[Samba] DDNS with bind9 and isc-dhcp-server
Stefan Kania
stefan at kania-online.de
Thu Aug 16 06:54:36 UTC 2018
Good Morning,
Am 15.08.2018 um 22:26 schrieb Rowland Penny via samba:
> It looks like the update script is not running or failing somewhere.
>
> What OS ?
It's a Debian 9 with Samba 4.8.3 from Louis. Bind9 is from the debian
repositories so its a 9.10.
If I join a Client (without DHCP and a fix IP-addresse) the DNS-Server
is updated so I can resolve the Client-IP.
If I do a:
-------------------
root at sambabuch:~# /etc/dhcp/bin/dhcp-dyndns.sh add 192.168.56.221
1:8:0:27:7b:f1:f2 linux-client
-------------------
I got a very long out put from DNS:
-------------------
...
Sending update to 127.0.0.1#53
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 35944
;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 2, ADDITIONAL: 1
;; UPDATE SECTION:
linux-client.example.net. 0 ANY A
linux-client.example.net. 3600 IN A 192.168.56.221
...
Sending update to 127.0.0.1#53
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 31600
;; flags:; ZONE: 1, PREREQ: 0, UPDATE: 2, ADDITIONAL: 1
;; UPDATE SECTION:
221.56.168.192.in-addr.arpa. 0 ANY PTR
221.56.168.192.in-addr.arpa. 3600 IN PTR linux-client.example.net.
...
;; TSIG PSEUDOSECTION:
1525823762.sig-sambabuch.example.net. 0 ANY TSIG gss-tsig. 1534402054
300 28 BAQF//////8AAAAAIVrv+6o2Iki9h5Nlvd13Ag== 31600 NOERROR 0
-------------------
This looks good for me. But:
-------------------
root at sambabuch:~# host linux-client
Host linux-client not found: 3(NXDOMAIN)
root at sambabuch:~# host linux-client.example.net
Host linux-client.example.net not found: 3(NXDOMAIN)
-------------------
> What is in the named conf files ?
Here the content of the named.conf.options
------------------
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses
replacing
// the all-0's placeholder.
forwarders {
1.1.1.1;
};
tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See
https://www.isc.org/bind-keys
//========================================================================
dnssec-validation no;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
allow-recursion { any; };
allow-query { any; };
allow-query-cache { any; };
};
------------------
And named.conf.local
------------------
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
include "/var/lib/samba/bind-dns/named.conf";
------------------
It must work, I had it working before, but now I can't find the problem :-(
Stefan
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 181 bytes
Desc: OpenPGP digital signature
URL: <http://lists.samba.org/pipermail/samba/attachments/20180816/3011f0e5/signature.sig>
More information about the samba
mailing list