Author Topic: [SOLVED] Configuring DNS updates for all DHCP leases (not just domain members)?  (Read 16835 times)

sspeed

  • Zen Apprentice
  • *
  • Posts: 22
  • Karma: +1/-0
    • View Profile
Looking around, it seems maybe I need to populate something like this into the named.conf?  But that file regenerates automatically.

allow-update { 172.22.0.0/16;};
« Last Edit: November 22, 2019, 11:15:34 pm by sspeed »

covex

  • Zen Apprentice
  • *
  • Posts: 13
  • Karma: +3/-1
    • View Profile
I have the same issue on 6.0 - my question however is - how to get all records of the DHCP and DNS synced at the first place.

samba-tool dns query ad.my.domain my.domain @ ALL

shows results that absolutely do not match the dhcpd.conf.

samba_dnsupdate --verbose --all-names

does nothing with dhcp client names... it only synces whats in /var/lib/samba/private/dns_update_list

 I can do that manually via samba-tool dns but it is very tedious even for few addresses.

Any ideas?

killmasta93

  • Zen Monk
  • **
  • Posts: 77
  • Karma: +14/-0
    • View Profile
Hi
Anyone else has gotten this?
going insanse trying to fix this issue

Code: [Select]
r 19 18:35:46 zentyal named[14741]: samba_dlz: cancelling transaction on zone test.local
Apr 19 18:35:49 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: starting transaction on zone test.local
Apr 19 18:35:49 zentyal named[14741]: client @0x7f0c3c11da90 192.168.0.22#53411: update 'test.local/IN' denied
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: cancelling transaction on zone test.local
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: starting transaction on zone test.local
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: disallowing update of signer=WINDOWS10-PC\$\@TEST.LOCAL name=windows10-pc.test.local type=AAAA error=insufficient access rights
Apr 19 18:35:49 zentyal named[14741]: client @0x7f0c3c11da90 192.168.0.22#61540/key WINDOWS10-PC\$\@TEST.LOCAL: updating zone 'test.local/NONE': update failed: rejected by secure update (REFUSED)
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: cancelling transaction on zone test.local
Apr 19 18:36:40 zentyal named[14741]: resolver priming query complete
Apr 19 18:36:49 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:37:50 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:38:46 zentyal samba[1864]: [2022/04/19 18:38:46.438481,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Apr 19 18:38:46 zentyal samba[1864]:   /usr/sbin/samba_kcc: ldb_wrap open of secrets.ldb
Apr 19 18:38:50 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:39:50 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:40:49 zentyal named[14741]: samba_dlz: starting transaction on zone test.local
Apr 19 18:40:49 zentyal named[14741]: client @0x7f0c3c100b70 192.168.0.22#65076: update 'test.local/IN' denied
Apr 19 18:40:49 zentyal named[14741]: samba_dlz: cancelling transaction on zone test.local
Apr 19 18:40:49 zentyal named[14741]: samba_dlz: starting transaction on zone test.local
Apr 19 18:40:49 zentyal named[14741]: samba_dlz: disallowing update of signer=WINDOWS10-PC\$\@TEST.LOCAL name=windows10-pc.test.local type=AAAA error=insufficient access rights
Apr 19 18:40:49 zentyal named[14741]: client @0x7f0c3c100b70 192.168.0.22#53010/key WINDOWS10-PC\$\@TEST.LOCAL: updating zone 'test.local/NONE': update failed: rejected by secure update (REFUSED)

turalyon

  • Zen Warrior
  • ***
  • Posts: 115
  • Karma: +12/-0
    • View Profile
Hi
Anyone else has gotten this?
going insanse trying to fix this issue

