Web lists-archives.com

Re: [Samba] RPC and NDR errors in log file




On 11/2/2018 11:54 AM, L.P.H. van Belle via samba wrote:
Hai,

Based on : IsSigneddnsserver: Invalid zone operation

Are you running against a ( forwarded ) DNSSEC server or DNS Crypt server.
Try an other forward if are.

If you running internal samba DNS, try bind9_DLZ

Handy list for dnssec and dns crypt:
https://wiki.ipfire.org/dns/public-servers
https://dnscrypt.info/public-servers


Greetz,

Louis
-----Oorspronkelijk bericht-----
Van: samba [mailto:samba-bounces@xxxxxxxxxxxxxxx] Namens
James Atwell via samba
Verzonden: vrijdag 2 november 2018 16:28
Aan: samba@xxxxxxxxxxxxxxx
Onderwerp: Re: [Samba] RPC and NDR errors in log file

On 10/30/2018 10:17 AM, James Atwell wrote:
On 10/29/2018 1:57 PM, Rowland Penny via samba wrote:
On Mon, 29 Oct 2018 13:20:18 -0400
James Atwell via samba <samba@xxxxxxxxxxxxxxx> wrote:

Hello List,
                  I'm receiving several of these messages
in my samba
log file. I'm not entirely sure what the errors are referencing
either. I'm under the assumption DNS related.

ndr_pull_error(11): Pull bytes 1 (../librpc/ndr/ndr_basic.c:81)
../librpc/rpc/dcerpc_util.c:264: ERROR: pad length mismatch.
Calculated 44 got 0

I have 3 sites with 2 DC's per site.  These messages are
only coming
from one site and both DC's are logging the errors.

Since I suspect DNS related, I will provide my setup configs.

The message is coming from dcerpc_util.c, so it probably
has nothing to
do with dns

cat /usr/local/samba/etc/smb.conf

# Global parameters

[global]
          dns forwarder = 75.75.75.75 208.67.222.222
You are using Bind, so, as the 'dns forwarder' line will
be ignored, you
might as well remove it.

I think we need to know more about your set up, OS versions etc.

Also I would take it as a big favour if you found a better
email client
that didn't add all the blank lines ;-)

Rowland

I removed the dns forwarder line as it was left over when using the
internal DNS at one point. Thanks.

I have 6 DC's all using Ubuntu 16.04.5 LTS. I believe I previously
indicated they were 14.04 releases. A total of 3 sites with
2 DC's at
each.  Using rysnc sysvol replication as well. All DC's are using
bind9 for DNS. All DC's are compiled from tar and using 4.9.1.

I was previously using Samba 4.8.6 prior to upgrading to
4.9.1. I was
not alerted to these errors until after the upgrade.

As a side note I have been on the list under a previous
email if all
this sounds familiar. I switched back to using Thunderbird
so curious
if it resolves the blank space issue as well.


Rowland,

      The issue actually appears across all sites. Not just the one I
initially suspected. I was able to capture another log event but this
time more data was with with it.

dnsserver: Invalid zone operation IsSigneddnsserver: Invalid zone
operation IsSigneddnsserver: Invalid zone operation
IsSigneddnsserver:
Invalid zone operation IsSigneddnsserver: Invalid zone operation
IsSigned../librpc/rpc/dcerpc_util.c:264: ERROR: pad length mismatch.
Calculated 44got 0


--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba



Hi Louis,

I am not running against a forwarder. I'm also using Bind9_DLZ as well. Thanks.



--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba