[Samba] Switching from Internal DNS to Bind9_DLZ

[Rowland Penny]

On Tue, 2 Jan 2018 12:43:40 -0500
lingpanda101 <lingpanda101 at gmail.com> wrote:

> On 1/2/2018 12:25 PM, Rowland Penny wrote:
> > On Tue, 2 Jan 2018 12:09:33 -0500
> > lingpanda101 via samba <samba at lists.samba.org> wrote:
> >
> >> Hello,
> >>
> >>       Installing bind9 on my Ubuntu 14.04 via. apt-get displays the
> >> following options.
> >>
> >>    #named -V
> >> BIND 9.9.5-3ubuntu0.16-Ubuntu (Extended Support Version)
> >> <id:f9b8a50e> built by make with '--prefix=/usr'
> >> '--mandir=/usr/share/man' '--infodir=/usr/share/info'
> >> '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads'
> >> '--enable-largefile' '--with-libtool' '--enable-shared'
> >> '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr'
> >> '--with-gnu-ld' '--with-geoip=/usr' '--with-atf=no' '--enable-ipv6'
> >> '--enable-rrl' '--enable-filter-aaaa' 'CFLAGS=-fno-strict-aliasing
> >> -DDIG_SIGCHASE -O2'
> >>
> >> The Samba wiki states I should see;
> >>
> >> named -V
> >> BIND 9.x.y built with ... '--with-dlopen=yes'
> >> '--with-gssapi=yes' ...
> >>
> >> As you can see I have;
> >>
> >> '--with-gssapi=/usr' and *NO* '--with-dlopen=yes'
> >>
> >> Is it possible to enable '--with-dlopen=yes' without compiling?
> >> Thanks.
> >>
> >>
> >>
> > No, but funnily enough, you won't be able enable it by compiling it
> > either ;-)
> >
> > It is now built into the standard compiled Bind9, so I suppose the
> > real answer to your question is that you can use the standard Bind9
> > package on 14.04 with Samba.
> >
> > I will update the wiki page.
> >
> > Rowland
> 
> Thank you.
> 
> I notice that when installing bind9 via apt-get, I get a user and
> group created called 'bind' rather then 'named'. I assume I can just
> use 'bind' when  following the wiki here;
> 
> Enable the BIND user to read the root servers list:
> # chown root:named /var/named/named.root
> # chmod 640 /var/named/named.root
> 
> 

If you use a red-hat based distro and install Bind9, you get a user &
group called 'named' and if you use a debian based distro, you get a
user & group called 'bind'.
This means where you find a user or group called 'named' and you
are on debian, you can replace this with 'bind'

Rowland