Code: [Select]
r 19 18:35:46 zentyal named[14741]: samba_dlz: cancelling transaction on zone test.local
Apr 19 18:35:49 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: starting transaction on zone test.local
Apr 19 18:35:49 zentyal named[14741]: client @0x7f0c3c11da90 192.168.0.22#53411: update 'test.local/IN' denied
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: cancelling transaction on zone test.local
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: starting transaction on zone test.local
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: disallowing update of signer=WINDOWS10-PC\$\@TEST.LOCAL name=windows10-pc.test.local type=AAAA error=insufficient access rights
Apr 19 18:35:49 zentyal named[14741]: client @0x7f0c3c11da90 192.168.0.22#61540/key WINDOWS10-PC\$\@TEST.LOCAL: updating zone 'test.local/NONE': update failed: rejected by secure update (REFUSED)
Apr 19 18:35:49 zentyal named[14741]: samba_dlz: cancelling transaction on zone test.local
Apr 19 18:36:40 zentyal named[14741]: resolver priming query complete
Apr 19 18:36:49 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:37:50 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:38:46 zentyal samba[1864]: [2022/04/19 18:38:46.438481,  0] ../lib/util/util_runcmd.c:327(samba_runcmd_io_handler)
Apr 19 18:38:46 zentyal samba[1864]:   /usr/sbin/samba_kcc: ldb_wrap open of secrets.ldb
Apr 19 18:38:50 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:39:50 zentyal dhcpd[3779]: DHCPREQUEST for 192.168.0.21 from 54:ee:75:98:1f:c1 via eth0: unknown lease 192.168.0.21.
Apr 19 18:40:49 zentyal named[14741]: samba_dlz: starting transaction on zone test.local
Apr 19 18:40:49 zentyal named[14741]: client @0x7f0c3c100b70 192.168.0.22#65076: update 'test.local/IN' denied
Apr 19 18:40:49 zentyal named[14741]: samba_dlz: cancelling transaction on zone test.local
Apr 19 18:40:49 zentyal named[14741]: samba_dlz: starting transaction on zone test.local
Apr 19 18:40:49 zentyal named[14741]: samba_dlz: disallowing update of signer=WINDOWS10-PC\$\@TEST.LOCAL name=windows10-pc.test.local type=AAAA error=insufficient access rights
Apr 19 18:40:49 zentyal named[14741]: client @0x7f0c3c100b70 192.168.0.22#53010/key WINDOWS10-PC\$\@TEST.LOCAL: updating zone 'test.local/NONE': update failed: rejected by secure update (REFUSED)

Hi,

Those messages are normal either if you don't have enabled the feature DDNS or your Windows machines use the DNS option 'Register this connections addresses in DNS'.

--
“This world is ours, and by the Holy Light we will keep it safe, now and forever".

killmasta93

  • Zen Monk
  • **
  • Posts: 77
  • Karma: +14/-0
    • View Profile
thanks for the reply,
the issue is that it does not update the the IP when it changes to the DNS
im attaching picture

seems as if the dynamic DDNS script of the DHCP is not updating to the reverse zone

ex: window10-pc has an ip 192.168.0.22
then it changes the ip to 192.168.0.60
when i ping it keeps showing 192.168.0.22

also when i do a reverse lookup by ip it does not do the reverse



https://imgur.com/a/kRSS8Pm



« Last Edit: April 20, 2022, 04:21:43 pm by killmasta93 »

killmasta93

  • Zen Monk
  • **
  • Posts: 77
  • Karma: +14/-0
    • View Profile
i keep seeing logs saying dhcp-dns failed 02
PM if someone want to fix this and will get payed
« Last Edit: April 21, 2022, 11:11:13 pm by killmasta93 »

turalyon

  • Zen Warrior
  • ***
  • Posts: 115
  • Karma: +12/-0
    • View Profile
i keep seeing logs saying dhcp-dns failed 02
PM if someone want to fix this and will get payed

Did you consider to contact with Zentyal and buy a ticket? Perhaps the official support can help you.

--
“This world is ours, and by the Holy Light we will keep it safe, now and forever".

killmasta93

  • Zen Monk
  • **
  • Posts: 77
  • Karma: +14/-0
    • View Profile
i tried to contact them but no response, i was reading that the support is only commercial and not community

webmaster

  • Zentyal Staff
  • Zen Apprentice
  • *****
  • Posts: 31
  • Karma: +2/-1
    • View Profile
Dear killmasta93,

Thank you for your interest in Zentyal and for joining us in this forum.

Regarding your comments, please feel free to contact us at sales@zentyal.com and we will inform you about the support options available.

Kind regards,

The Zentyal Team

killmasta93

  • Zen Monk
  • **
  • Posts: 77
  • Karma: +14/-0
    • View Profile
thank you just sent the email