[Samba] V4 - New Install - Missing Zone File

Wed Feb 22 10:01:29 MST 2012

Hello All,

Thank you for your help that you have provided so far regarding my issue. I have cleared out this email to reduce the confusion of my current issue. Here is a recap of my issue and the logs you requested below.

Currently, I have resolved the DNSSEC issue that I was seeing in my /var/log/messages log. 

I am still having problems with Bind 9.8.1 on CentOS 6.2 updating records using Samba4 latest from git. Steve emailed me offline and stated that Bind 9.8.1 has issues with updates and suggested 9.9 to resolve the issue. I have not tried that yet as I wanted to provide some more information to see if we can resolve this issue on 9.8.1. 

It seems the everything else in samba4 that I have used is working. I can add new servers to the domain without much issue. Once they are added I can ping/resolve the DC samba4 server but I can't resolve any of the other servers. Below you will find the output you all requested. Seems like it can't find some files or something. From bind logs it appears everything is loading correct.y.

/usr/local/samba/sbin/samba_dnsupdate --verbose
IPs: ['2002:4b46:c8ad:0:a00:27ff:fe14:5491', 'fe80::a00:27ff:fe14:5491%eth0', 'fe80::a00:27ff:fee5:5840%eth1', '192.168.7.30', '192.168.30.1']
Looking for DNS entry A bob-dc.com 192.168.7.30 as bob-dc.com.
Looking for DNS entry A dc1.bob-dc.com 192.168.7.30 as dc1.bob-dc.com.
Looking for DNS entry AAAA bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 as bob-dc.com.
Failed to find matching DNS entry AAAA bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
Looking for DNS entry AAAA dc1.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 as dc1.bob-dc.com.
Failed to find matching DNS entry AAAA dc1.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
Looking for DNS entry A gc._msdcs.bob-dc.com 192.168.7.30 as gc._msdcs.bob-dc.com.
Looking for DNS entry AAAA gc._msdcs.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 as gc._msdcs.bob-dc.com.
Failed to find matching DNS entry AAAA gc._msdcs.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
Looking for DNS entry CNAME 48c0fc0c-dcc1-425d-bcb2-a229d40ab48c._msdcs.bob-dc.com dc1.bob-dc.com as 48c0fc0c-dcc1-425d-bcb2-a229d40ab48c._msdcs.bob-dc.com.
Looking for DNS entry SRV _kpasswd._tcp.bob-dc.com dc1.bob-dc.com 464 as _kpasswd._tcp.bob-dc.com.
Checking 0 100 464 dc1.bob-dc.com. against SRV _kpasswd._tcp.bob-dc.com dc1.bob-dc.com 464
Looking for DNS entry SRV _kpasswd._udp.bob-dc.com dc1.bob-dc.com 464 as _kpasswd._udp.bob-dc.com.
Checking 0 100 464 dc1.bob-dc.com. against SRV _kpasswd._udp.bob-dc.com dc1.bob-dc.com 464
Looking for DNS entry SRV _kerberos._tcp.bob-dc.com dc1.bob-dc.com 88 as _kerberos._tcp.bob-dc.com.
Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._tcp.bob-dc.com dc1.bob-dc.com 88
Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.bob-dc.com dc1.bob-dc.com 88 as _kerberos._tcp.dc._msdcs.bob-dc.com.
Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._tcp.dc._msdcs.bob-dc.com dc1.bob-dc.com 88
Looking for DNS entry SRV _kerberos._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 88 as _kerberos._tcp.default-first-site-name._sites.bob-dc.com.
Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 88
Looking for DNS entry SRV _kerberos._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com dc1.bob-dc.com 88 as _kerberos._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com.
Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com dc1.bob-dc.com 88
Looking for DNS entry SRV _kerberos._udp.bob-dc.com dc1.bob-dc.com 88 as _kerberos._udp.bob-dc.com.
Checking 0 100 88 dc1.bob-dc.com. against SRV _kerberos._udp.bob-dc.com dc1.bob-dc.com 88
