[Samba] Internal DNS and recursion

L.P.H. van Belle belle at bazuin.nl
Wed Aug 19 10:56:31 UTC 2015


typo in : 

Conditional forwarders are implemented yet. The same error message as above is returned.  
change 
Conditional forwarders are not implemented yet. The same error message as above is returned.  

:-)  good work :-) 

Greetz, 

Louis


>-----Oorspronkelijk bericht-----
>Van: samba [mailto:samba-bounces at lists.samba.org] Namens Rowland Penny
>Verzonden: woensdag 19 augustus 2015 12:41
>Aan: samba at lists.samba.org
>Onderwerp: Re: [Samba] Internal DNS and recursion
>
>On 19/08/15 11:15, L.P.H. van Belle wrote:
>> ah yes..
>> that are the "limitation", but know limitations ( for us )
>>
>> Rowland, this is something to add on the wiki.
>> (here : https://wiki.samba.org/index.php/DNS_Administration )
>>
>> ;-)
>>
>> Greetz,
>>
>> Louis
>>
>>
>>> -----Oorspronkelijk bericht-----
>>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens 
>Yuriy Tabolin
>>> Verzonden: woensdag 19 augustus 2015 11:35
>>> Aan: samba at lists.samba.org
>>> Onderwerp: Re: [Samba] Internal DNS and recursion
>>>
>>> 19.08.2015 11:43, L.P.H. van Belle ??????????:
>>>>>> While on the subject of internal DNS, why do most
>>> functions not work
>>>>>> when using the RSAT DNS management tool? Is this situation
>>> likely to
>>>>>> improve in the near future? We could of course use external Bind,
>>>>>> which would allow us to use the existing scripts and 
>commands that
>>>>>> we're used to, but that breaks the use of AD tools.
>>>>> No idea about the dns functions not working but I use Bind
>>> and the AD
>>>>> dns tool works for me.
>>>>>
>>>>> Rowland
>>>> Same here, samba 4.2.3 with bind dlz, just added about 100
>>> entries with the win7 RATS tools in the dns.
>>>> Works great.
>>> A basic tasks works great, I agree. But there are examples
>>> what doesn't
>>> works with samba internal DNS:
>>> 1. Scavenging. There is the error "This function is not supported on
>>> this system"
>>> 2. Conditional forwarders. The same error as above.
>>> 3. Creating a true static records. When I create any static 
>record it
>>> has timestamp and option "Delete this record when it become 
>stale". In
>>> true Active Directory static records has timestamps "static"
>>> and cannot
>>> accidently deletes.
>>> It is only that I remembered. When I thoroughly studied 
>samba4 DNS, I
>>> found more functions that doesn't works.
>>>
>>>
>>>> Greetz,
>>>>
>>>> Louis
>>>>
>>>>
>>>>> -----Oorspronkelijk bericht-----
>>>>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
>>> Rowland Penny
>>>>> Verzonden: woensdag 19 augustus 2015 10:22
>>>>> Aan: samba at lists.samba.org
>>>>> Onderwerp: Re: [Samba] Internal DNS and recursion
>>>>>
>>>>> On 19/08/15 01:57, John Gardeniers wrote:
>>>>>> On the Samba wiki at
>>>>>> https://wiki.samba.org/index.php/Samba_Internal_DNS there is the
>>>>>> following:
>>>>>>
>>>>>> If you have chosen the internal DNS as backend for your
>>> environment,
>>>>>> there are only two options that can be added to your smb.conf, to
>>>>>> control the behaviour of DNS at this point:
>>>>>>
>>>>>> # Don't allow any updates | allow unsigned updates | only
>>>>> allow signed
>>>>>> updates
>>>>>> allow dns updates = False | nonsecure | signed
>>>>>>
>>>>>> # If recursive queries = yes is set, the following is also needed
>>>>>> dns forwarder = <ip addr of external dns server>
>>>>>>
>>>>>>
>>>>>> I think the page needs some urgent editing because self
>>>>> contradictions
>>>>>> merely create confusion. Specifically, there should be no
>>>>> reference to
>>>>>> "recursive queries = yes" in the comment if that is not
>>> even a valid
>>>>>> option. Alternatively, there could be a comment 
>explaining that the
>>>>>> "dns forwarder" automatically actives recursion.
>>>>> OK, page updated.
>>>>>
>>>>>> While on the subject of internal DNS, why do most
>>> functions not work
>>>>>> when using the RSAT DNS management tool? Is this situation
>>> likely to
>>>>>> improve in the near future? We could of course use external Bind,
>>>>>> which would allow us to use the existing scripts and 
>commands that
>>>>>> we're used to, but that breaks the use of AD tools.
>>>>> No idea about the dns functions not working but I use Bind
>>> and the AD
>>>>> dns tool works for me.
>>>>>
>>>>> Rowland
>>>>>> regards,
>>>>>> John
>>>>>>
>>>>> -- 
>>>>> To unsubscribe from this list go to the following URL and read the
>>>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>>>
>>>>>
>>> -- 
>>> With best regards,
>>>
>>> Tabolin Yuriy
>>> System administrator
>>> Speech Technology Center
>>>
>>>
>>> -- 
>>> To unsubscribe from this list go to the following URL and read the
>>> instructions:  https://lists.samba.org/mailman/options/samba
>>>
>>>
>>
>
>Done, added what I think Yuriy meant, let me know if it is 
>incorrect :-)
>
>Rowland
>
>
>-- 
>To unsubscribe from this list go to the following URL and read the
>instructions:  https://lists.samba.org/mailman/options/samba
>
>




More information about the samba mailing list