search for: verdandi

I just upgraded bind9 on my backup DC to 9.9.5-7-Debian and restarting the service failed: Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u bind -4 Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '-...

And some more information about this strange effect apparently no-one has seen before. I now added the missing zone: samba-tool dns zonecreate verdandi 10.16.172.in-addr.arpa -U Administrator and it claims that the zone is okay, but the next one is missing: Dec 29 10:31:12 verdandi named[2601]: Loading 'ad.microsult.de' using driver dlopen Dec 29 10:31:12 verdandi named[2601]: samba_dlz: started for DN DC=ad,DC=microsult,DC=de Dec 29 1...

On 29/12/14 09:40, Lars Hanke wrote: > And some more information about this strange effect apparently no-one > has seen before. > > I now added the missing zone: > > samba-tool dns zonecreate verdandi 10.16.172.in-addr.arpa -U > Administrator > > and it claims that the zone is okay, but the next one is missing: > > Dec 29 10:31:12 verdandi named[2601]: Loading 'ad.microsult.de' using > driver dlopen > Dec 29 10:31:12 verdandi named[2601]: samba_dlz: started for DN...

I dug somewhat deeper into what is going on below and it seems even stranger. The reverse zone without SOA or NS does not even exist: root at verdandi:~# samba-tool dns query localhost 10.16.172.in-addr.arpa @ ALL -U Administrator Password for [AD\Administrator]: ERROR(runtime): uncaught exception - (9714, 'WERR_DNS_ERROR_NAME_DOES_NOT_EXIST') File "/usr/lib/python2.7/dist-packages/samba/netcmd/__init__.py", line 175, in _...

...#39;s samba_dlz complaining there's either something wrong in the AD or in the DLZ module. The Bind does not have any other zones than the DLZ. I have trouble connecting windows clients to my AD after the secondary DC took over. But as far as I can tell DNS works flawlessly. Oct 28 07:07:46 verdandi named[672]: sizing zone task pool based on 22 zones Oct 28 07:07:46 verdandi named[672]: Loading 'AD Zones' using driver dlopen Oct 28 07:07:46 verdandi named[672]: samba_dlz: starting configure Oct 28 07:07:46 verdandi named[672]: samba_dlz: Ignoring duplicate zone '1.16.172.in-addr.a...

Hi Marc, >> The cause is that the password change didn' reach both AD DCs, but only >> one. The other one still had the old value as could be seen by >> samba-tool ldapcmp. Restarting the DCs and waiting for a couple of >> seconds brings them back to sync and Windows logons work as they used to. >> Any idea, what I should do next time to obtain valuable output

...Zones,DC=ad,DC=microsult,DC=de" "(objectClass=dnsZone)" dn > > a useful command. It showed me that I added the wrong zones and that the > zones claimed to have missing SOA and NS are actually there. To cite the > most important parts of the logs: > > Dec 29 20:24:26 verdandi named[3695]: samba_dlz: starting configure > Dec 29 20:24:26 verdandi named[3695]: zone 10.16.172.in-addr.arpa/NONE: > has 0 SOA records > Dec 29 20:24:26 verdandi named[3695]: zone 10.16.172.in-addr.arpa/NONE: > has no NS records > Dec 29 20:24:26 verdandi named[3695]: samba_dlz: Fa...

It did happen again and this time I was a little less panicked and took some time to figure out what happened. On my primary DC (SAMBA) I did not notice anything extraordinary. However, my secondary (VERDANDI) reported issues: root at verdandi:~# samba-tool drs showrepl Default-First-Site-Name\VERDANDI DSA Options: 0x00000001 DSA object GUID: a03bbb51-1dca-44ae-a4d9-7aa8cb4a1ace DSA invocationId: 8bdb4f85-1da2-4f5a-b9a9-e8369d202745 ==== INBOUND NEIGHBORS ==== CN=Schema,CN=Configuration,DC=ad,DC=micr...

Hello , review bind9 options ... >> Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u >> bind -4 >> Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' >> '--mandir=/usr/share/man' '--infodir=/usr/share/info' >> '--sysconfdir=/etc/bind' '--localstatedir=/var' &...

