[Samba] Internal DNS migrate to Bind9_DLZ

[Eben Victor]

Hello Rowland,

selinux has been disabled, I also ran th follow

# systemctl stop sernet-samba-ad
# samba_upgradedns --dns-backend=BIND9_DLZ
# named -d3 -f -g -u named

Which then still fails, see below smb.conf

[global]
        workgroup = DOMAIN
        realm = DOMAIN.CORP
        netbios name = PDC
        server role = active directory domain controller
        idmap_ldb:use rfc2307 = yes
        idmap config * : range = 3000-7999
        winbind offline logon = Yes
        guest account = nobody
        restrict anonymous = 1
        winbind max clients = 2000
        log level = 2
        ldap server require strong auth = no
        ntlm auth = mschapv2-and-ntlmv2-only
        template homedir = /home/%D/%U
        template shell = /bin/bash
        interfaces = lo ens192
        bind interfaces only = yes
       server services = -dns
        max xmit = 65535
        dead time = 15

# Disable printer share
        load printers = No
        printcap name = /dev/null
        disable spoolss = Yes

# Enable domain TLS
        tls enabled  = yes
        tls keyfile  = tls/key.pem
        tls certfile = tls/cert.pem
        tls cafile   = tls/ca.pem

[netlogon]
        path = /var/lib/samba/sysvol/domain.corp/scripts
        read only = Yes

[sysvol]
        path = /var/lib/samba/sysvol
        read only = Yes


On Mon, Jul 30, 2018 at 11:43 AM Rowland Penny via samba <
samba at lists.samba.org> wrote:

> On Mon, 30 Jul 2018 11:25:11 +0200
> Eben Victor <eben.victor at gmail.com> wrote:
>
> > Yes I have added "server services = -dns"  to my smb.conf file and
> > also removed "dns forwarder ="
> > I've done the same setup but on Samba 4.7.7, RHEL6, named 9.8 and this
> > works perfect.
> >
>
> OK, but have you run 'samba_upgradedns' ?
>
> If you have, then all that seems to be left is selinux, is this getting
> in the way ?
>
> Rowland
>
>
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>


-- 
Eben Victor
Cell:  +27 82 759 5266
Email: eben.victor at gmail.com