[Samba] DNS dlz_bind9 error - samba 4.5.2

[marcel at linux-ng.de]

Hi all,

here's the solution to my own question:

Permissions to /etc/samba/smb.conf were 640,
however 644 (or read access for bind/named) is required
for dlz to work.

Once found the fix is trivial, however the samba_dlz
error message didn't really point to the real cause
of this trouble :-(

Something like "/etc/samba/smb.conf: permission denied"
would be very nice.

Bye,
    Marcel




Am 2016-12-12 20:56, schrieb Marcel via samba:
> Hi,
> 
> I just did a new provision of my samba domain and now
> the formerly working bind 9.10 + dlz setup does no
> longer work.
> 
> When trying to start bind9 it quits with the following
> error:
> 
> named[5818]: samba_dlz: started for DN DC=mydomain,DC=de
> named[5818]: samba_dlz: starting configure
> named[5818]: dns_rdata_fromtext: buffer-0x7f9bc9231ec0:1: near
> 'srv2..': empty label
> named[5818]: Failed to put rr
> named[5818]: zone mydomain.de/NONE: could not find NS and/or SOA 
> records
> named[5818]: zone mydomain.de/NONE: has 0 SOA records
> named[5818]: zone mydomain.de/NONE: has no NS records
> named[5818]: samba_dlz: Failed to configure zone 'mydomain.de'
> named[5818]: loading configuration: bad zone
> named[5818]: exiting (due to fatal error)
> systemd[1]: bind9.service: Main process exited, code=exited, 
> status=1/FAILURE
> 
> If I'm reverting to the build-in DNS server of samba
> the same DNS entries work fine. However I need to do
> zone transfers (which samba's build-in DNS did not
> support the last time I checked).
> 
> Does anyone else see this behaviour?
> 
> BTW: I'm running samba 4.5.2.
> 
> Marcel