[Samba] How to switch from internal DNS to Bind

[James]

On 12/30/2015 4:14 PM, Rowland penny wrote:
> ./configure --prefix=/usr --mandir=/usr/share/man 
> --infodir=/usr/share/info --sysconfdir=/etc/bind --localstatedir=/var 
> --enable-threads --enable-largefile --with-libtool --enable-shared 
> --enable-static --with-openssl=/usr --with-gssapi=/usr  
> --with-dlopen=yes --with-gnu-ld --enable-ipv6 
> CFLAGS='-fno-strict-aliasing -DDIG_SIGCHASE -O2' 
> LDFLAGS='-Wl,-Bsymbolic-functions -Wl,-z,relro' 
> CPPFLAGS='-D_FORTIFY_SOURCE=2'
I seem to have a few errors in my syslog.

Dec 31 09:35:17 VMDC1 named[24025]: couldn't mkdir '/var/run/named': 
Permission denied
Dec 31 09:35:17 VMDC1 named[24025]: generating session key for dynamic DNS
Dec 31 09:35:17 VMDC1 named[24025]: couldn't mkdir '/var/run/named': 
Permission denied
Dec 31 09:35:17 VMDC1 named[24025]: could not create 
/var/run/named/session.key
Dec 31 09:35:17 VMDC1 named[24025]: failed to generate session key for 
dynamic DNS: permission denied
Dec 31 09:35:17 VMDC1 named[24025]: sizing zone task pool based on 3 zones
Dec 31 09:35:17 VMDC1 named[24025]: set up managed keys zone for view 
_default, file 'managed-keys.bind'
Dec 31 09:35:17 VMDC1 named[24025]: configuring command channel from 
'/etc/bind/rndc.key'
Dec 31 09:35:17 VMDC1 named[24025]: couldn't add command channel 
127.0.0.1#953: file not found
Dec 31 09:35:17 VMDC1 named[24025]: configuring command channel from 
'/etc/bind/rndc.key'
Dec 31 09:35:17 VMDC1 named[24025]: couldn't add command channel 
::1#953: file not found
Dec 31 09:35:17 VMDC1 named[24025]: the working directory is not writable
Dec 31 09:35:17 VMDC1 named[24025]: managed-keys-zone: loaded serial 0
Dec 31 09:35:17 VMDC1 named[24025]: zone 0.0.127.in-addr.arpa/IN: loaded 
serial 2013050101
Dec 31 09:35:17 VMDC1 named[24025]: zone localhost/IN: loaded serial 
2013050101
Dec 31 09:35:17 VMDC1 named[24025]: all zones loaded
Dec 31 09:35:17 VMDC1 named[24025]: running

I compiled using 9.9.8-P2 and your suggested configure options. I see 
/run is owned by root:root. Should I give group 'named' permission to 
this folder? It's not documented in the wiki as needed.

-- 
-James