[Samba] samba_dlz: Failed to configure zone... already exists

[Rowland Penny]

On 03/09/15 14:28, Jim Seymour wrote:
> Hi All,
>
> Finally got BIND_DLZ going.  Last errors were:
>
>      samba_dlz: Failed to configure zone 'example.com'
>      loading configuration: already exists
>      exiting (due to fatal error)
>      samba_dlz: shutting down
>
> And, indeed, I had, in /etc/bind/named.local.conf:
>
>      zone "example.com" in {
>          type master;
>          file "named.hosts";
>      };
>
> Commenting that out solved the problem and BIND started up.
>
> Problem is: I *need* that (static) zone.  This server will be not only
> the Samba AD DC, but primary nameserver and a bunch of other stuff.  So
> I imagine I have to start over, making the zone in which the AD DC
> stuff resides "pdc.example.com"?
>
> Only not certain about interaction between the Samba AD DC zone and the
> Kerberos default_realm?
>
> Thanks,
> Jim

The kerberos default_realm must be the samba AD DC domain name and 
usually the samba DNS server (internal or bind) is just the dns server 
for the samba4 AD DC. This does not mean that you cannot add other zones 
to AD, this is easily done with samba-tool, in fact as standard, you 
have to create the reverse zone if you require it.

I wouldn't use 'pdc.example.com' as you do not have a pdc and should get 
out of the habit of referring to it as the PDC, a PDC is a very 
different thing from an AD DC, all DCs are equal apart from the FSMO 
roles. How about 'ad.example.com' or 'samba.example.com'

Rowland