similar to: Phantom DNS records visible with dig, but not samba-tool dns

On Mon, 12 Sep 2016 15:41:24 -0400 lingpanda101--- via samba <samba at lists.samba.org> wrote: > On 9/12/2016 3:23 PM, ash-samba--- via samba wrote: > > On 09/09/16 16:35, lingpanda101--- via samba wrote: > >> On 9/9/2016 10:59 AM, ash-samba--- via samba wrote: > >>> We appear to have some phantom DNS records on both our domain > >>> controllers.

We appear to have some phantom DNS records on both our domain controllers. We can see the records using "dig", but not with samba-tool. We can't remove the records either. (v-ward and v-fief are the DCs, Hawaii and Alaska are old DCs which were demoted without errors, I'm trying to clean up some DNS records which don't seem to have been cleaned). All machines are

On Tue, 13 Sep 2016 15:20:29 +0100 ash-samba--- via samba <samba at lists.samba.org> wrote: > > And to get it editable: > > > > ldbedit -e nano -H /usr/local/samba/private/sam.ldb --cross-ncs > > --show-binary -b > > 'DC=_ldap._tcp.pdc,DC=_msdcs.samdom.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=samdom,DC=example,DC=com' > > -s base > >

On 9/12/2016 3:23 PM, ash-samba--- via samba wrote: > On 09/09/16 16:35, lingpanda101--- via samba wrote: >> On 9/9/2016 10:59 AM, ash-samba--- via samba wrote: >>> We appear to have some phantom DNS records on both our domain >>> controllers. >>> [...] >>> # dig _ldap._tcp.dc._msdcs.chester-dc.example.com srv @10.4.4.155 >>> [...] >>>

> And to get it editable: > > ldbedit -e nano -H /usr/local/samba/private/sam.ldb --cross-ncs > --show-binary -b > 'DC=_ldap._tcp.pdc,DC=_msdcs.samdom.example.com,CN=MicrosoftDNS,DC=ForestDnsZones,DC=samdom,DC=example,DC=com' > -s base > > All on one line, run on a DC. > > Rowland The problem is that when I save and exit (even if I make no ldif changes), I

Am 08.01.2016 um 12:03 schrieb Ole Traupe: > > > Am 08.01.2016 um 11:47 schrieb Rowland penny: >> On 08/01/16 10:31, Ole Traupe wrote: >>> >>> >>> Am 04.01.2016 um 19:24 schrieb Rowland penny: >>>> On 04/01/16 17:23, Ole Traupe wrote: >>>>> No ideas on that? >>>>> >>>>> Ole >>>>>

Hi all, I'm unable to delete a DNS entry, this entry does not exist. The entry is A record in _msdcs zone for an old DC which was demoted. I tried to use samba-tool dns to delete it but without success: samba-tool dns delete m703 _msdcs.ad.domain.tld \ m701._msdcs.ad.domain.tld A 10.16.28.27 -k yes ERROR: Record does not exist I found undeleted entry in LDAP, removed it without success:

We have a Samba primary domain controller "empire", which seems to have DNS update issues. We can seem to query all records on empire just fine, and we can modify IPs for existing records, but it will not delete or add new records. Attempting to delete via the AD tools shows "Local security authority database contains an internal inconsistency". Adding a record on the command

The system described by https://lists.samba.org/archive/samba/2016-May/199829.html (Invalid data for index DN=@INDEX:OBJECTCLASS:DNSNODE) now appears to perform DNS updates correctly, all systems are 4.2.10-Debian, and we've been able to add a user and a new DC. (Thanks for the help!) Synchronisation between v-ward (the new local DC), and empire isn't entirely working, though. >

On 08/01/16 10:31, Ole Traupe wrote: > > > Am 04.01.2016 um 19:24 schrieb Rowland penny: >> On 04/01/16 17:23, Ole Traupe wrote: >>> No ideas on that? >>> >>> Ole >>> >>> >>> >>> Am 18.12.2015 um 13:44 schrieb Ole Traupe: >>>> I accidentally created a SRV record with a false port. I then >>>>

