Bug 34693 - Migrate DNS data to DC=DomainDnsZones
Migrate DNS data to DC=DomainDnsZones
Status: RESOLVED DUPLICATE of bug 43692
Product: UCS
Classification: Unclassified
Component: Samba4
UCS 3.2
Other Linux
: P5 enhancement (vote)
: ---
Assigned To: Samba maintainers
:
: 30704 (view as bug list)
Depends on:
Blocks: 43692
  Show dependency treegraph
 
Reported: 2014-04-29 14:22 CEST by Arvid Requate
Modified: 2017-03-01 18:32 CET (History)
2 users (show)

See Also:
What kind of report is it?: Development Internal
What type of bug is this?: ---
Who will be affected by this bug?: ---
How will those affected feel about the bug?: ---
User Pain:
Enterprise Customer affected?:
School Customer affected?:
ISV affected?:
Waiting Support:
Flags outvoted (downgraded) after PO Review:
Ticket number:
Bug group (optional):
Max CVSS v3 score:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Arvid Requate univentionstaff 2014-04-29 14:22:11 CEST
Currently the DNS data is stored in Samba4 in the position

 CN=MicrosoftDNS,CN=System,$samba4_ldap_base

where samba-tool cannot find it. In the reverse direction our Bind9 does not by default look at the DNS zones stored below 

 DC=DomainDnsZones,$samba4_ldap_base

The second point is an issue e.g. for AD Takeover (Bug 34184).


Moreover all tools doing DNS operations via RPC following the [MS-DNSP] protocol don't see this DNS data. Example:
===========================================================================
root@master40:~# host -t srv _kerberos._tcp
_kerberos._tcp.ar320i1.qa has SRV record 0 100 88 master40.ar320i1.qa.
_kerberos._tcp.ar320i1.qa has SRV record 0 100 88 backup41.ar320i1.qa.
===========================================================================
vs.
===========================================================================
root@master40:~# samba-tool dns query localhost ar320i1.qa _kerberos._tcp SRV \
                                      -UAdministrator%univention
  Name=, Records=1, Children=0
    SRV: master40.ar320i1.qa. (88, 0, 100) (flags=f0, serial=1, ttl=900)
===========================================================================

See also:  samba-tool dns serverinfo localhost -UAdministrator%univention

I did not find the point in the MS protocol specs where a relation between DC=DomainDnsZones and the domain function level is defnied, but we should check the arguments for a migration of the DNS data to the DomainDnsZones partition.

As a bonus this would offer the possibility of transparent administration of DNS records directly in the Samba4 backend via samba-tool. Currently we can only do it indirectly via UDM and the S4 Connector.
Comment 1 Arvid Requate univentionstaff 2017-02-27 19:34:44 CET
*** Bug 30704 has been marked as a duplicate of this bug. ***
Comment 2 Arvid Requate univentionstaff 2017-02-28 11:08:13 CET

*** This bug has been marked as a duplicate of bug 43291 ***
Comment 3 Arvid Requate univentionstaff 2017-03-01 18:32:51 CET

*** This bug has been marked as a duplicate of bug 43692 ***