Looking for DNS entry SRV _ldap._tcp.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.bob-dc.com.
Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.bob-dc.com dc1.bob-dc.com 389
Looking for DNS entry SRV _ldap._tcp.dc._msdcs.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.dc._msdcs.bob-dc.com.
Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.dc._msdcs.bob-dc.com dc1.bob-dc.com 389
Looking for DNS entry SRV _ldap._tcp.gc._msdcs.bob-dc.com dc1.bob-dc.com 3268 as _ldap._tcp.gc._msdcs.bob-dc.com.
Checking 0 100 3268 dc1.bob-dc.com. against SRV _ldap._tcp.gc._msdcs.bob-dc.com dc1.bob-dc.com 3268
Looking for DNS entry SRV _ldap._tcp.pdc._msdcs.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.pdc._msdcs.bob-dc.com.
Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.pdc._msdcs.bob-dc.com dc1.bob-dc.com 389
Looking for DNS entry SRV _ldap._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.default-first-site-name._sites.bob-dc.com.
Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 389
Looking for DNS entry SRV _ldap._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com.
Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.default-first-site-name._sites.dc._msdcs.bob-dc.com dc1.bob-dc.com 389
Looking for DNS entry SRV _ldap._tcp.default-first-site-name._sites.gc._msdcs.bob-dc.com dc1.bob-dc.com 3268 as _ldap._tcp.default-first-site-name._sites.gc._msdcs.bob-dc.com.
Checking 0 100 3268 dc1.bob-dc.com. against SRV _ldap._tcp.default-first-site-name._sites.gc._msdcs.bob-dc.com dc1.bob-dc.com 3268
Looking for DNS entry SRV _ldap._tcp.2d1290ec-d837-4f59-8730-9deb5078c8f0.domains._msdcs.bob-dc.com dc1.bob-dc.com 389 as _ldap._tcp.2d1290ec-d837-4f59-8730-9deb5078c8f0.domains._msdcs.bob-dc.com.
Checking 0 100 389 dc1.bob-dc.com. against SRV _ldap._tcp.2d1290ec-d837-4f59-8730-9deb5078c8f0.domains._msdcs.bob-dc.com dc1.bob-dc.com 389
Looking for DNS entry SRV _gc._tcp.bob-dc.com dc1.bob-dc.com 3268 as _gc._tcp.bob-dc.com.
Checking 0 100 3268 dc1.bob-dc.com. against SRV _gc._tcp.bob-dc.com dc1.bob-dc.com 3268
Looking for DNS entry SRV _gc._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 3268 as _gc._tcp.default-first-site-name._sites.bob-dc.com.
Checking 0 100 3268 dc1.bob-dc.com. against SRV _gc._tcp.default-first-site-name._sites.bob-dc.com dc1.bob-dc.com 3268
Looking for DNS entry A bob-dc.com 192.168.30.1 as bob-dc.com.
Failed to find matching DNS entry A bob-dc.com 192.168.30.1
Looking for DNS entry A dc1.bob-dc.com 192.168.30.1 as dc1.bob-dc.com.
Failed to find matching DNS entry A dc1.bob-dc.com 192.168.30.1
Looking for DNS entry A gc._msdcs.bob-dc.com 192.168.30.1 as gc._msdcs.bob-dc.com.
Failed to find matching DNS entry A gc._msdcs.bob-dc.com 192.168.30.1
Calling nsupdate for AAAA bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
Failed nsupdate: AAAA bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 : [Errno 2] No such file or directory
Calling nsupdate for AAAA dc1.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
Failed nsupdate: AAAA dc1.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 : [Errno 2] No such file or directory
Calling nsupdate for AAAA gc._msdcs.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491
Failed nsupdate: AAAA gc._msdcs.bob-dc.com 2002:4b46:c8ad:0:a00:27ff:fe14:5491 : [Errno 2] No such file or directory
Calling nsupdate for A bob-dc.com 192.168.30.1
Failed nsupdate: A bob-dc.com 192.168.30.1 : [Errno 2] No such file or directory
Calling nsupdate for A dc1.bob-dc.com 192.168.30.1
Failed nsupdate: A dc1.bob-dc.com 192.168.30.1 : [Errno 2] No such file or directory
Calling nsupdate for A gc._msdcs.bob-dc.com 192.168.30.1
Failed nsupdate: A gc._msdcs.bob-dc.com 192.168.30.1 : [Errno 2] No such file or directory
Failed update of 6 entries

