how do i initiate that?
some commands failed
then i went back to a zfs snapshot
after reboot a join was possible with win 10 test machine
the old sbs also could be joined
the issue were non resolving dns entries i´ve seen in webfrontend, but not in nslookup
any idea?
Problem back again. Workstation can login, Terminalserver cant.
Please help
sometimes login on ts possible, sometimes not.
join not possible
Hi,
what you are posting here is the Samba DNS
https://help.univention.com/uploads/default/original/2X/f/f0aa58a902d6c7a3a2bf909f69d7ba608558756b.png
an here LDAP
https://help.univention.com/uploads/default/original/2X/4/44a0e77e68f8908cf2aac42f7e779f22b39da4e9.png
I think there should be a way provided by Univention to only recreate s4 dns from ldap dns !!
you can try to add the missing dns entries throut RSAT Tools and Windows DNS Management Tool - but i don’t know if this gets synced tp ldap as the records exists already there
rg
Christian
ucr set dns/backend=‘ldap’
/etc/init.d/bind9 restart
helped for the moment.
can i keep hat setting?
Yes you can use also openLDAP as backend. AFAIK it would only be a problem if you are using dynamic IPs / DNS.
To fix the problem you could try an resync, e.g.
/usr/share/univention-s4-connector/resync_object_from_ucs.py --filter relativeDomainName=_ldap._tcp
But this is without warranty. You should do a backup first.
Hi @cpzengel,
I would really appreciate to have a broad look into the /var/log/daemon.* Logfiles about bind9. At least I ask you to post the tail -f /var/log/daemon.log | grep 'named' when restarting the dns daemon systemctrl restart bind9.service.
Hi @cpzengel
as you can see in the ‘daemon.log’:
daemon.log - bind9 start <click to enlarge>
Nov 12 09:30:18 ucs-master named[5993]: ----------------------------------------------------
Nov 12 09:30:18 ucs-master named[5993]: BIND 9 is maintained by Internet Systems Consortium,
Nov 12 09:30:18 ucs-master named[5993]: Inc. (ISC), a non-profit 501©(3) public-benefit
Nov 12 09:30:18 ucs-master named[5993]: corporation. Support and training for BIND 9 are
Nov 12 09:30:18 ucs-master named[5993]: available at https://www.isc.org/support
Nov 12 09:30:18 ucs-master named[5993]: ----------------------------------------------------
Nov 12 09:30:18 ucs-master named[5993]: adjusted limit on open files from 4096 to 1048576
Nov 12 09:30:18 ucs-master named[5993]: found 2 CPUs, using 2 worker threads
Nov 12 09:30:18 ucs-master named[5993]: using 2 UDP listeners per interface
Nov 12 09:30:18 ucs-master named[5993]: using up to 4096 sockets
Nov 12 09:30:18 ucs-master named[5993]: loading configuration from ‘/etc/bind/named.conf.samba4’
Nov 12 09:30:18 ucs-master named[5993]: reading built-in trusted keys from file ‘/etc/bind/bind.keys’
Nov 12 09:30:18 ucs-master named[5993]: using default UDP/IPv4 port range: [1024, 65535]
Nov 12 09:30:18 ucs-master named[5993]: using default UDP/IPv6 port range: [1024, 65535]
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv6 interfaces, port 53
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv4 interface lo, 127.0.0.1#53
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv4 interface eth0, 10.0.0.4#53
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv4 interface eth0:1, 10.0.0.200#53
Nov 12 09:30:18 ucs-master named[5993]: listening on IPv4 interface docker0, 172.17.42.1#53
Nov 12 09:30:18 ucs-master named[5993]: generating session key for dynamic DNS
Nov 12 09:30:18 ucs-master named[5993]: sizing zone task pool based on 1 zones
Nov 12 09:30:18 ucs-master named[5993]: Loading ‘samba4.zone’ using driver dlopen
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: started for DN DC=domain,DC=local
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: starting configure
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: trying partition ‘CN=MicrosoftDNS,CN=System,DC=domain,DC=local’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: configured writeable zone ‘0.0.10.in-addr.arpa’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: pre-W2k3 zone found
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=local’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: configured writeable zone ‘domain.local’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=local’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: configured writeable zone ‘myself.dyndns.org’
Nov 12 09:30:19 ucs-master named[5993]: samba_dlz: Ignoring dnsZone _msdcs.domain.local
Nov 12 09:30:19 ucs-master named[5993]: set up managed keys zone for view _default, file ‘managed-keys.bind’
the Zone ‘_msdcs.domain.local’ is ignored because there is a ‘pre-W2k3 zone’ found - a so called ‘legacy zone’.
There is a Script to migrate_legacy_dns_zones.sh (10,5 KB), you might give it a try to automatically fix that issue.
e08003da2ee3b63dca0c9efffbaa630c555886b1.sh: 25: e08003da2ee3b63dca0c9efffbaa630c555886b1.sh: Syntax error: “(” unexpected (expecting “}”)
strange name came from wget
If you want to directly download the Script to your server, you need to specify the appropriate name:
wget -o '/tmp/migrate_legacy_dns_zones.sh' https://help.univention.com/uploads/default/original/2X/e/e08003da2ee3b63dca0c9efffbaa630c555886b1.sh
or you download and transfer the file via scp (WinSCP).
sh migrate_legacy_dns_zones.sh
migrate_legacy_dns_zones.sh: 1: migrate_legacy_dns_zones.sh: --2017-11-13: not found
migrate_legacy_dns_zones.sh: 2: migrate_legacy_dns_zones.sh: Syntax error: “(” unexpected
The command is wrong. It has to be
wget -O '/tmp/migrate_legacy_dns_zones.sh' https://help.univention.com/uploads/default/original/2X/e/e08003da2ee3b63dca0c9efffbaa630c555886b1.sh
“-o” means that the output of wget will be written to the given file.
download not the problem
migrate_legacy_dns_zones.sh: 25: migrate_legacy_dns_zones.sh: Syntax error: “(” unexpected (expecting “}”)
this seemed to be malformated due to Windows/Download copied to Linux. With the command dos2unix you can reformat the file to execute it properly.
currently not working with 4.3
please provide new download url, currently problem with old ticket
Download now fine, but it says
INFO: No dnsZone objects found under CN=System, nothing to do.