Bug 9327 - DNS server shouldn't not start if DC is not marked has master NC for the DNS partitions
DNS server shouldn't not start if DC is not marked has master NC for the DNS ...
Status: NEW
Product: Samba 4.0
Classification: Unclassified
Component: DNS server
4.0.0rc2
All All
: P5 normal
: ---
Assigned To: Kai Blin
Samba QA Contact
:
Depends on:
Blocks:
  Show dependency treegraph
 
Reported: 2012-10-24 03:51 UTC by Matthieu Patou
Modified: 2012-11-09 12:43 UTC (History)
2 users (show)

See Also:


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Matthieu Patou 2012-10-24 03:51:58 UTC
If DNS related partitions are only partially replicated dnsRecord won't be present.

So if the NTDSDSA object of the DC doesn't have 

msDS-hasMasterNCs: DC=ForestDnsZones,DC=domain,DC=tld
msDS-hasMasterNCs: DC=DomainDnsZones,DC=domain,DC=tld

Then it shouldn't run.
Comment 1 Amitay Isaacs 2012-11-09 12:43:47 UTC
Do we need to implement this for DLZ also?  

If DLZ plugin does not load the zones, there is no way to tell bind to reload the zones at a later time without restarting BIND or reloading using rndc. Might be a good idea, so DNS server never will work even if BIND is started by mistake.

I guess same restriction can be added to DNS RPC server.  It's much easier for RPC server since it can check the NTDSDSA object each time a RPC query for DNS comes in and reply an error if we don't have full replica.