samba - Jul 2025 - WERR_DNS_ERROR_DS_UNAVAILABLE when asking for local dns server info

I am replying myself.... for fuurther reference

It is possible to have an idea on what is started by looking into the 
log /var/log/samba/log.samba

with level 5 in /etc/samba/smb.conf

[2025/07/03 11:40:59.181431,? 3] 
librpc/rpc/dcesrv_core.c:2899(dcerpc_register_ep_server)
 ? DCERPC endpoint server 'dnsserver' registered

please, the question is NOT on configuring or joining a domain, it is on 
how to debug/manage a weird behaviour of samba

yes, I understand that a vanilla installation works but reality is not 
"vanilla"

thanks


Il 2025-07-03 11:29 AM, CED Ing. Damiano Bolla via samba ha
scritto:
> I did a domain join from a windows PDC, the only reason to use a samba 
> PDC .... otherwise we may as well keep using windoze
>
> yes, clearly there is a configurazion that works, I get that
>
> I keep asking the same question: How to find out what RPC servers are 
> actually started or where possible error messages are written
>
> there is clearly a bug that exibit invalid behaviour in some 
> configuration that is legitimate
>
>
>
>
>
> Il 2025-07-03 11:12 AM, Rowland Penny via samba ha scritto:
>> On Thu, 3 Jul 2025 10:55:32 +0200
>> "CED Ing. Damiano Bolla via samba" <samba at
lists.samba.org> wrote:
>>
>>> there is no firewall, as I have written I can "manage"
users of the
>>> domain from RSAT coming from another windows machine
>>>
>>> Do you have any idea on where it is written what rpc servers is
>>> "registered" to work ?
>>>
>>> I had to use samba_upgradedns to go from a "no dns" to
internal dns
>> Why did you do that ?
>> Where did your domain come from ?
>> Did you provision it as a new domain, or did it come from an earlier
>> Windows domain ?
>>
>> Rowland
>>
>

this is a message in log when using

root at vdce:/var/log/samba# samba-tool dns serverinfo vdce

[2025/07/03 11:54:03.054946,? 3] 
librpc/rpc/dcesrv_core.c:2146(dcesrv_request)
 ? Warning: 1 extra bytes in incoming RPC request

I have no idea if it is relevant or not


Il 2025-07-03 11:53 AM, CED Ing. Damiano Bolla via samba ha
scritto:
> I am replying myself.... for fuurther reference
>
> It is possible to have an idea on what is started by looking into the 
> log /var/log/samba/log.samba
>
> with level 5 in /etc/samba/smb.conf
>
> [2025/07/03 11:40:59.181431,? 3] 
> librpc/rpc/dcesrv_core.c:2899(dcerpc_register_ep_server)
> ? DCERPC endpoint server 'dnsserver' registered
>
> please, the question is NOT on configuring or joining a domain, it is 
> on how to debug/manage a weird behaviour of samba
>
> yes, I understand that a vanilla installation works but reality is not 
> "vanilla"
>
> thanks
>
>
> Il 2025-07-03 11:29 AM, CED Ing. Damiano Bolla via samba ha scritto:
>> I did a domain join from a windows PDC, the only reason to use a 
>> samba PDC .... otherwise we may as well keep using windoze
>>
>> yes, clearly there is a configurazion that works, I get that
>>
>> I keep asking the same question: How to find out what RPC servers are 
>> actually started or where possible error messages are written
>>
>> there is clearly a bug that exibit invalid behaviour in some 
>> configuration that is legitimate
>>
>>
>>
>>
>>
>> Il 2025-07-03 11:12 AM, Rowland Penny via samba ha scritto:
>>> On Thu, 3 Jul 2025 10:55:32 +0200
>>> "CED Ing. Damiano Bolla via samba" <samba at
lists.samba.org> wrote:
>>>
>>>> there is no firewall, as I have written I can
"manage" users of the
>>>> domain from RSAT coming from another windows machine
>>>>
>>>> Do you have any idea on where it is written what rpc servers is
>>>> "registered" to work ?
>>>>
>>>> I had to use samba_upgradedns to go from a "no dns"
to internal dns
>>> Why did you do that ?
>>> Where did your domain come from ?
>>> Did you provision it as a new domain, or did it come from an
earlier
>>> Windows domain ?
>>>
>>> Rowland
>>>
>>
>

On Thu, 3 Jul 2025 11:53:09 +0200
"CED Ing. Damiano Bolla via samba" <samba at lists.samba.org>
wrote:
> I am replying myself.... for fuurther reference
> 
>
Will you please answer the question, where did your domain originate
from ?

Was it originally a Windows 2000 domain
Or a Windows 2003 domain
Or a Windows 2003R2
Or something else ?

Rowland

further answering to myself

a further error that appears is the follwowin

[2025/07/03 11:54:03.058142,? 2] 
source4/rpc_server/dnsserver/dnsdb.c:146(dnsserver_db_enumerate_zones)
 ? dnsserver: Found DNS zone 105.168.192.in-addr.arpa
[2025/07/03 11:54:03.058155,? 1] librpc/ndr/ndr.c:733(_ndr_pull_error)
 ? ndr_pull_uint32: ndr_pull_error(Buffer Size Error): Pull bytes 4 
(librpc/ndr/ndr_basic.c:193) at librpc/ndr/ndr_basic.c:193

the reverse zone 105 is a valid zone, I can nslookup it on vdce




Il 2025-07-03 11:53 AM, CED Ing. Damiano Bolla via samba ha
scritto:
> I am replying myself.... for fuurther reference
>
> It is possible to have an idea on what is started by looking into the 
> log /var/log/samba/log.samba
>
> with level 5 in /etc/samba/smb.conf
>
> [2025/07/03 11:40:59.181431,? 3] 
> librpc/rpc/dcesrv_core.c:2899(dcerpc_register_ep_server)
> ? DCERPC endpoint server 'dnsserver' registered
>
> please, the question is NOT on configuring or joining a domain, it is 
> on how to debug/manage a weird behaviour of samba
>
> yes, I understand that a vanilla installation works but reality is not 
> "vanilla"
>
> thanks
>
>
> Il 2025-07-03 11:29 AM, CED Ing. Damiano Bolla via samba ha scritto:
>> I did a domain join from a windows PDC, the only reason to use a 
>> samba PDC .... otherwise we may as well keep using windoze
>>
>> yes, clearly there is a configurazion that works, I get that
>>
>> I keep asking the same question: How to find out what RPC servers are 
>> actually started or where possible error messages are written
>>
>> there is clearly a bug that exibit invalid behaviour in some 
>> configuration that is legitimate
>>
>>
>>
>>
>>
>> Il 2025-07-03 11:12 AM, Rowland Penny via samba ha scritto:
>>> On Thu, 3 Jul 2025 10:55:32 +0200
>>> "CED Ing. Damiano Bolla via samba" <samba at
lists.samba.org> wrote:
>>>
>>>> there is no firewall, as I have written I can
"manage" users of the
>>>> domain from RSAT coming from another windows machine
>>>>
>>>> Do you have any idea on where it is written what rpc servers is
>>>> "registered" to work ?
>>>>
>>>> I had to use samba_upgradedns to go from a "no dns"
to internal dns
>>> Why did you do that ?
>>> Where did your domain come from ?
>>> Did you provision it as a new domain, or did it come from an
earlier
>>> Windows domain ?
>>>
>>> Rowland
>>>
>>
>