Bug 34693 - Migrate DNS data to DC=DomainDnsZones
Migrate DNS data to DC=DomainDnsZones
Status: RESOLVED DUPLICATE of bug 43692
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 3.2
Other Linux
: P5 enhancement (vote)
: ---
Assigned To: Samba maintainers
: 30704 (view as bug list)
Depends on:
Blocks: 43692
  Show dependency treegraph
Reported: 2014-04-29 14:22 CEST by Arvid Requate
Modified: 2017-03-01 18:32 CET (History)
2 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2014-04-29 14:22:11 CEST
Currently the DNS data is stored in Samba4 in the position


where samba-tool cannot find it. In the reverse direction our Bind9 does not by default look at the DNS zones stored below 


The second point is an issue e.g. for AD Takeover (Bug 34184).

Moreover all tools doing DNS operations via RPC following the [MS-DNSP] protocol don't see this DNS data. Example:
root@master40:~# host -t srv _kerberos._tcp
_kerberos._tcp.ar320i1.qa has SRV record 0 100 88 master40.ar320i1.qa.
_kerberos._tcp.ar320i1.qa has SRV record 0 100 88 backup41.ar320i1.qa.
root@master40:~# samba-tool dns query localhost ar320i1.qa _kerberos._tcp SRV \
  Name=, Records=1, Children=0
    SRV: master40.ar320i1.qa. (88, 0, 100) (flags=f0, serial=1, ttl=900)

See also:  samba-tool dns serverinfo localhost -UAdministrator%univention

I did not find the point in the MS protocol specs where a relation between DC=DomainDnsZones and the domain function level is defnied, but we should check the arguments for a migration of the DNS data to the DomainDnsZones partition.

As a bonus this would offer the possibility of transparent administration of DNS records directly in the Samba4 backend via samba-tool. Currently we can only do it indirectly via UDM and the S4 Connector.
Comment 1 Arvid Requate univentionstaff 2017-02-27 19:34:44 CET
*** Bug 30704 has been marked as a duplicate of this bug. ***
Comment 2 Arvid Requate univentionstaff 2017-02-28 11:08:13 CET

*** This bug has been marked as a duplicate of bug 43291 ***
Comment 3 Arvid Requate univentionstaff 2017-03-01 18:32:51 CET

*** This bug has been marked as a duplicate of bug 43692 ***