Orange-Cyberdefense / GOAD

game of active directory
GNU General Public License v3.0
4.63k stars 652 forks source link

File-Backed DNS to ADIDNS zone unsupported (dns_conditional_forwarder issue) #174

Closed MrrRaph closed 6 months ago

MrrRaph commented 6 months ago

Hi,

I am having an issue about the step of adding dns server zone, i am prompted with this error:

TASK [dns_conditional_forwarder : Add dns server zone] *******************************
fatal: [dc03]: FAILED! => {"changed": false, "msg": "Converting a file backed DNS zone to Active Directory integrated zone is unsupported"}
...ignoring
fatal: [dc01]: FAILED! => {"changed": false, "msg": "Converting a file backed DNS zone to Active Directory integrated zone is unsupported"}
...ignoring

I looked for it but I cannot find a solution to solve the problem, did someone get the same issue and know what it is about ?

By not solving this step, and ignoring it, I'm then having issue while assigning cross-domain groups/users to services:

An exception occurred during task execution. To see the full traceback, use -vvv. The error was:    at Microsoft.ActiveDirectory.Management.Commands.ADCmdletBase`1.BeginProcessing()
failed: [dc03] (item={'key': 'DragonsFriends', 'value': ['sevenkingdoms.local\\tyron.lannister', 'essos.local\\daenerys.targaryen']}) => {"ansible_loop_var": "item", "attempts": 3, "changed": false, "item": {"key": "DragonsFriends", "value": ["sevenkingdoms.local\\tyron.lannister", "essos.local\\daenerys.targaryen"]}, "msg": "Unhandled exception while executing module: Either the target name is incorrect or the server has rejected the client credentials."}
TASK [settings/adjust_rights : Add domain users to local groups] *********************
failed: [srv02] (item={'key': 'Administrators', 'value': ['north\\jeor.mormont']}) => {"ansible_loop_var": "item", "changed": false, "item": {"key": "Administrators", "value": ["north\\jeor.mormont"]}, "msg": "account_name north\\jeor.mormont is not a valid account, cannot get SID: Exception calling \"Translate\" with \"1\" argument(s): \"The trust relationship between this workstation and the primary domain failed.\r\n\""}

EDIT

I just destroy my entire lab and it was ok after rebuild, nevermind x)