAVAILABLE')
   File "/usr/lib/python3/dist-packages/samba/netcmd/dns.py", line
119, in f
     return attr(*args)

any hints ?

On Wed, 2 Jul 2025 13:22:28 +0200
"CED Ing. Damiano Bolla via samba" <samba at lists.samba.org>
wrote:
> Hello
> 
> VDCE is a samba version 4.22.2 debian running as
> ROLE_ACTIVE_DIRECTORY_DC
> 
> I can access the server with RSAT and change the AD configuration 
> (users, computers) and it will replicate
> 
> DNS works (as in nslookup) but apparently the RPC management is not
> active
> 
> # samba-tool dns serverinfo vdce
> 
> provide the password and the reply is
Yes but the password for who ?

If I try it as above, I get prompted for:

Password for [SAMDOM\root]:
> 
> ERROR(runtime): Could not contact RPC server
> [WERR_DNS_ERROR_DS_UNAVAILABLE] - (9717,
> 'WERR_DNS_ERROR_DS_UNAVAILABLE') File
> "/usr/lib/python3/dist-packages/samba/netcmd/dns.py", line 119,
in f
> return attr(*args)
> 
But I get a different error, but it does work if I supply '-Urowland'
on the end of the command and then enter my password.

If that doesn't help, please post the output of 'samba-tool
testparm'

Rowland

Am 02.07.25 um 13:22 schrieb CED Ing. Damiano Bolla via
samba:
> # samba-tool dns serverinfo vdce
> 
> provide the password and the reply is
> 
> ERROR(runtime): Could not contact RPC server 
> [WERR_DNS_ERROR_DS_UNAVAILABLE] - (9717,
'WERR_DNS_ERROR_DS_UNAVAILABLE')
>  ? File "/usr/lib/python3/dist-packages/samba/netcmd/dns.py",
line 119,
> in f
>  ??? return attr(*args)
> 
Maybe a firewall is blocking the ports? RPC ports changed during the 
development of Samba.

See here:

https://wiki.samba.org/index.php/Samba_AD_DC_Port_Usage


Regards

Christian