search for: forestdnszones

Hi, Well, I joined a new DC on my domain and when run "ldapcmp" it reported errors. I follow Samba wiki to Joining a Samba to an Existing Active Directory. * Comparing [DNSFOREST] context... * Objects to be compared: 18 Comparing: 'CN=Infrastructure,DC=ForestDnsZones,DC=dom,DC=city10,DC=com,DC=br' [ldap://artemis] 'CN=Infrastructure,DC=ForestDnsZones,DC=dom,DC=city10,DC=com,DC=br' [ldap://aquarius] Attributes found only in ldap://artemis: cn Attributes found only in ldap://aquarius: CN FAILED Comparing: 'CN=LostAndFo...

On 29/04/2020 10:58, Olaf Dreyer via samba-technical wrote: > > I run a setup with two Samba DC (currently samba 4.12.2 on debian 10 > VMs). I started with a Windows 2003 DC but the last Windows DC has > been removed a few years ago from this setup. this is really the wrong list for this, so i have CC'ed the samba mailing list, please reply there. You say you started with Win

...ned a new DC on my domain and when run "ldapcmp" it > reported errors. I follow Samba wiki to Joining a Samba to an > Existing Active Directory. > > * Comparing [DNSFOREST] context... > > * Objects to be compared: 18 > > Comparing: > 'CN=Infrastructure,DC=ForestDnsZones,DC=dom,DC=city10,DC=com,DC=br' > [ldap://artemis] > 'CN=Infrastructure,DC=ForestDnsZones,DC=dom,DC=city10,DC=com,DC=br' > [ldap://aquarius] > Attributes found only in ldap://artemis: > cn > Attributes found only in ldap://aquarius: > CN >...

...OMTN,DC=DE.ldb' > -rw------- 1 root staff 33878016 Apr 29 12:46 > 'CN=SCHEMA,CN=CONFIGURATION,DC=OMTN,DC=DE.ldb' > -rw-rw---- 1 root bind?? 4247552 Apr 29 12:46 > 'DC=DOMAINDNSZONES,DC=OMTN,DC=DE.ldb' > -rw-rw---- 1 root bind?? 6885376 Apr 29 12:46 > 'DC=FORESTDNSZONES,DC=OMTN,DC=DE.ldb' > -rw------- 1 root staff 19218432 Apr 29 12:46 'DC=OMTN,DC=DE.ldb' > -rw-rw---- 1 root bind??? 831488 Apr 29 11:07 metadata.tdb > > Some output from ldb > /usr/local/samba/bin/ldbsearch --cross-ncs --show-binary -H > /usr/local/samba/private/sam.ld...

...> -rw------- 1 root staff 33878016 Apr 29 12:46 >> 'CN=SCHEMA,CN=CONFIGURATION,DC=OMTN,DC=DE.ldb' >> -rw-rw---- 1 root bind?? 4247552 Apr 29 12:46 >> 'DC=DOMAINDNSZONES,DC=OMTN,DC=DE.ldb' >> -rw-rw---- 1 root bind?? 6885376 Apr 29 12:46 >> 'DC=FORESTDNSZONES,DC=OMTN,DC=DE.ldb' >> -rw------- 1 root staff 19218432 Apr 29 12:46 'DC=OMTN,DC=DE.ldb' >> -rw-rw---- 1 root bind??? 831488 Apr 29 11:07 metadata.tdb >> >> Some output from ldb >> /usr/local/samba/bin/ldbsearch --cross-ncs --show-binary -H >> /usr/lo...

...:46 'CN=CONFIGURATION,DC=OMTN,DC=DE.ldb' -rw------- 1 root staff 33878016 Apr 29 12:46 'CN=SCHEMA,CN=CONFIGURATION,DC=OMTN,DC=DE.ldb' -rw-rw---- 1 root bind?? 4247552 Apr 29 12:46 'DC=DOMAINDNSZONES,DC=OMTN,DC=DE.ldb' -rw-rw---- 1 root bind?? 6885376 Apr 29 12:46 'DC=FORESTDNSZONES,DC=OMTN,DC=DE.ldb' -rw------- 1 root staff 19218432 Apr 29 12:46 'DC=OMTN,DC=DE.ldb' -rw-rw---- 1 root bind??? 831488 Apr 29 11:07 metadata.tdb Some output from ldb /usr/local/samba/bin/ldbsearch --cross-ncs --show-binary -H /usr/local/samba/private/sam.ldb -b dc=omtn,dc=de -s sub ...

