Samba 4 internal DNS question

Andrew Bartlett abartlet at
Mon Feb 4 14:47:48 MST 2013

On Mon, 2013-02-04 at 16:30 -0500, Mark Pilant wrote:
> Hi Marc.
> When I attempt to do a zone transfer using dig, I get a "Transfer failed"
> response and no information.  So it appears, at least with my Samba 4
> internal DNS setup, zone transfers are not allowed.  Which is sort of what
> I would expect from a security standpoint.  Although I'm not at all sure
> how I would configure the internal DNS to allow it.  (My test environment
> is in a lab setting, so I don't have to worry too much about "outside"
> influences :-)

I'm pretty sure it fails because it simply isn't implemented.

The internal server is designed to handle exactly the minimum required
for a small domain that needs to just work.  We may add features of
course, but it isn't a feature war with BIND:  The bind9 plugin is
provided and fully supported because it makes not sense to reimplement
everything from BIND in Samba. 

Andrew Bartlett

Andrew Bartlett                      
Authentication Developer, Samba Team 

More information about the samba-technical mailing list