Samba AD and Bind

[Andrew Bartlett]

On Wed, 2017-08-16 at 23:04 +0200, Dario Lesca via samba-technical
wrote:
> I'm new to this Samba Technical list (thanks to all for the great job
> and support!), and I'm interested in this tread:
> https://lists.samba.org/archive/samba-technical/2017-August/122142.ht
> ml
> 
> Into next version of next Fedora 27, it's release the Samba 4.7 AD-
> DC built with MIT Kerberos:
> https://fedoraproject.org/wiki/Changes/Samba_AD
> https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproje
> ct.org/message/TTACDGQYZUJKD7ZLMDEYZQ7C34VMMBZX/
>  
> Today It is not yet possible to work together bind and samba without
> change access to samba private folder, then I have fill this bug to
> Fedora 27:
> https://bugzilla.redhat.com/show_bug.cgi?id=1476175
> 
> From few days Andreas Schneider @ samba team have release a possible
> solution to this issue:
> https://git.samba.org/?p=asn/samba.git;a=commit;h=506adac5b7270402394
> 0b09582bb7b6ee5f3e9e3
> 
> What is the best approach to build Samba 4.7 on Fedora 27 for use
> this
> new feature?
> 
> There is a build option to point the bind dir to a specific bind
> folder
> (${LOCALSTATEDIR}/lib/samba/bind_dns)? Is this the way ? 
> 
> Or must use the new smb.conf directive "binddns dir" ?
> 
> What is the correct method (how to) to deploy samba with BIND9_DLZ ?

I'm going to think about this a little then I'll be back to Andreas to
discuss.  Making this 'just work' for upgrades is the key.

Andrew Bartlett

-- 
Andrew Bartlett
https://samba.org/~abartlet/
Authentication Developer, Samba Team         https://samba.org
Samba Development and Support, Catalyst IT   
https://catalyst.net.nz/services/samba