[Samba] Possible small bug discovered in Samba4 dc sernet + bind9 (Debian)

[Oscar Aparicio Holgado]

Another tip:
better do (more secure):
chown root:bind /var/lib/samba/private/chmod 750 var/lib/samba/private/

> From: pelucheloko at hotmail.com
> To: samba at lists.samba.org
> Date: Wed, 5 Mar 2014 23:31:01 +0100
> Subject: [Samba] Possible small bug discovered in Samba4 dc sernet + bind9	(Debian)
> 
> Hi all.
> I have installed sernet-samba-ad success with bind9 from Debian repositories.
> I added:
> tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab"; in /etc/bind/named.conf.options
> and then i added:
> include "/var/lib/samba/private/named.conf"; in /etc/bind/named.conf.local
> After doing this two steps and modified /etc/resolv.conf when you restart bind9 it says error "unable to read /etc/bind/named.conf.local, access denied" Some of the files have root:bind permissions, but /var/lib/samba/private folder have this permissions:
> drwxr-x---   7 root root      4096 mar  5 23:20 private
> And with this config bind is unable to read some files in that folder, possibly in dns folder.
> if i change the permissions as this:
> drwxr-xr-x   7 root root      4096 mar  5 23:20 private
> Then now you can restart safely bind9 and no more errors of denied files. Would you please confirm this small bug?
> 
> Thanks all. 		 	   		  
> -- 
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba