[Samba] DNS error on startup Samba4 ADS mode DC
Means, Jeffrey D.
meaje at meanspc.com
Mon Mar 17 18:04:29 MDT 2014
I keep getting errors in my logs about can not bind to address *.*.*.*:53
address in use..
what did i do wrong in the setup of my server or domain?
attached logs and smb.conf along with the output from my provision command.
BTW: sorry for the repost but i it send before I had the files attached...
Jeffrey D. Means meaje at meanspc.com
Owner / CIO for MeansPC http://www.meanspc.com/
Custom Web Development For Your Needs. (970)308-1298
- The stupidity of a stupid person is exercised in a restricted field; the
stupidity of an intelligent individual has a much broader diffusion, and
far greater effect, especially when aided by the element of surprise ;-)
On Mon, Mar 17, 2014 at 6:02 PM, Means, Jeffrey D. <meaje at meanspc.com>wrote:
> I keep getting errors in my logs about can not bind to address *.*.*.*:53
> address in use..
>
> what did i do wrong in the setup of my server or domain?
>
> attached logs and smb.conf along with the output from my provision command.
>
> Jeffrey D. Means meaje at meanspc.com
> Owner / CIO for MeansPC http://www.meanspc.com/
> Custom Web Development For Your Needs. (970)308-1298
>
> - The stupidity of a stupid person is exercised in a restricted field; the
> stupidity of an intelligent individual has a much broader diffusion, and
> far greater effect, especially when aided by the element of surprise ;-)
>
-------------- next part --------------
Mar 17 17:36:47 mythtv-0 named[9895]: starting BIND 9.8.1-P1 -u bind
Mar 17 17:36:47 mythtv-0 named[9895]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' '--with-geoip=/usr' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2' 'LDFLAGS=-Wl,-Bsymbolic-functions -Wl,-z,relro' 'CPPFLAGS=-D_FORTIFY_SOURCE=2'
Mar 17 17:36:47 mythtv-0 named[9895]: adjusted limit on open files from 4096 to 1048576
Mar 17 17:36:47 mythtv-0 named[9895]: found 1 CPU, using 1 worker thread
Mar 17 17:36:47 mythtv-0 named[9895]: using up to 4096 sockets
Mar 17 17:36:47 mythtv-0 named[9895]: loading configuration from '/etc/bind/named.conf'
Mar 17 17:36:47 mythtv-0 named[9895]: reading built-in trusted keys from file '/etc/bind/bind.keys'
Mar 17 17:36:47 mythtv-0 named[9895]: using default UDP/IPv4 port range: [1024, 65535]
Mar 17 17:36:47 mythtv-0 named[9895]: using default UDP/IPv6 port range: [1024, 65535]
Mar 17 17:36:47 mythtv-0 named[9895]: listening on IPv6 interfaces, port 53
Mar 17 17:36:47 mythtv-0 named[9895]: listening on IPv4 interface lo, 127.0.0.1#53
Mar 17 17:36:47 mythtv-0 named[9895]: listening on IPv4 interface eth0, 192.168.101.170#53
Mar 17 17:36:47 mythtv-0 named[9895]: listening on IPv4 interface virbr0, 192.168.122.1#53
Mar 17 17:36:47 mythtv-0 named[9895]: binding TCP socket: address in use
Mar 17 17:36:47 mythtv-0 named[9895]: generating session key for dynamic DNS
Mar 17 17:36:47 mythtv-0 named[9895]: sizing zone task pool based on 5 zones
Mar 17 17:36:47 mythtv-0 named[9895]: Loading 'AD DNS Zone' using driver dlopen
