samba - Jul 2025 - WERR_DNS_ERROR_DS_UNAVAILABLE when asking for local dns server info

# samba-tool dbcheck

Processing section "[sysvol]"
Processing section "[netlogon]"
pm_process() returned Yes
schema_fsmo_init: we are master[no] updates allowed[no]
schema_fsmo_init: we are master[no] updates allowed[no]
dsdb_search_dn: flags=0x00000402 
<WKGUID=18E2EA80684F11D2B9AA00C04F79F805,CN=Schema,CN=Configuration,DC=CONTOSO,DC=local>
-> Base-DN 
'<WKGUID=18E2EA80684F11D2B9AA00C04F79F805,CN=Schema,CN=Configuration,DC=CONTOSO,DC=local>'
not found (No such object)
Checking 1447 objects
Checked 1447 objects (0 errors)

Is anyone interested in fixing this bug ?

meaning, I could have a go to look into it but I need some help to begin 
working with the source

any hints on what to do next ?

Il 2025-07-03 2:20 PM, Rowland Penny via samba ha
scritto:
> On Thu, 3 Jul 2025 14:07:33 +0200
> "CED Ing. Damiano Bolla via samba" <samba at
lists.samba.org> wrote:
>
>> yes, the following results where CONTOSO and XXX replace the actual,
>> correct, information
>>
>> root at vdce:/var/log/samba/c2# nslookup -type=soa _msdcs.CONTOSO.local
>> Server:???????? 192.168.XXX.40
>> Address:??????? 192.168.XXX.40#53
>>
>> _msdcs.CONTOSO.local
>>   ??????? origin = vdce.CONTOSO.local
>>   ??????? mail addr = hostmaster.CONTOSO.local
>>   ??????? serial = 172
>>   ??????? refresh = 900
>>   ??????? retry = 600
>>   ??????? expire = 86400
>>   ??????? minimum = 3600
>>
> That confirms that you are using the correct dns system, earlier
> versions used a very different system.
>
>> Please take not of the following
>>
>> [2025/07/03 13:46:09.176503,? 2]
>> source4/rpc_server/dnsserver/dnsdb.c:146(dnsserver_db_enumerate_zones)
>>   ? dnsserver: Found DNS zone 102.168.192.in-addr.arpa
>> [2025/07/03 13:46:09.176539,? 1] librpc/ndr/ndr.c:733(_ndr_pull_error)
>>   ? ndr_pull_uint32: ndr_pull_error(Buffer Size Error): Pull bytes 4
>> (librpc/ndr/ndr_basic.c:193) at librpc/ndr/ndr_basic.c:193
>>
> If it is just the reversezone(s) giving problems, then delete them and
> then recreate them.
>
> You could try checking the database:
>
> samba-tool dbcheck
>
> Rowland
>
>

On Thu, 3 Jul 2025 14:34:43 +0200
"CED Ing. Damiano Bolla via samba" <samba at lists.samba.org>
wrote:
> # samba-tool dbcheck
> 
> Processing section "[sysvol]"
> Processing section "[netlogon]"
> pm_process() returned Yes
> schema_fsmo_init: we are master[no] updates allowed[no]
> schema_fsmo_init: we are master[no] updates allowed[no]
> dsdb_search_dn: flags=0x00000402 
>
<WKGUID=18E2EA80684F11D2B9AA00C04F79F805,CN=Schema,CN=Configuration,DC=CONTOSO,DC=local>
> -> Base-DN 
>
'<WKGUID=18E2EA80684F11D2B9AA00C04F79F805,CN=Schema,CN=Configuration,DC=CONTOSO,DC=local>'
> not found (No such object)
> Checking 1447 objects
> Checked 1447 objects (0 errors)
> 
> Is anyone interested in fixing this bug ?-
What bug ?

there are no errors 'Checked 1447 objects (0 errors)'
> 
> meaning, I could have a go to look into it but I need some help to
> begin working with the source
> 
> any hints on what to do next ?
> 
If you have another DC and that is working correctly, then I would
demote and remove this Samba DC and then join another one.
The only other thought I have is, is this DC running in a VM and if
so, is it a privileged VM ?

Rowland

On Thu, 3 Jul 2025 14:34:43 +0200
"CED Ing. Damiano Bolla via samba" <samba at lists.samba.org>
wrote:
> # samba-tool dbcheck
> 
> Processing section "[sysvol]"
> Processing section "[netlogon]"
> pm_process() returned Yes
> schema_fsmo_init: we are master[no] updates allowed[no]
> schema_fsmo_init: we are master[no] updates allowed[no]
> dsdb_search_dn: flags=0x00000402 
>
<WKGUID=18E2EA80684F11D2B9AA00C04F79F805,CN=Schema,CN=Configuration,DC=CONTOSO,DC=local>
> -> Base-DN 
>
'<WKGUID=18E2EA80684F11D2B9AA00C04F79F805,CN=Schema,CN=Configuration,DC=CONTOSO,DC=local>'
> not found (No such object)
> Checking 1447 objects
> Checked 1447 objects (0 errors)
> 
After my last post, I noticed something, to get virtually the same
output as above, I had to run:

sudo samba-tool dbcheck -d5

But I got a lot more info, among which was the line:

Processing section "[global]"

I take it this was removed from the commands output before posting.

Rowland