...3878016 Apr 29 12:46 > > > 'CN=SCHEMA,CN=CONFIGURATION,DC=OMTN,DC=DE.ldb' > > > -rw-rw---- 1 root bind 4247552 Apr 29 12:46 > > > 'DC=DOMAINDNSZONES,DC=OMTN,DC=DE.ldb' > > > -rw-rw---- 1 root bind 6885376 Apr 29 12:46 > > > 'DC=FORESTDNSZONES,DC=OMTN,DC=DE.ldb' > > > -rw------- 1 root staff 19218432 Apr 29 12:46 'DC=OMTN,DC=DE.ldb' > > > -rw-rw---- 1 root bind 831488 Apr 29 11:07 metadata.tdb > > > > > > Some output from ldb > > > /usr/local/samba/bin/ldbsearch --cross-ncs --s...

...rst-Site-Name._sites.DomainDnsZones.heathfam.com <http://sites.domaindnszones.heathfam.com/>. Failed to find DNS entry SRV _ldap._tcp.Default-First-Site-Name._ sites.DomainDnsZones.heathfam.com <http://sites.domaindnszones.heathfam.com/> samba-ad.heathfam.com 389 Looking for DNS entry A ForestDnsZones.heathfam.com <http://forestdnszones.heathfam.com/> 10.0.2.4 as ForestDnsZones.heathfam.com <http://forestdnszones.heathfam.com/>. Failed to find DNS entry A ForestDnsZones.heathfam.com <http://forestdnszones.heathfam.com/> 10.0.2.4 Looking for DNS entry SRV _ldap._tcp.ForestDnsZon...

...Why can't I query and/or delete it using standard means? >>> Probably because it is a wrong record ???? >>> Try running this on a DC: >>> ldbsearch --cross-ncs --show-binary -H /var/lib/samba/private/sam.ldb -b >>> 'DC=_msdcs.domain.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=domain,DC=com' >>> -s sub '(objectClass=dnsNode)' >> Thanks, Rowland. I've just tried your command but the output does not contain >> that bogus record. I even tried to remove the objectClass filter - still no >> luck. > One record I've f...

...=at DomainNamingMasterRole owner: CN=NTDS Settings,CN=PRE01SVDEB03,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pilsbacher,DC=at DomainDnsZonesMasterRole owner: CN=NTDS Settings,CN=PRE01SVDEB03,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pilsbacher,DC=at ForestDnsZonesMasterRole owner: CN=NTDS Settings,CN=PRE01SVDEB03,CN=Servers,CN=Default-First-Site-Name,CN=Sites,CN=Configuration,DC=pilsbacher,DC=at now for a break and some food stay tuned :-P

...ucceeded, but we failed to find a matching DNS entry for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at pre01svdeb02.pilsbacher.at 389 need update: SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.pilsbacher.at pre01svdeb02.pilsbacher.at 389 need cache add: A ForestDnsZones.pilsbacher.at 192.168.16.205 Looking for DNS entry A ForestDnsZones.pilsbacher.at 192.168.16.205 as ForestDnsZones.pilsbacher.at. Lookup of ForestDnsZones.pilsbacher.at. succeeded, but we failed to find a matching DNS entry for A ForestDnsZones.pilsbacher.at 192.168.16.205 need update: A ForestDnsZ...

...######################################### ; TSIG error with server: tsig verify failure Outgoing update query: ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 0 ;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0 ;; UPDATE SECTION: _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.lfa.ls. 900 IN SRV 0 100 389 plfa1.lfa.ls. ; TSIG error with server: tsig verify failure Failed nsupdate: 2 update(nsupdate): A ForestDnsZones.lfa.ls 10.20.30.1 Calling nsupdate for A ForestDnsZones.lfa.ls 10.20.30.1 (add) Successfully obtained Kerberos ticket to DNS/plfa1.lfa.ls as PLFA1$ Failed...

...ember the actual command you ran to upgrade ? > >> You are actually missing two fsmo roleowners, your ldbsearch should >> return these as well as the other 5: >> >> dn: CN=Infrastructure,DC=DomainDnsZones,DC=biostat,DC=washington,DC=edu >> dn: CN=Infrastructure,DC=ForestDnsZones,DC=biostat,DC=washington,DC=edu >> >> Do the 'DNs' exist ? >> >> try this: >> >> ldbsearch --cross-ncs -H /usr/local/samba/private/sam.ldb -b >> 'DC=DomainDnsZones,DC=biostat,DC=washington,DC=edu' -s sub >> '(cn=Infrastructure)'...

