[Samba] Samba4 AD DC Implementation Report - YAY! And Thanks for the tools!

[Sketch]

On Mon, 16 Mar 2015, Deven Phillips wrote:

> Following the instructions here:
> https://wiki.samba.org/index.php/Samba_AD_DC_HOWTO
>
> In that page there is a link to using Bind as your DNS server, which links
> to: https://wiki.samba.org/index.php/DNS_Backend_BIND
>
> On that page, it instructs you to populate the DNS server with the command:
>
> /usr/local/samba/sbin/samba_dnsupdate --verbose --all-names

Technically, it doesn't say that, it says you can run it manually to test 
or debug the updates.  The wiki says that samba runs that script itself at 
startup, and every 10 minutes thereafter.

That said, what you say below is all correct.  I have seen the same thing. 
The defaults should work fine for most people, however, if you have some 
interfaces on an internal management network or something that is not 
reachable by all clients, adding them to DNS will cause issues.

> Without the "interfaces" and the "bind interfaces only" it will grab the IP
> addresses of all configured interfaces and register them into DNS. This,
> for my server, querying it for A records returned:
>
> 127.0.0.1 (loopback)
> 192.168.1.210 (br0 - LAN address)
> 192.168.122.1 (virtual network for KVM)
> 172.16.0.1 (Virtual network for Docker)
>
> On the br0 interface is of any use to other hosts, so it caused me some
> problems and I had to use samba-tool to remove the extra A records.