Samba4 BDC with Samba4 PDC

Andrew Bartlett abartlet at
Sun Jun 3 04:15:40 MDT 2012

On Sun, 2012-06-03 at 09:59 +0100, Mike Howard wrote:
> I have had samba4 (Version 4.0.0alpha21-GIT-073666e) up and running as 
> the PDC on my network, currently with BIND9_DLZ and Bind9.9, working 
> well for a little while.
> For redundancy, I'd like to add a Samba 4 BDC, also BIND9_DLZ with 
> Bind9.9. To this end I grabbed the latest from git (Version 
> 4.0.0alpha22-GIT-29a51a2) and installed it, however there is not a lot 
> (any?) info out there on how things should be done _properly_ from a 
> configuration point of view, i.e. on the BDC is there a smb.conf or not, 
> how is the krb5.conf configured, how is /etc/resolv.conf configured?
> Anyway, I can join the the BDC to the domain with;

> Joined domain MYDOMAIN (SID S-1-5-21-2874647136-1364824720-2698236840) 
> as a DC
> The process of joining the BDC to the domain seems to shutdown bind on 
> the PDC and neither '/usr/local/samba/private/named.conf' nor 
> '/usr/local/samba/private/dns/' are created on the BDC.
> I can (and did) add the followong to my 'named.conf.local'.
> dlz "AD DNS Zone" {
>      # For BIND 9.9.0
>          database "dlopen /usr/local/samba/lib/bind9/";
> };
> but bind will not restart as '/usr/local/samba/private/dns/' and it's 
> contents are missing.
> Can anybody give me some pointers or point me at any info that will help 
> with the correct configuration?

See the other posts on this list about ensuring the DNS partitions are
replicated, then run samba_upgradedns to populate the DNS directory for
the second DC. 

There is a fair bit of info in the list archives on this.  Hopefully we
can make this more automatic in the future.

Andrew Bartlett
Andrew Bartlett                      
Authentication Developer, Samba Team 

More information about the samba-technical mailing list