Mar 17 17:36:48 mythtv-0 named[9895]: samba_dlz: started for DN DC=dmz,DC=meanspc,DC=com
Mar 17 17:36:48 mythtv-0 named[9895]: samba_dlz: starting configure
Mar 17 17:36:48 mythtv-0 named[9895]: samba_dlz: configured writeable zone 'dmz.meanspc.com'
Mar 17 17:36:48 mythtv-0 named[9895]: samba_dlz: configured writeable zone '_msdcs.dmz.meanspc.com'
Mar 17 17:36:48 mythtv-0 named[9895]: using built-in root key for view _default
Mar 17 17:36:48 mythtv-0 named[9895]: set up managed keys zone for view _default, file 'managed-keys.bind'
Mar 17 17:36:48 mythtv-0 named[9895]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 254.169.IN-ADDR.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 100.51.198.IN-ADDR.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 113.0.203.IN-ADDR.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: D.F.IP6.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 8.E.F.IP6.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 9.E.F.IP6.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: A.E.F.IP6.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: B.E.F.IP6.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
Mar 17 17:36:48 mythtv-0 named[9895]: command channel listening on 127.0.0.1#953
Mar 17 17:36:48 mythtv-0 named[9895]: command channel listening on ::1#953
Mar 17 17:36:48 mythtv-0 named[9895]: zone 0.in-addr.arpa/IN: loaded serial 1
Mar 17 17:36:48 mythtv-0 named[9895]: zone 127.in-addr.arpa/IN: loaded serial 1
Mar 17 17:36:48 mythtv-0 named[9895]: zone 255.in-addr.arpa/IN: loaded serial 1
Mar 17 17:36:48 mythtv-0 named[9895]: zone localhost/IN: loaded serial 2
Mar 17 17:36:48 mythtv-0 named[9895]: managed-keys-zone ./IN: loaded serial 3
Mar 17 17:36:48 mythtv-0 named[9895]: running
Mar 17 17:37:29 mythtv-0 named[9895]: client 127.0.0.1#53662: transfer of 'dmz.meanspc.com/IN': AXFR started
Mar 17 17:37:29 mythtv-0 named[9895]: client 127.0.0.1#53662: transfer of 'dmz.meanspc.com/IN': AXFR ended
Mar 17 17:38:37 mythtv-0 named[9895]: client 127.0.0.1#59300: transfer of 'dmz.meanspc.com/IN': AXFR started
Mar 17 17:38:37 mythtv-0 named[9895]: client 127.0.0.1#59300: transfer of 'dmz.meanspc.com/IN': AXFR ended
Mar 17 17:38:50 mythtv-0 dnsmasq[1937]: reading /etc/resolv.conf
Mar 17 17:38:50 mythtv-0 dnsmasq[1937]: using nameserver 75.75.76.76#53
Mar 17 17:38:50 mythtv-0 dnsmasq[1937]: using nameserver 8.8.4.4#53
Mar 17 17:38:50 mythtv-0 dnsmasq[1937]: using nameserver 8.8.8.8#53
Mar 17 17:38:50 mythtv-0 dnsmasq[1937]: using nameserver 127.0.0.1#53
Mar 17 17:39:01 mythtv-0 CRON[9943]: (root) CMD ( [ -x /usr/lib/php5/maxlifetime ] && [ -d /var/lib/php5 ] && find /var/lib/php5/ -depth -mindepth 1 -maxdepth 1 -type f -cmin +$(/usr/lib/php5/maxlifetime) ! -execdir fuser -s {} 2>/dev/null \; -delete)
Mar 17 17:39:07 mythtv-0 samba[9949]: [2014/03/17 17:39:07.015140, 0] ../source4/smbd/server.c:370(binary_smbd_main)
Mar 17 17:39:07 mythtv-0 samba[9949]: samba version 4.1.6-SerNet-Ubuntu-7.precise started.
