[Samba] How to switch from internal DNS to Bind

[Rowland penny]

On 31/12/15 14:55, Reindl Harald wrote:
>
>
> Am 31.12.2015 um 15:43 schrieb James:
>> On 12/30/2015 4:14 PM, Rowland penny wrote:
>>> ./configure --prefix=/usr --mandir=/usr/share/man
>>> --infodir=/usr/share/info --sysconfdir=/etc/bind --localstatedir=/var
>>> --enable-threads --enable-largefile --with-libtool --enable-shared
>>> --enable-static --with-openssl=/usr --with-gssapi=/usr
>>> --with-dlopen=yes --with-gnu-ld --enable-ipv6
>>> CFLAGS='-fno-strict-aliasing -DDIG_SIGCHASE -O2'
>>> LDFLAGS='-Wl,-Bsymbolic-functions -Wl,-z,relro'
>>> CPPFLAGS='-D_FORTIFY_SOURCE=2'
>> I seem to have a few errors in my syslog.
>>
>> Dec 31 09:35:17 VMDC1 named[24025]: couldn't mkdir '/var/run/named':
>> Permission denied
>> I compiled using 9.9.8-P2 and your suggested configure options. I see
>> /run is owned by root:root. Should I give group 'named' permission to
>> this folder? It's not documented in the wiki as needed
>
> nobody but root has a business directly on /run
> you should create the subfolder as any bind-package does

I totally agree

>
> on modern systems /run is a tmpfs and hence empty at boot
> so it's "tmpfiles" job to re-create them at boot

Ah, but the OP is using Ubuntu 12.04 and I don't think that it uses the 
'tmpfile' /run, I am sure it used the 'fixed' /var/run instead.

>
>
> that config is typically part of the bind package

Yes, that is where I got it from, it puts everything where the distro 
package did, you can then use the distro's init script etc. If he was to 
move to a later distro, then he wouldn't have to compile Bind9 :-)

>
> [root at srv-rhsoft:~]$ cat /usr/lib/tmpfiles.d/named.conf
> d /run/named 0755 named named -
>

I have checked and all I did after compiling bind9 was to provision 
samba4, setup bind with samba and then started bind and samba.

Rowland