Bug 12823 - Samba doesn't recognise RootDNSServers as a zone
Summary: Samba doesn't recognise RootDNSServers as a zone
Status: CLOSED INVALID
Alias: None
Product: Samba 4.1 and newer
Classification: Unclassified
Component: DNS server (internal) (show other bugs)
Version: 4.6.0
Hardware: All All
: P5 normal (vote)
Target Milestone: ---
Assignee: Amitay Isaacs
QA Contact: Samba QA Contact
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2017-06-06 14:32 UTC by Rowland Penny
Modified: 2020-11-13 20:25 UTC (History)
3 users (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Rowland Penny 2017-06-06 14:32:53 UTC 
The DN: DC=RootDNSServers,CN=MicrosoftDNS,DC=DomainDnsZones,DC=samdom,DC=example,DC=com is a dns zone, it has the objectclass 'dnsZone'

Samba totally ignores this zone and you cannot update any of the zone records.
Comment 1 Amitay Isaacs 2020-11-11 05:33:09 UTC 
This is by design. 

Questions:

* Do we want to override the root dns servers for BIND? 
* Does BIND allow root zone to be created dynamically?
Comment 2 Amitay Isaacs 2020-11-11 05:36:13 UTC 
The other potential use for this is if the internal dns server uses root servers for resolution.
Comment 3 Rowland Penny 2020-11-11 08:26:42 UTC 
Why would the internal (or Bind9) use the root dns servers ? The AD dns server is supposed to be authoritative for the AD domains, everything else is forwarded.
Comment 4 Amitay Isaacs 2020-11-12 04:54:38 UTC 
(In reply to Rowland Penny from comment #3)

What potential use do you envisage for RootDNSServers zone?
Comment 5 Rowland Penny 2020-11-12 19:23:46 UTC 
(In reply to Amitay Isaacs from comment #4)
I know I reported this bug, but it was after a discussion on the samba mailing list and now, after I have thought about it, perhaps we should just close it, a Samba AD DC has absolutely no reason to use the root dns servers. If anything, the root dns servers shouldn't be in AD, does Windows have them ?
Comment 6 Amitay Isaacs 2020-11-13 03:37:31 UTC 
(In reply to Rowland Penny from comment #5)

As far as I remember, Windows DNS server is not just primary nameserver, but can also act as a resolver.  So potentially it can use the RootDNSServers zone to consult the top-level (.) nameservers.

Samba AD will only ever act as a primary nameserver for the listed domains, so I think we can close this defect.
Comment 7 Rowland Penny 2020-11-13 20:25:04 UTC 
Closing bug report, not valid.