Mar 17 17:39:07 mythtv-0 samba[9949]: Copyright Andrew Tridgell and the Samba Team 1992-2013
Mar 17 17:39:07 mythtv-0 samba[9950]: [2014/03/17 17:39:07.575526, 0] ../source4/smbd/server.c:492(binary_smbd_main)
Mar 17 17:39:07 mythtv-0 samba[9950]: samba: using 'standard' process model
Mar 17 17:39:07 mythtv-0 samba[9956]: [2014/03/17 17:39:07.638416, 0] ../source4/lib/tls/tlscert.c:70(tls_cert_generate)
Mar 17 17:39:07 mythtv-0 samba[9956]: Attempting to autogenerate TLS self-signed keys for https for hostname 'MYTHTV-0.dmz.meanspc.com'
Mar 17 17:39:07 mythtv-0 samba[9964]: [2014/03/17 17:39:07.758518, 0] ../source4/smbd/service_stream.c:346(stream_setup_socket)
Mar 17 17:39:07 mythtv-0 samba[9964]: Failed to listen on 192.168.101.170:53 - NT_STATUS_ADDRESS_ALREADY_ASSOCIATED
Mar 17 17:39:07 mythtv-0 samba[9964]: [2014/03/17 17:39:07.781551, 0] ../source4/dns_server/dns_server.c:623(dns_add_socket)
Mar 17 17:39:07 mythtv-0 samba[9964]: Failed to bind to 192.168.101.170:53 TCP - NT_STATUS_ADDRESS_ALREADY_ASSOCIATED
Mar 17 17:39:07 mythtv-0 samba[9964]: [2014/03/17 17:39:07.783482, 0] ../source4/smbd/service_task.c:35(task_server_terminate)
Mar 17 17:39:07 mythtv-0 samba[9964]: task_server_terminate: [dns failed to setup interfaces]
Mar 17 17:39:07 mythtv-0 samba[9950]: [2014/03/17 17:39:07.786917, 0] ../source4/smbd/server.c:211(samba_terminate)
Mar 17 17:39:07 mythtv-0 samba[9950]: samba_terminate: dns failed to setup interfaces
Mar 17 17:39:09 mythtv-0 samba[9956]: [2014/03/17 17:39:09.063826, 0] ../source4/lib/tls/tlscert.c:166(tls_cert_generate)
Mar 17 17:39:09 mythtv-0 samba[9956]: TLS self-signed keys generated OK
root at mythtv-0:~#
-------------- next part --------------
root at mythtv-0:~# samba-tool domain provision --realm=dmz.meanspc.com --domain=MEANSPC --adminpass="passwdUsed" --server-role=dc --dns-backend=BIND9_DLZ
Looking up IPv4 addresses
Looking up IPv6 addresses
No IPv6 address will be assigned
Setting up share.ldb
Setting up secrets.ldb
Setting up the registry
Setting up the privileges database
Setting up idmap db
Setting up SAM db
Setting up sam.ldb partitions and settings
Setting up sam.ldb rootDSE
Pre-loading the Samba 4 and AD schema
Adding DomainDN: DC=dmz,DC=meanspc,DC=com
Adding configuration container
Setting up sam.ldb schema
Setting up sam.ldb configuration data
Setting up display specifiers
Modifying display specifiers
Adding users container
Modifying users container
Adding computers container
Modifying computers container
Setting up sam.ldb data
Setting up well known security principals
Setting up sam.ldb users and groups
Setting up self join
Adding DNS accounts
Creating CN=MicrosoftDNS,CN=System,DC=dmz,DC=meanspc,DC=com
Creating DomainDnsZones and ForestDnsZones partitions
Populating DomainDnsZones and ForestDnsZones partitions
See /var/lib/samba/private/named.conf for an example configuration include file for BIND
and /var/lib/samba/private/named.txt for further documentation required for secure DNS updates
Setting up sam.ldb rootDSE marking as synchronized
Fixing provision GUIDs
A Kerberos configuration suitable for Samba 4 has been generated at /var/lib/samba/private/krb5.conf
Once the above files are installed, your Samba4 server will be ready to use
Server Role: active directory domain controller
Hostname: mythtv-0
NetBIOS Domain: MEANSPC
DNS Domain: dmz.meanspc.com
DOMAIN SID: S-1-5-21-1980270973-668447699-2125203918
root at mythtv-0:~#
More information about the samba
mailing list