Reporting MORE success this past year - RESOLVED Issues Adding a new Samba 4 DC to existing Samba 4 AD

[Aubrey Ekstrom]

Hi Andrew and everyone,

Thanks for all the help!

Recompiling Bind 9.8.1.P1 a 3rd time with the --sysconfdir=/etc/bind option
in addition to the --with-gssapi=/usr/include/gssapi option combining the
Samba 4 Bind instructions with the Bind install instructions from this page:

http://www.linuxfromscratch.org/blfs/view/svn/server/bind.html

Appears to have fixed the dynamic DNS issue on our PDC and the New DC is
now replicating! YEAH!

Any known issues, or advice about running DDNS on both DCs?

Now to figure out how to delete the 1st New DC from AD that I killed early
on while trying to get this working... a minor and mostly cosmetic issue,
but it does appear to be using some resources, and it is annoying ;)... but
lets hope that is the worst of my problems with Samba 4 going forward!

So we now have 2 Samba 4 DCs with extended schema for Mac OS X support
managing both Windows and Apple computers at the GPO level. Next we will
start adding Linux workstations and servers to the Domain (no GPO level
management though).

Happy Holidays!!!

Cheers,*

Aubrey Ekstrom | *Systems Administrator
Proclivity Systems
22 West 19th St., Ninth Floor
New York, NY 10011
p 646.380.2416
aekstrom at proclivitysystems.com
www.proclivitysystems.com

*Proclivity® | We Value Your Customers™*


This message is the property of Proclivity Systems, Inc. and is intended
only for the use of the addressee(s), and may contain material that is
confidential and privileged for the sole use of the intended recipient.  If
you are not the intended recipient, reliance or forwarding without express
permission is strictly prohibited; please contact the sender and delete all
copies.







On Fri, Dec 9, 2011 at 3:30 PM, Andrew Bartlett <abartlet at samba.org> wrote:

> On Fri, 2011-12-09 at 12:20 -0500, Aubrey Ekstrom wrote:
> > Hi Andrew,
> >
> > I find the below error this in both /var/log/daemon.log & var/log/syslog
> > for process named:
> >
> > *invalid command from 127.0.0.1#40623: bad auth*
> >
> > To recap the error bind9 reload displays:
> >
> > $ sudo /etc/init.d/bind9 reload
> > Reloading domain name service...: bind9rndc: connection to remote host
> > closed
>
> Clearly bind is not running on this host at this time.  What happens if
> you simply start it?
>
> sudo /etc/init.d/bind9 start
>
> Andrew Bartlett
>
> --
> Andrew Bartlett                                http://samba.org/~abartlet/
> Authentication Developer, Samba Team           http://samba.org
>
>