...--8<----------- First DC: Default-First-Site-Name\SAMBA DSA Options: 0x00000001 DSA object GUID: b19509be-c3ee-4a58-9fc9-afd61759a23f DSA invocationId: 4f30d79d-2e9c-4235-88a1-c258b8622d23 ==== INBOUND NEIGHBORS ==== DC=DomainDnsZones,DC=ad,DC=microsult,DC=de Default-First-Site-Name\VERDANDI via RPC DSA object GUID: a03bbb51-1dca-44ae-a4d9-7aa8cb4a1ace Last attempt @ Mon May 18 20:33:36 2015 CEST was successful 0 consecutive failure(s). Last success @ Mon May 18 20:33:36 2015 CEST [...] ==== OUTBOUND NEIGHBORS ==== D...

...ldb -b "DC=DomainDnsZones,DC=ad,DC=microsult,DC=de" "(objectClass=dnsZone)" dn a useful command. It showed me that I added the wrong zones and that the zones claimed to have missing SOA and NS are actually there. To cite the most important parts of the logs: Dec 29 20:24:26 verdandi named[3695]: samba_dlz: starting configure Dec 29 20:24:26 verdandi named[3695]: zone 10.16.172.in-addr.arpa/NONE: has 0 SOA records Dec 29 20:24:26 verdandi named[3695]: zone 10.16.172.in-addr.arpa/NONE: has no NS records Dec 29 20:24:26 verdandi named[3695]: samba_dlz: Failed to configure zone...

...> Betreff: Re: Aw: Re: [Samba] samba_dlz Failed to configure reverse zone > >> > >> On 29/12/14 16:25, support at remsnet.de wrote: > >>> Hello , > >>> > >>> review bind9 options ... > >>> > >>>>> Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u > >>>>> bind -4 > >>>>> Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' > >>>>> '--mandir=/usr/share/man' '--infodir=/usr/share/info' > >>>>&g...

...: support at remsnet.de > Cc: samba at lists.samba.org > Betreff: Re: Aw: Re: [Samba] samba_dlz Failed to configure reverse zone > > On 29/12/14 16:25, support at remsnet.de wrote: > > Hello , > > > > review bind9 options ... > > > >>> Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u > >>> bind -4 > >>> Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' > >>> '--mandir=/usr/share/man' '--infodir=/usr/share/info' > >>> '--sysconfdir=/etc/bind...

...76b-9333-32d1c03d872c>;CN=Configuration,DC=ad,DC=microsult,DC=de gave 0 objects (done 0/0) 0 links (done 0/0 (as S-1-5-21-820921042-1573760902-1500171102-1000)) [2016/01/04 12:34:39.306100, 3] ../auth/credentials/credentials_krb5.c:532(cli_credentials_get_client_gss_creds) Credentials for VERDANDI$@AD.MICROSULT.DE will expire shortly (0 sec), must refresh credentials cache [2016/01/04 12:34:39.306295, 1] ../source4/auth/gensec/gensec_gssapi.c:644(gensec_gssapi_update) GSS client Update(krb5)(1) Update failed: Miscellaneous failure (see text): Matching credential (GC/samba.ad.microsu...

On 29/12/14 16:25, support at remsnet.de wrote: > Hello , > > review bind9 options ... > >>> Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u >>> bind -4 >>> Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' >>> '--mandir=/usr/share/man' '--infodir=/usr/share/info' >>> '--sysconfdir=/etc/bind' '--localstat...

...; Cc: samba at lists.samba.org >> Betreff: Re: Aw: Re: [Samba] samba_dlz Failed to configure reverse zone >> >> On 29/12/14 16:25, support at remsnet.de wrote: >>> Hello , >>> >>> review bind9 options ... >>> >>>>> Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u >>>>> bind -4 >>>>> Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' >>>>> '--mandir=/usr/share/man' '--infodir=/usr/share/info' >>>>> '--sysconfdir...

...Disk Test Share IPC$ IPC IPC Service (Samba BDC) ADMIN$ IPC IPC Service (Samba BDC) Anonymous login successful Server Comment --------- ------- SKULD Samba BDC VERDANDI Samba PDC Workgroup Master --------- ------- FULCRUM VERDANDI net view on the windows client lists all of the local systems, including the samba servers, just fine. The BDC is currently configured in this fashion, althoug...

...Re: [Samba] samba_dlz Failed to configure reverse zone >>>> >>>> On 29/12/14 16:25, support at remsnet.de wrote: >>>>> Hello , >>>>> >>>>> review bind9 options ... >>>>> >>>>>>> Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u >>>>>>> bind -4 >>>>>>> Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' >>>>>>> '--mandir=/usr/share/man' '--infodir=/usr/share/info' >>>&g...