[Samba] ERROR:connection refused after provision

Rowland Penny rpenny at samba.org
Thu Nov 10 15:59:08 UTC 2016


On Thu, 10 Nov 2016 09:48:22 -0500 (CST)
Felipe_G0NZÁLEZ_SANTIAG0 <fgonzalez at uci.cu> wrote:

> See inline comments: 
> 
> ----- Original Message -----


> 
> No, I'm not using EXT3, I'm using EXT4. I should've wrote edit fstab.
> So, I add 'defaults,barrier=1' in fstab.

No need to, it is one of the defaults
 
> And This is my /etc/bind/named.conf.options content: 
> options { 
> directory "/var/cache/bind"; 
> 
> // If there is a firewall between you and nameservers you want 
> // to talk to, you may need to fix the firewall to allow multiple 
> // ports to talk. See http://www.kb.cert.org/vuls/id/800113 
> 
> // If your ISP provided one or more IP addresses for stable 
> // nameservers, you probably want to use them as forwarders. 
> // Uncomment the following block, and insert the addresses replacing 
> // the all-0's placeholder. 
> 
> // forwarders { 
> // 0.0.0.0; 
> // }; 
> 
> //======================================================================== 
> // If BIND logs error messages about the root key being expired, 
> // you will need to update your keys. See
> https://www.isc.org/bind-keys //======================================================================== 
> dnssec-validation auto; 
> 
> auth-nxdomain no; # conform to RFC1035 
> listen-on-v6 { any; }; 
> }; 

And this mine:

options {
        directory "/var/cache/bind";
        version "0.0.7";
        notify no;
        empty-zones-enable no;
        allow-query { 127.0.0.1; 192.168.0.0/24; };
        allow-recursion { 192.168.0.0/24;  127.0.0.1/32; };
        forwarders { 8.8.8.8; };
        allow-transfer { none; };
        dnssec-validation auto;

        listen-on-v6 { none; };
        listen-on port 53 { 192.168.0.2; 127.0.0.1; };
        tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab";
};

> 
> The resolv.conf content is: 
> nameserver 10.53.3.11 
> domain ejemplo.cu 

Is '10.53.3.11' the ip of the DC ? if not, change it to the ip of the
DC. I would also change 'domain' to 'search'

Rowland



More information about the samba mailing list