UCS DNS don't have AD dc._msdcs records

UCS - Univention Corporate Server
, ,
#1

Hi Users,

i’ve an single UCS 4 (4.4-8 errata1007) Server don’t hosting needed AD DNS records, so new Win 10 Clients cannot join Domain.

If i query for this records:

— >B —
root@xx:~# dig @127.0.0.1 -t SRV _ldap._tcp.dc._msdcs.yy.local

; <<>> DiG 9.10.3-P4-Univention <<>> @127.0.0.1 -t SRV _ldap._tcp.dc._msdcs.yy.local
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 34215
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;_ldap._tcp.dc._msdcs.yy.local. IN SRV

;; AUTHORITY SECTION:
yy.local. 3600 IN SOA xx.yy.local. root.yy.local. 312 28800 7200 604800 3600

;; Query time: 2 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 13 06:49:42 CEST 2021
;; MSG SIZE rcvd: 107
— >B —

DNS Records without .dc._msdcs are found:

— >B —
root@xx:~# dig @127.0.0.1 -t SRV _ldap._tcp.yy.local

; <<>> DiG 9.10.3-P4-Univention <<>> @127.0.0.1 -t SRV _ldap._tcp.yy.local
; (1 server found)
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 24671
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 2

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;_ldap._tcp.yy.local. IN SRV

;; ANSWER SECTION:
_ldap._tcp.yy.local. 900 IN SRV 0 100 389 xx.yy.local.

;; AUTHORITY SECTION:
yy.local. 900 IN NS xx.yy.local.

;; ADDITIONAL SECTION:
xx.yy.local. 900 IN A

;; Query time: 2 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Tue Jul 13 06:54:00 CEST 2021
;; MSG SIZE rcvd: 116
— >B —

Any Idea what happend? How can i resolve this?

Thanks a lot for Help

Robert

#2

samba_dnsupdate --verbose --all-names

This commands forces an update of all records specified in the /var/lib/samba/private/dns_update_list file.

#3

Hi bbassotti,

thanks for info. I had run the script and the entries are created.

So i hope it solves my issue.

Thanks again for help

Robert

Mastodon