similar to: Samba 4 internal DNS - how to modify SOA record

Hi, We have outdated SOA information in our samba DNS. We used to have a DC1, and it is no more, however it's listed in our SOA records on both remaining DC's. I think this is not correct. I am under the impression that in order to get full failover support, all DC's need to have listed themselves as SOA. This is also what google tells me:

Hello. I had encountered a few problems with 2 Samba 4 rc3 DCs serving domain migrated from Windows 2003 R2. I post them altogether, since they look related. 1. Unable to create or delete GPOs. # bin/samba-tool gpo create somegpo ERROR(ldb): uncaught exception - LDAP error 50 LDAP_INSUFFICIENT_ACCESS_RIGHTS - <dsdb_access: Access check failed on

On 27/11/15 15:24, mathias dufresne wrote: > > > 2015-11-27 15:49 GMT+01:00 Rowland Penny <rowlandpenny241155 at gmail.com > <mailto:rowlandpenny241155 at gmail.com>>: > > On 27/11/15 14:30, James wrote: > > On 11/27/2015 9:16 AM, Rowland Penny wrote: > > On 27/11/15 13:23, James wrote: > > On 11/26/2015 11:12

On 27/11/15 18:03, James wrote: > On 11/27/2015 10:43 AM, Rowland Penny wrote: >> On 27/11/15 15:24, mathias dufresne wrote: >>> >>> >>> 2015-11-27 15:49 GMT+01:00 Rowland Penny >>> <rowlandpenny241155 at gmail.com <mailto:rowlandpenny241155 at gmail.com>>: >>> >>> On 27/11/15 14:30, James wrote: >>>

On 02/12/15 09:28, mathias dufresne wrote: > 2015-11-27 16:43 GMT+01:00 Rowland Penny <rowlandpenny241155 at gmail.com>: > >> On 27/11/15 15:24, mathias dufresne wrote: >> >>> >>> 2015-11-27 15:49 GMT+01:00 Rowland Penny <rowlandpenny241155 at gmail.com >>> <mailto:rowlandpenny241155 at gmail.com>>: >>> >>>

Am 17.12.2015 um 16:10 schrieb Rowland penny: > On 17/12/15 14:56, Ole Traupe wrote: >> >> >> Am 17.12.2015 um 15:33 schrieb Rowland penny: >>> On 17/12/15 13:54, Ole Traupe wrote: >>>> Rowland, thank you, but before we do that: >>>> >>>> - what now with the 'gc' record? 2nd DC yes or no? >>> >>> Which one

2016-02-29 0:05 GMT+01:00 Reindl Harald <h.reindl at thelounge.net>: > > > Am 28.02.2016 um 23:54 schrieb Rowland penny: > >> On 28/02/16 22:42, Reindl Harald wrote: >> >>> >>> >>> Am 28.02.2016 um 23:10 schrieb Rowland penny: >>> >>>> On 28/02/16 21:56, Reindl Harald wrote: >>>> >>>>>

Thank You Rowland. I did it like You say, killed avahi, added the record without domain suffix, but nothing changed, and the record seems no different compared to other records added with the suffix some time before. My Samba DNS record looks like this (and I see nothing special in there):   Name=, Records=3, Children=0     SOA: serial=39, refresh=900, retry=600, expire=86400, minttl=3600,

On 01/03/16 13:23, Reindl Harald wrote: > > > Am 01.03.2016 um 11:23 schrieb mathias dufresne: >> Several SOA is easy to design without breaking RFC: as every DNS server >> in AD is able to modify the zone, every DNS server in AD is SOA. As any >> DNS server is SOA and only one SOA can be returned, these DNS server >> must reply "I am SOA". >> 10 DC

Hi. I'm running Sernet Samba 4.7 on Ubuntu 16. I noticed that when my first DC went away, I had problems. The SOA record for the domain still points at that first DC. I found, in this entry from 2014 ( https://lists.samba.org/archive/samba/2014-August/184301.html) that "Windows AD servers actually 'lie' about the SOA record, and always say that it points to themselves. So in a

Am 13.03.19 um 18:50 schrieb Rowland Penny via samba: > Try running 'samba-tool ldapcmp ldap://dc1 ldap://dc2' thanks! I get differences, too many to post here, but I assume mostly related to the drift between the 2 dcs now? (lastLogonTimestamp seems obvious to me) What might solve the initial problem *maybe* * Comparing [DNSFOREST] context... * Objects to be compared: 19

Replaced as instructed and ran the command. It claimed "success", however (RSAT) DNS Manager still shows demoted DC as SOA record. BTW, this demoted DC is now shut off. Suggestions? > Run this on a DC: > > samba-tool dns delete 127.0.0.1 samdom.example.com @ NS fqdn_string -U > Administrator > > Replace: 'samdom.example.com' with your dns domain name. >

[root at smb4-1 ~ (master)]# samba-tool dns query localhost brockley.harte-lyne.ca brockley.harte-lyne.ca ALL -U administrator Password for [BROCKLEY\administrator]: Name=, Records=4, Children=0 SOA: serial=3, refresh=900, retry=600, expire=86400, minttl=3600, ns=SMB4-1.brockley.harte-lyne.ca., email=hostmaster.brockley.harte-lyne.ca. (flags=600000f0, serial=110, ttl=3600) NS:

Hello list..:-) i have a little problem and don´t find a solution for it. Some time ago our first DC died and I replaced it with a new one with a different name but the same IP.didn´t want to change the DNS entry in all the clients. Guess since than the dynamic DNS update wasn´t working anymore, so I tried to find out the reason. What I found is that the SOA record was pointing still to the

Hi, is there a way to do something alongs the lines of Exec { "assembleBINDZoneFile": ... require => [File["${bindzoneassemblyscript}"], Dnsrecord[ <<| |>> ] ], } I''ve written a DNS record Type/Provider. Exporting Dnsrecord resources with @@ also works nicely. Before the zonefine gets assembled, I want to make sure that puppet first collects

Hi, How can the SOA record of a domain be changed? I need to decrease expire and minttl Thanks. -- P?ter Varkoly Greuleinweg 37. D-90411 N?rnberg

On 27/11/15 14:30, James wrote: > On 11/27/2015 9:16 AM, Rowland Penny wrote: >> On 27/11/15 13:23, James wrote: >>> On 11/26/2015 11:12 AM, Ole Traupe wrote: >>>> >>>>>> Then you re-run your test with only DC2 up and running. >>>>>> Note DNS have need time to be updated if you are using others DNS >>>>>> servers

On Sun, Sep 22, 2019 at 7:19 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 22/09/2019 13:08, Christopher Wooley wrote: > > I used the distro's compilation, samba -V : Version 4.7.6-Ubuntu, but > > I think it's already running DLZ. I know I recompiled Bind9 in order > > to add the DLZ necessary flags. > Then you were wasting your time,

Hi I have a setup with 2 DC on a main site, et 14 DCs which are located on 7 AD sites. I recently noticed in my DNS zones that my SOA record is associated to the last DC that was joined to the domain. But this DC is located on one of the remote sites. Is this behavior normal or would it be better if I updated this record via "samba-tool dns update" to point it to one of my 3 main

I will give it a try on weekend and let you know.. Thanks a lot Frank Am 10.11.2016 um 17:03 schrieb Rowland Penny via samba: > On Thu, 10 Nov 2016 15:55:03 +0100 > "Rauer, Frank via samba" <samba at lists.samba.org> wrote: > >> Hi Rowland, >> >> I followed this page >>