Hi I have multi domain environment with root domain and subdomain. Forest and domain level windows 2003 native. Also forest prep and domain prep did for sccm 2007 ocs 2007 and Exchange 2003. After join Samba to domain like ad dc I had some problem with replication: ################################################# [root at dc03 ~]# samba-tool drs replicate dc02 dc03

On 04/01/16 17:23, Ole Traupe wrote: > No ideas on that? > > Ole > > > > Am 18.12.2015 um 13:44 schrieb Ole Traupe: >> I accidentally created a SRV record with a false port. I then updated >> the port but was afraid of any consequences. So I deleted that record >> again and wanted to re-create it. But now I can't: "The record >> already

Anyone checked/reproduced this steps with ADSI Editor? Regards Tim Am 8. M?rz 2015 23:00:33 MEZ, schrieb Peter Serbe <peter at serbe.ch>: >Easy job with the right tool! > >Open Apache Directory Studio, select the LDAP browser -> New Connection > >Enter the server/hostname: dc1.samdom.com -> next >Select simple authentication, user: samdom\administrator, password

Am 17.12.2015 um 16:10 schrieb Rowland penny: > On 17/12/15 14:56, Ole Traupe wrote: >> >> >> Am 17.12.2015 um 15:33 schrieb Rowland penny: >>> On 17/12/15 13:54, Ole Traupe wrote: >>>> Rowland, thank you, but before we do that: >>>> >>>> - what now with the 'gc' record? 2nd DC yes or no? >>> >>> Which one

Thank You Rowland. I did it like You say, killed avahi, added the record without domain suffix, but nothing changed, and the record seems no different compared to other records added with the suffix some time before. My Samba DNS record looks like this (and I see nothing special in there):   Name=, Records=3, Children=0     SOA: serial=39, refresh=900, retry=600, expire=86400, minttl=3600,

Am 17.12.2015 um 15:33 schrieb Rowland penny: > On 17/12/15 13:54, Ole Traupe wrote: >> Rowland, thank you, but before we do that: >> >> - what now with the 'gc' record? 2nd DC yes or no? > > Which one ? I have these: > > dn: > DC=_gc._tcp.Default-First-Site-Name._sites,DC=samdom.example.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=samdom,DC=example,DC=com

Hello Sebastian, Am 08.03.2015 um 20:33 schrieb Sebastian Henrich: > I found a way to delete these ghost entries. All you need is an LDAP > tool like Apache Directory Studio. Then you connect via LDAP to the AD. > Inside the LDAP tree is a subtree named msdns (or similiar, I'm not able > to access my workstation at the moment). There you can find the buggy > entry and delete

> This certainly sounds stressful. Yes! > Another way to (on a backup, particularly given your history above) remove the index is with samba-tool dbcheck --reindex. Re-indexing... completed re-index OK 0 root at empire:~[0] samba-tool dns add empire chester-dc.example.com p-cats A 10.4.4.142 -U ash Password for [CHESTER-DC\ash]: Record added successfully Thanks! > The missing

Hi, I'm trying to remove a DC from a site we have shutdown. The demote command is throwing up this message: [root at aragorn ~]# samba-tool domain demote --remove-other-dead-server=pippin Removing nTDSConnection: CN=eca08dbb-1f34-476e-96dd-33ec22b2bc94,CN=NTDS Settings,CN=GANDALF,CN=Servers,CN=SAOPAULO,CN=Sites,CN=Configuration,DC=e-trust,DC=com,DC=br Removing nTDSDSA: CN=NTDS

> OK, could this just be a permissions problem i.e. user 'ash' doesn't > have the required rights to add a dns record, try again, but this time > use the 'Administrator' user. I've repeated the "samba-tool dns add", and the "samba-tool domain join" commands with "-UAdministrator". I get the same errors with either user. (the error