[Samba] bind fails to start w/missing records

[Rowland Penny]

On 10/05/15 12:18, Steve Thompson wrote:
> Samba 4.1.16, Centos 6.6 x86-64, BIND_DLZ 9.9. I have three AD DC's that
> were functioning normally. However, today I restarted BIND on one node,
> and it failed to start with this message in the log (names changed):
>
> May 10 07:02:49 benford named[6767]: Loading 'AD DNS Zone' using 
> driver dlopen
> May 10 07:02:49 benford named[6767]: samba_dlz: started for DN 
> DC=samdom,DC=example,DC=com
> May 10 07:02:49 benford named[6767]: samba_dlz: starting configure
> May 10 07:02:49 benford named[6767]: samba_dlz: configured writeable 
> zone 'samdom.example.com'
> May 10 07:02:49 benford named[6767]: zone 
> _msdcs.samdom.example.com/NONE: has no NS records
> May 10 07:02:49 benford named[6767]: samba_dlz: Failed to configure 
> zone '_msdcs.samdom.example.com'
> May 10 07:02:49 benford named[6767]: loading configuration: bad zone
> May 10 07:02:49 benford named[6767]: exiting (due to fatal error)
>
> For now, I have excluded samba's named.conf from the BIND 
> configuration, and have manually inserted the relevant _ldap, 
> _kerberos (etc) entries into the relevant zone file. This is the only 
> way I can get BIND to start, and the domain seems to be normally 
> functional in this state.
>
> The other two DC's suffer from the same problem. I'd appreciate some 
> insight into how I might fix this in the database. Thanks,
>
> Steve
>  -- 
> ----------------------------------------------------------------------------
> Steve Thompson                 E-mail:      smt AT vgersoft DOT com
> Voyager Software LLC           Web:         http://www DOT vgersoft 
> DOT com
> 39 Smugglers Path              VSW Support: support AT vgersoft DOT com
> Ithaca, NY 14850
>   "186,282 miles per second: it's not just a good idea, it's the law"
> ---------------------------------------------------------------------------- 
>

can you post your named conf files.

Rowland