samba - Jul 2025 - WERR_DNS_ERROR_DS_UNAVAILABLE when asking for local dns server info

On Wed, 2 Jul 2025 13:22:28 +0200
"CED Ing. Damiano Bolla via samba" <samba at lists.samba.org>
wrote:
> Hello
> 
> VDCE is a samba version 4.22.2 debian running as
> ROLE_ACTIVE_DIRECTORY_DC
> 
> I can access the server with RSAT and change the AD configuration 
> (users, computers) and it will replicate
> 
> DNS works (as in nslookup) but apparently the RPC management is not
> active
> 
> # samba-tool dns serverinfo vdce
> 
> provide the password and the reply is
Yes but the password for who ?

If I try it as above, I get prompted for:

Password for [SAMDOM\root]:
> 
> ERROR(runtime): Could not contact RPC server
> [WERR_DNS_ERROR_DS_UNAVAILABLE] - (9717,
> 'WERR_DNS_ERROR_DS_UNAVAILABLE') File
> "/usr/lib/python3/dist-packages/samba/netcmd/dns.py", line 119,
in f
> return attr(*args)
> 
But I get a different error, but it does work if I supply '-Urowland'
on the end of the command and then enter my password.

If that doesn't help, please post the output of 'samba-tool
testparm'

Rowland

yes, one parameter passed is -U with the proper user or event better? 
--use-krb5-ccache=/tmp/krb5cc_0

thi is the result of samba-tool testparm, with some possibly sensitive 
information changed (it is obviously changed)

# Global parameters
[global]
 ??????? dns forwarder = 192.168.999.11
 ??????? log level = 1
 ??????? netbios name = VDCE
 ??????? realm = CONTOSO.LOCAL
 ??????? server role = active directory domain controller
 ??????? workgroup = CONTOSO

[sysvol]
 ??????? path = /var/lib/samba/sysvol
 ??????? read only = No

[netlogon]
 ??????? path = /var/lib/samba/sysvol/aclonigo.local/scripts
 ??????? read only = No

all the remaining parameters are default, this means that the server is 
using an internal dns (and it works)

the question is "how can I find out if RPC server for DNS (that is NOT 
the dns server itself, it is the "administrative" part) is
"enabled") ?

and if it is not enabled.... how do I enable it ?

or alternatively, where (what file and possibly what "string") should
I
look for for possible invalid params related to RPC server for DNS ?

Thanks




Il 2025-07-02 1:43 PM, Rowland Penny via samba ha
scritto:
> On Wed, 2 Jul 2025 13:22:28 +0200
> "CED Ing. Damiano Bolla via samba" <samba at
lists.samba.org> wrote:
>
>> Hello
>>
>> VDCE is a samba version 4.22.2 debian running as
>> ROLE_ACTIVE_DIRECTORY_DC
>>
>> I can access the server with RSAT and change the AD configuration
>> (users, computers) and it will replicate
>>
>> DNS works (as in nslookup) but apparently the RPC management is not
>> active
>>
>> # samba-tool dns serverinfo vdce
>>
>> provide the password and the reply is
> Yes but the password for who ?
>
> If I try it as above, I get prompted for:
>
> Password for [SAMDOM\root]:
>
>> ERROR(runtime): Could not contact RPC server
>> [WERR_DNS_ERROR_DS_UNAVAILABLE] - (9717,
>> 'WERR_DNS_ERROR_DS_UNAVAILABLE') File
>> "/usr/lib/python3/dist-packages/samba/netcmd/dns.py", line
119, in f
>> return attr(*args)
>>
> But I get a different error, but it does work if I supply
'-Urowland'
> on the end of the command and then enter my password.
>
> If that doesn't help, please post the output of 'samba-tool
testparm'
>
> Rowland
>