[Samba] DNS Issues when joining a Domain as a DC [SOLVED]

[Marc Muehlfeld]

Am 16.10.2014 um 13:58 schrieb Thomas Kempf:
> O.k. The problem is solved. I read through Louis scripts and found this
> 
>># Fixes for sernet samba missing rights
>>if [ -d /var/lib/samba/private ]; then
>>echo "enable-ing access for bind in private"
>>chmod 755 /var/lib/samba/private
>>chown root:bind /var/lib/samba/private/dns.keytab
>>fi


I found this issue yesterday, too, while I did some debugging stuff with
DNS and sites.

I filed a bug report about that the permissions are not set correct:
https://bugzilla.samba.org/show_bug.cgi?id=10881
I decited, this is a bug, because when you provision a domain (first
DC), then the permissions and group are set correct - so we have this
feature. But it's not done when joining additional DCs.


I had added meanwhile an information to the Wiki documentation about
that too:
https://wiki.samba.org/index.php/Join_a_domain_as_a_DC#Workaround:_Fix_Keytab_permissions_for_BIND_DLZ



Regards,
Marc