Feb 22 09:58:52 dc1 named[11512]: starting BIND 9.8.1-P1 -u named
Feb 22 09:58:52 dc1 named[11512]: built with '--with-gssapi=/usr/include/gssapi' '--with-dlopen=yes'
Feb 22 09:58:52 dc1 named[11512]: using up to 4096 sockets
Feb 22 09:58:52 dc1 named[11512]: loading configuration from '/etc/named.conf'
Feb 22 09:58:52 dc1 named[11512]: reading built-in trusted keys from file '/etc/named.iscdlv.key'
Feb 22 09:58:52 dc1 named[11512]: using default UDP/IPv4 port range: [1024, 65535]
Feb 22 09:58:52 dc1 named[11512]: using default UDP/IPv6 port range: [1024, 65535]
Feb 22 09:58:52 dc1 named[11512]: listening on IPv4 interface lo, 127.0.0.1#53
Feb 22 09:58:52 dc1 named[11512]: listening on IPv4 interface eth1, 192.168.30.1#53
Feb 22 09:58:52 dc1 named[11512]: generating session key for dynamic DNS
Feb 22 09:58:52 dc1 named[11512]: sizing zone task pool based on 6 zones
Feb 22 09:58:52 dc1 named[11512]: Loading 'AD DNS Zone' using driver dlopen
Feb 22 09:58:52 dc1 named[11512]: samba_dlz: started for DN DC=bob-dc,DC=com
Feb 22 09:58:52 dc1 named[11512]: samba_dlz: starting configure
Feb 22 09:58:52 dc1 named[11512]: samba_dlz: configured writeable zone 'bob-dc.com'
Feb 22 09:58:52 dc1 named[11512]: samba_dlz: configured writeable zone '_msdcs.bob-dc.com'
Feb 22 09:58:52 dc1 named[11512]: using built-in DLV key for view _default
Feb 22 09:58:52 dc1 named[11512]: set up managed keys zone for view _default, file 'managed-keys.bind'
Feb 22 09:58:52 dc1 named[11512]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 127.IN-ADDR.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 254.169.IN-ADDR.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 100.51.198.IN-ADDR.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 113.0.203.IN-ADDR.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: D.F.IP6.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 8.E.F.IP6.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 9.E.F.IP6.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: A.E.F.IP6.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: B.E.F.IP6.ARPA
Feb 22 09:58:52 dc1 named[11512]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
Feb 22 09:58:52 dc1 named[11512]: none:0: open: /etc/rndc.key: file not found
Feb 22 09:58:52 dc1 named[11512]: couldn't add command channel 127.0.0.1#953: file not found
Feb 22 09:58:52 dc1 named[11512]: none:0: open: /etc/rndc.key: file not found
Feb 22 09:58:52 dc1 named[11512]: couldn't add command channel ::1#953: file not found
Feb 22 09:58:52 dc1 named[11512]: zone 0.in-addr.arpa/IN: loaded serial 0
Feb 22 09:58:52 dc1 named[11512]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
Feb 22 09:58:52 dc1 named[11512]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
Feb 22 09:58:52 dc1 named[11512]: zone localhost.localdomain/IN: loaded serial 0
Feb 22 09:58:52 dc1 named[11512]: zone localhost/IN: loaded serial 0
Feb 22 09:58:52 dc1 named[11512]: managed-keys-zone ./IN: loaded serial 13
Feb 22 09:58:52 dc1 named[11512]: running

I hope all of this helps you all find what might be the cause of this current issue. Thank you all again for your time and work on this. For being alpha samba 4 looks really good. :)

Regards,
Jeremy