...ze = 10000 debug timestamp = yes # Disable printing load printers = no printing = bsd printcap name = /dev/null disable spoolss = yes When I run samba_dnsupdate I see this: samba_dnsupdate --verbose -d4 --all-names . . . update(nsupdate): SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.brockley.harte-lyne.ca SMB4-1.brockley.harte-lyne.ca 389 (add) Successfully obtained Kerberos ticket to DNS/SMB4-1.brockley.harte-lyne.ca as SMB4-1$ Failed nsup...

Greetings - On our samba 4 (4.3.3) AD controller I just noticed something odd. When I run 'samba-tool fsmo show' I get an error: # samba-tool fsmo show ERROR(ldb): uncaught exception - No such Base DN: CN=Infrastructure,DC=DomainDnsZones,DC=biostat,DC=washington,DC=edu File "/usr/local/samba/lib64/python2.6/site-packages/samba/netcmd/__init__.py", line 175, in _run

...t; thanks, > -r > OK, as for how did you get to here, how was the domain provisioned ?? You are actually missing two fsmo roleowners, your ldbsearch should return these as well as the other 5: dn: CN=Infrastructure,DC=DomainDnsZones,DC=biostat,DC=washington,DC=edu dn: CN=Infrastructure,DC=ForestDnsZones,DC=biostat,DC=washington,DC=edu Do the 'DNs' exist ? try this: ldbsearch --cross-ncs -H /usr/local/samba/private/sam.ldb -b 'DC=DomainDnsZones,DC=biostat,DC=washington,DC=edu' -s sub '(cn=Infrastructure)' Does it return anything ? Run it again, but replace 'DC=Dom...

...Apr 29 12:46 >>>> 'CN=SCHEMA,CN=CONFIGURATION,DC=OMTN,DC=DE.ldb' >>>> -rw-rw---- 1 root bind 4247552 Apr 29 12:46 >>>> 'DC=DOMAINDNSZONES,DC=OMTN,DC=DE.ldb' >>>> -rw-rw---- 1 root bind 6885376 Apr 29 12:46 >>>> 'DC=FORESTDNSZONES,DC=OMTN,DC=DE.ldb' >>>> -rw------- 1 root staff 19218432 Apr 29 12:46 'DC=OMTN,DC=DE.ldb' >>>> -rw-rw---- 1 root bind 831488 Apr 29 11:07 metadata.tdb >>>> >>>> Some output from ldb >>>> /usr/local/samba/bin/ldbsearch --cros...

...g was a 'classicupgrade' of a samba 3 domain with LDAP backend. > You are actually missing two fsmo roleowners, your ldbsearch should > return these as well as the other 5: > > dn: CN=Infrastructure,DC=DomainDnsZones,DC=biostat,DC=washington,DC=edu > dn: CN=Infrastructure,DC=ForestDnsZones,DC=biostat,DC=washington,DC=edu > > Do the 'DNs' exist ? > > try this: > > ldbsearch --cross-ncs -H /usr/local/samba/private/sam.ldb -b > 'DC=DomainDnsZones,DC=biostat,DC=washington,DC=edu' -s sub > '(cn=Infrastructure)' > > Does it return anyth...

...n.tld dc.augusta.domain.tld 389, queried as _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.augusta.domain.tld. does not hold this record type need update: SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.augusta.domain.tld dc.augusta.domain.tld 389 Looking for DNS entry A ForestDnsZones.augusta.domain.tld 192.168.178.37 as ForestDnsZones.augusta.domain.tld. Lookup of ForestDnsZones.augusta.domain.tld. succeeded, but we failed to find a matching DNS entry for A ForestDnsZones.augusta.domain.tld 192.168.178.37 need update: A ForestDnsZones.augusta.domain.tld 192.168.178.37 need c...

Hello, I've just discovered a bogus record in _msdcs zone which exists on samba-dc (vm-dc4, 4.12.2) only and missing on a PDC (vm-dc1, Windows Server 2008 R2): # samba-tool dns query localhost _msdcs.domain.com @ ALL -U administrator 2>/dev/null Password for [DOMAIN\administrator]: Name=, Records=3, Children=0 NS: vm-dc1.domain.com. (flags=600000f0, serial=181, ttl=3600)