[Samba] V4 - New Install - Missing Zone File

[steve]

On 02/22/2012 12:46 AM, jdfire at cox.net wrote:
>> The default DNS backend has changed to BIND9_DLZ.  This means the DNS
>> records are stored in Samba4's AD tree instead of in a normal zone
>> file.
>>
>> I've not tried the above, so am not sure exactly how to set it up.
>> There are some posts about it in the samba-technical mailing list
>> archives, though.
>>
>> For the zone file, re-provision with the following option:
>>
>>    --dns-backend=BIND9_FLATFILE
>>
>> The BIND9_FLATFILE backend is the old way.  BIND9_DLZ and
>> SAMBA_INTERNAL are the two new methods.  BIND9_DLZ needs a recent
>> version of bind with DLZ dlopen support.  The SAMBA_INTERNAL does not
>> yet support signed DNS updates (last I heard).
>>
>> Since I provisioned samba4 before the DLZ option was available I have
>> stuck with BIND9_FLATFILE for now.
>>
>> If you're just starting out, you might want to try the DLZ backend.
>>
>> -- 
> Thank you for your help! I was able to get a new Bind version to somewhat work. I was able to join an XP machine to the domain but DNS seems to not be updating correctly. Below you will find the logs that I am seeing.
>
> /var/log/messages:
>
>
> Feb 21 16:39:39 davis named[1163]:   validating @0x24c0d30: com SOA: no valid signature found
> Feb 21 16:39:39 davis named[1163]:   validating @0x220f220: com SOA: no valid signature found
> Feb 21 16:39:39 davis named[1163]:   validating @0x220f220: CK0POJMG874LJREF7EFN8430QVIT8BSM.com NSEC3: no valid signature found
> Feb 21 16:39:39 davis named[1163]:   validating @0x24c0d30: CK0POJMG874LJREF7EFN8430QVIT8BSM.com NSEC3: no valid signature found
> Feb 21 16:39:39 davis named[1163]:   validating @0x198b010: A2MEHD73GB2UACB908FCH30EPFLFHMH7.com NSEC3: no valid signature found
> Feb 21 16:39:39 davis named[1163]:   validating @0x24c0d30: A2MEHD73GB2UACB908FCH30EPFLFHMH7.com NSEC3: no valid signature found
> Feb 21 16:39:40 davis named[1163]:   validating @0x24c0d30: 3RL0HJSI26SCTO21AV9TVIGIPUVPJAI1.com NSEC3: no valid signature found
> Feb 21 16:39:40 davis named[1163]:   validating @0x198b010: 3RL0HJSI26SCTO21AV9TVIGIPUVPJAI1.com NSEC3: no valid signature found
>
>
> samba output in single mode:
>
>
> samba -i -M single
> samba version 4.0.0alpha18-GIT-89586ed started.
> Copyright Andrew Tridgell and the Samba Team 1992-2012
> samba: using 'single' process model
> ../source4/dsdb/dns/dns_update.c:294: Failed DNS update - NT_STATUS_UNSUCCESSFUL
>
>
> Any ideas as to what that could me? Thank you for your time and have a great day!
Hi
I think DLZ is the default. I didn't specify any dns-backend when 
provisioning but I got files I needed to include for named. I had to 
make 2 changes to the bind 9 config as detailed here:
http://linuxcostablanca.blogspot.com/2012/01/samba-4-ubuntu.html
HTH
Steve