LDAP Operation failed: noSuchObject

[Dreikana]

trafficstars

Hey! This is the error when I try to add a new DNS entry using dnstool.py

python3 dnstool.py -u domain.com\\user -p 'password' -r test.domain.com -a add -d 10.10.1.15 ldap://10.10.1.1

[-] Connecting to host...
[-] Binding to host
[+] Bind OK
[-] Adding new record
[!] LDAP operation failed. Message returned from server: noSuchObject [REDACTED]: NameErr: DSID-0310028C, problem 2001 (NO_OBJECT), data 0, best match of:
        'DC=domain,DC=com'

I tried using ldaps, combining with flags such as -port, -force-ssl and I tested against many DCs (one of them 10.10.1.1)

Any idea whats going on??

[dirkjanm]

It might be that the DNS zone is a forest or legacy zone, which you can query with --print-zones. Alternatively it could be that this DNS zone is not AD integrated/managed.

[Dreikana]

Thats the output using the flag --print-zones

python3 dnstool.py -u domain.com\\user -p 'password' --print-zones 10.10.1.1
[-] Connecting to host...
[-] Binding to host
[+] Bind OK

[jdelta1]

Ran into this and I think it was related to an org using / switching to Azure managed DNS. Adding --legacy worked and successfully added a DNS record.

[Cyb3rC3lt]

Saviour @jdelta1 thanks