[Samba] bind fails to start w/missing records

Steve Thompson smt at vgersoft.com
Sun May 10 05:18:51 MDT 2015


Samba 4.1.16, Centos 6.6 x86-64, BIND_DLZ 9.9. I have three AD DC's that
were functioning normally. However, today I restarted BIND on one node,
and it failed to start with this message in the log (names changed):

May 10 07:02:49 benford named[6767]: Loading 'AD DNS Zone' using driver dlopen
May 10 07:02:49 benford named[6767]: samba_dlz: started for DN DC=samdom,DC=example,DC=com
May 10 07:02:49 benford named[6767]: samba_dlz: starting configure
May 10 07:02:49 benford named[6767]: samba_dlz: configured writeable zone 'samdom.example.com'
May 10 07:02:49 benford named[6767]: zone _msdcs.samdom.example.com/NONE: has no NS records
May 10 07:02:49 benford named[6767]: samba_dlz: Failed to configure zone '_msdcs.samdom.example.com'
May 10 07:02:49 benford named[6767]: loading configuration: bad zone
May 10 07:02:49 benford named[6767]: exiting (due to fatal error)

For now, I have excluded samba's named.conf from the BIND configuration, 
and have manually inserted the relevant _ldap, _kerberos (etc) entries 
into the relevant zone file. This is the only way I can get BIND to start, 
and the domain seems to be normally functional in this state.

The other two DC's suffer from the same problem. I'd appreciate some 
insight into how I might fix this in the database. Thanks,

Steve
  -- 
----------------------------------------------------------------------------
Steve Thompson                 E-mail:      smt AT vgersoft DOT com
Voyager Software LLC           Web:         http://www DOT vgersoft DOT com
39 Smugglers Path              VSW Support: support AT vgersoft DOT com
Ithaca, NY 14850
   "186,282 miles per second: it's not just a good idea, it's the law"
----------------------------------------------------------------------------


More information about the samba mailing list