Re: Mixed DC environment - can't read one DNS Zone

On Sat, 25 Jul 2026 09:40:00 -0400
Paul Rensing via samba <[email protected]> wrote:

> Thanks for the continued help.
> 
> I get ("foo" is not the real domain):
> 
>     # ldbsearch --cross-ncs -H ldap://linux-ad-1 -P -b 'dc=foo,dc=net'
>     -s sub '(objectclass=dnszone)' dn
>     # record 1
>     dn:
>     DC=180.10.in-addr.arpa,CN=MicrosoftDNS,DC=DomainDnsZones,DC=foo,DC=net
> 

<SNIP>

Okay, you have the required forward zone:

DC=foo.net,CN=MicrosoftDNS,DC=DomainDnsZones,DC=foo,DC=net

You have the required forest zone:

DC=_msdcs.foo.net,CN=MicrosoftDNS,DC=ForestDnsZones,DC=foo,DC=net

You also have other forward zones:

DC=support.foo.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=foo,DC=net
DC=portal.foo.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=foo,DC=net
DC=fenway.foo.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=foo,DC=net
DC=portal-dev.foo.com,CN=MicrosoftDNS,DC=DomainDnsZones,DC=foo,DC=net

Are these required ?
Could these be for AD subdomains ? Samba does not (yet) do subdomains.

You have the two (unused by Samba) RootDNSServers zones.

You finally have 10 reverse zones, these are the least of your worries,
you could delete them all and AD should keep working (I am not saying
you should delete them).

I only have the forward, forest and one reverse zone and if I enter (on
a Samba DC):

samba-tool dns query localhost samdom.example.com @ ALL -U rowland

I get:

  Name=, Records=9, Children=0
    SOA: serial=584, refresh=900, retry=600, expire=86400, minttl=3600, ns=dc04.samdom.example.com., email=hostmaster.samdom.example.com. (flags=600000f0, serial=584, ttl=3600)
    NS: dc03.samdom.example.com. (flags=600000f0, serial=110, ttl=900)
    NS: dc01.samdom.example.com. (flags=600000f0, serial=110, ttl=900)
    NS: dc02.samdom.example.com. (flags=600000f0, serial=110, ttl=900)
    NS: dc04.samdom.example.com. (flags=600000f0, serial=110, ttl=900)
    A: 192.168.1.5 (flags=600000f0, serial=110, ttl=900)
    A: 192.168.1.2 (flags=600000f0, serial=110, ttl=900)
    A: 192.168.1.3 (flags=600000f0, serial=110, ttl=900)
    A: 192.168.1.4 (flags=600000f0, serial=110, ttl=900)
  Name=_sites, Records=0, Children=1
  Name=_tcp, Records=0, Children=4
  Name=_udp, Records=0, Children=2
  Name=cm4nas, Records=1, Children=0
    A: 192.168.1.104 (flags=f0, serial=110, ttl=3600)
  Name=DC01, Records=1, Children=0
    A: 192.168.1.2 (flags=f0, serial=296, ttl=900)
<SNIP>

To put it another way, it works.

What do you have in the following files on the Samba AD DC ?

/etc/hostname
/etc/hosts
/etc/resolv.conf
/etc/samba/smb.conf

Perhaps one of those is configured incorrectly.

Rowland
  

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba