[Samba] problem with sessions

[Rowland Penny]

On Thu, 2 Mar 2017 18:48:47 +0100
Tony Peña <emperor.cu at gmail.com> wrote:

> hi Rowland,
> 
> ok a refix the other lines above but..
> 
> what means "I think your problem is down to your DNS setup, it seems
> to be using
> flatfiles" and this is NOT supported by Samba.
> 
> 
> 

OK, you have things like this in your bind conf files:

zone "0.168.192.in-addr.arpa" {
    type master;
    file "/var/lib/bind/db.0.168.192";
    update-policy {
        // The only allowed dynamic updates are PTR records
        grant serverdc.lcl. subdomain 0.168.192.in-addr.arpa. PTR TXT;
        // Grant from localhost
        grant local-ddns zonesub any;
    };
};

This is a 'flatfile'

If this a reverse zone for the DC domain, it should be in AD and you
don't update it as you are trying to do.

If it isn't a reverse zone, then it shouldn't be in your bind conf
files.

If I run 'samba-tool dns zonelist 127.0.0.1' on the DC, I get this:

samba-tool dns zonelist 127.0.0.1 -Uadministrator
Password for [SAMDOM\administrator]:
  3 zone(s) found

  pszZoneName                 : 0.168.192.in-addr.arpa
  Flags                       : DNS_RPC_ZONE_DSINTEGRATED DNS_RPC_ZONE_UPDATE_SECURE 
  ZoneType                    : DNS_ZONE_TYPE_PRIMARY
  Version                     : 50
  dwDpFlags                   : DNS_DP_AUTOCREATED DNS_DP_DOMAIN_DEFAULT DNS_DP_ENLISTED 
  pszDpFqdn                   : DomainDnsZones.samdom.example.com

  pszZoneName                 : samdom.example.com
  Flags                       : DNS_RPC_ZONE_DSINTEGRATED DNS_RPC_ZONE_UPDATE_SECURE 
  ZoneType                    : DNS_ZONE_TYPE_PRIMARY
  Version                     : 50
  dwDpFlags                   : DNS_DP_AUTOCREATED DNS_DP_DOMAIN_DEFAULT DNS_DP_ENLISTED 
  pszDpFqdn                   : DomainDnsZones.samdom.example.com

  pszZoneName                 : _msdcs.samdom.example.com
  Flags                       : DNS_RPC_ZONE_DSINTEGRATED DNS_RPC_ZONE_UPDATE_SECURE 
  ZoneType                    : DNS_ZONE_TYPE_PRIMARY
  Version                     : 50
  dwDpFlags                   : DNS_DP_AUTOCREATED DNS_DP_FOREST_DEFAULT DNS_DP_ENLISTED 
  pszDpFqdn                   : ForestDnsZones.samdom.example.com

The reverse zone, the forward zone and the forest zone.

If you need to add the reverse zone to AD, see 'samba-tool dns
zonecreate --help'

Rowland