[Samba] V4 - New Install - Missing Zone File

jdfire at cox.net jdfire at cox.net
Tue Feb 21 16:46:20 MST 2012


> The default DNS backend has changed to BIND9_DLZ.  This means the DNS
> records are stored in Samba4's AD tree instead of in a normal zone
> file.
> 
> I've not tried the above, so am not sure exactly how to set it up.
> There are some posts about it in the samba-technical mailing list
> archives, though.
> 
> For the zone file, re-provision with the following option:
> 
>   --dns-backend=BIND9_FLATFILE
> 
> The BIND9_FLATFILE backend is the old way.  BIND9_DLZ and
> SAMBA_INTERNAL are the two new methods.  BIND9_DLZ needs a recent
> version of bind with DLZ dlopen support.  The SAMBA_INTERNAL does not
> yet support signed DNS updates (last I heard).
> 
> Since I provisioned samba4 before the DLZ option was available I have
> stuck with BIND9_FLATFILE for now.
> 
> If you're just starting out, you might want to try the DLZ backend.
> 
> -- 

Thank you for your help! I was able to get a new Bind version to somewhat work. I was able to join an XP machine to the domain but DNS seems to not be updating correctly. Below you will find the logs that I am seeing.

/var/log/messages:


Feb 21 16:39:39 davis named[1163]:   validating @0x24c0d30: com SOA: no valid signature found
Feb 21 16:39:39 davis named[1163]:   validating @0x220f220: com SOA: no valid signature found
Feb 21 16:39:39 davis named[1163]:   validating @0x220f220: CK0POJMG874LJREF7EFN8430QVIT8BSM.com NSEC3: no valid signature found
Feb 21 16:39:39 davis named[1163]:   validating @0x24c0d30: CK0POJMG874LJREF7EFN8430QVIT8BSM.com NSEC3: no valid signature found
Feb 21 16:39:39 davis named[1163]:   validating @0x198b010: A2MEHD73GB2UACB908FCH30EPFLFHMH7.com NSEC3: no valid signature found
Feb 21 16:39:39 davis named[1163]:   validating @0x24c0d30: A2MEHD73GB2UACB908FCH30EPFLFHMH7.com NSEC3: no valid signature found
Feb 21 16:39:40 davis named[1163]:   validating @0x24c0d30: 3RL0HJSI26SCTO21AV9TVIGIPUVPJAI1.com NSEC3: no valid signature found
Feb 21 16:39:40 davis named[1163]:   validating @0x198b010: 3RL0HJSI26SCTO21AV9TVIGIPUVPJAI1.com NSEC3: no valid signature found


samba output in single mode:


samba -i -M single
samba version 4.0.0alpha18-GIT-89586ed started.
Copyright Andrew Tridgell and the Samba Team 1992-2012
samba: using 'single' process model
../source4/dsdb/dns/dns_update.c:294: Failed DNS update - NT_STATUS_UNSUCCESSFUL


Any ideas as to what that could me? Thank you for your time and have a great day!


More information about the samba mailing list