[Samba] Samba, AD, 'short' name resolving...
Marco Gaiarin
gaio at sv.lnf.it
Fri Jun 15 14:03:15 UTC 2018
Mandi! L.P.H. van Belle via samba
In chel di` si favelave...
> But thats a wild guess, but if a dev knows any reply may help here.
> We cant know everything..
Sorry, i was busy on other things...
I repeat: TSIG errors are ''sporadically'' and happen mostly on a DC
that have in these days some connectivity troubles.
My original post on this subject was an excuse, to simply try to
understand:
a) why client register itself on ''far DC'' and not on the DC in the
site; Louis, you reply me on that, but that policy you point me are
still a bit mysterious...
b) i've noted that dns registration in my ''old'' DNS/DHCP setup tend
to ''diverge'' from the AD DNS registration.
I've done some test now, and seems that b) was caused by a) and the
connectivity trouble; now all registration seems coherent...
Anyway... yes, i've no reverse zone (they are on my old setup), and mu
bind cnfiguration is simple:
root at vdcsv1:~# less /etc/bind/named.conf.options | grep -v '//' | grep -v '^[[:space:]]*$'
acl "trusted" {
localhost;
10.5.1.0/24;
10.5.2.0/24;
10.27.1.3/32;
10.27.1.5/32;
10.27.1.21/32;
10.27.1.23/32;
10.99.1.1/32;
10.99.1.3/32;
10.99.25.1/32;
10.99.25.2/32;
};
options {
directory "/var/cache/bind";
forwarders {
10.5.1.3;
10.5.1.5;
};
forward only;
allow-query { "any"; };
allow-recursion { "trusted"; };
allow-query-cache { "trusted"; };
allow-notify { "none"; };
auth-nxdomain yes; # conform to RFC1035
listen-on-v6 { any; };
notify no;
empty-zones-enable no;
tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
};
Thanks and happy WE!!!
--
dott. Marco Gaiarin GNUPG Key ID: 240A3D66
Associazione ``La Nostra Famiglia'' http://www.lanostrafamiglia.it/
Polo FVG - Via della Bontà , 7 - 33078 - San Vito al Tagliamento (PN)
marco.gaiarin(at)lanostrafamiglia.it t +39-0434-842711 f +39-0434-842797
Dona il 5 PER MILLE a LA NOSTRA FAMIGLIA!
http://www.lanostrafamiglia.it/index.php/it/sostienici/5x1000
(cf 00307430132, categoria ONLUS oppure RICERCA SANITARIA)
More information about the samba
mailing list