Samba 4.10.x and Bind9 DLZ dynamic updates

[marcel at linux-ng.de]

Hi David,

thanks for your suggestion. I just re-compiled my Ubuntu
18.04 bind9 package as suggested, however the problem
still remains after updating the bind packages.

Marcel


April 18, 2019 7:59 AM, "David Rivera via samba-technical" <samba-technical at lists.samba.org> wrote:

> Hi Marcel,
> 
> I believe I ran into this same issue when upgrading from Samba 4.8.0 to
> 4.9.5+. I had to follow the instructions in the link below to rebuild bind
> from the source RPM, removing --disable-isc-spnego from the SPEC file.
> You'll need to download the right package and follow the correct
> instructions for your distribution.
> 
> https://wiki.samba.org/index.php/Using_BIND_DLZ_backend_with_secured_/_signed_DNS_updates#RHEL_.2F_C
> NTOS_.2F_FC_.2B_clones_-_ReBuild_Distributed_ISC_Bind_RPM
> 
> David
> 
> On Wed, Apr 17, 2019 at 9:19 AM Marcel via samba-technical <
> samba-technical at lists.samba.org> wrote:
> 
>> Hi there,
>> 
>> since upgrading to Samba 4.10.x I can no longer do dynamic
>> DNS updates using bind 9.11 (with samba dlz).
>> 
>> I'm not 100% sure wether this is a 4.10 issue, or related to changes
>> in my build environment. However I can no longer do GSSAPI based
>> ("nsupdate -g") DNS updates on my setup (NOTAUTH error).
>> 
>> I already tried several fixes (samba_dnsupgrade etc.) to get rid of this
>> issue - no luck so far
>> 
>> Kerberos based updates using "samba-tool dns" work btw - with the
>> same user.
>> 
>> I just wanted to ask if someone is using 4.10.x with bind9 dlz backend
>> and is still able to use this kind of DNS updates.
>> 
>> Any help / hint is welcome.
>> 
>> Best regards,
>> Marcel