search for: ldbdelet

On 06.06.2018 16:02, Rowland Penny via samba wrote: > > On your DC, set the AD DNS domain in the domain and the IP of your DC in the nameserver parameter of the /etc/resolv.conf file. For example: > > domain samdom.example.com > nameserver 10.99.0.1 So "domain" and not "search"? I had "search" set due to the result of some discussion on the list.

...hines. > > However, I wasn't able to remove the DC itself from Sites and Service > as well as from "Domain Controllers" in ADUC. I get "Windows cannot > delete object [...] because: The specified module could not be found." > You may have to remove it with ldbdelete, try an ldbsearch on the DC first, if you can find it, ldbdelete should be able to delete it. Rowland

...fully someone can shed some > light: > > - am I looking in correct .ldb for bind-dns? No, only operate on sam.ldb, you need the '--cross-ncs' option to ldbsearch. > - can I remove this record? yes, provided it is the correct record. > If yes what's the best method? ldbdelete ? >Should > samba and/or bind be stopped? Neither should need to be stopped. > As I have 2 DC's, is editing on one enough? Yes, the change should be replicated to the other. > SHould both be stopped? No, you shouldn't need to stop either. Rowland

...y Created dns records by hand (ldbsearch, samba-tool dns add) Checked replication Copied sysvol Transferred some roles from windows Transferred some roles from samba (fsmo transfer) Shut down primary Seized remaining roles (fsmo seize) Changed SOA to point to samba Deleted old DCs objects from ldb (ldbdelete) Deleted old records from dns (nsupdate) Everything seems to be working fine except for dns management. We cannot manage dns from RAT dns which says it cannot contact the samba host "Active Directory service was not found". Made sure dnsrpc was running on samba, but it wont connect. W...

...>> >> - am I looking in correct .ldb for bind-dns? > No, only operate on sam.ldb, you need the '--cross-ncs' option to > ldbsearch. > >> - can I remove this record? > yes, provided it is the correct record. > >> If yes what's the best method? > ldbdelete ? > >> Should >> samba and/or bind be stopped? > Neither should need to be stopped. > >> As I have 2 DC's, is editing on one enough? > Yes, the change should be replicated to the other. > >> SHould both be stopped? > No, you shouldn't need to stop...

Hello, I stumbled upon weird error/bug. My setup: 4.8.3 AD on centos 7.5 (compiled from source). BIND as dns running on AD DC with secure dns updates setup and working. Most of the DNS updates are dynamic, some added manually using windows DNS manager. One of the PTR entries in reverse lookup zone went missing. It's not visible in the windows DNS manager, it's nowhere to be found