[Samba] Problems with Internal DNS Samba 4

L.P.H. van Belle belle at bazuin.nl
Mon Sep 2 14:32:16 UTC 2019


Hai Marcio, 
 
oeps..  i hitted ALT-s ..  @marcio, the complete message. ;-)  is.. 

 
yes, i see you working at some late hours.. 
 
So setup the bind9, keep the 2 lines disabled, 
join samba then enable the 2 lines, start bind, start samba. 
 
i added the lines with >> 
 
in name.conf.options..

// https://wiki.samba.org/index.php/Dns-backend_bind // DNS dynamic updates via Kerberos (optional, but recommended) >> // ONE of the following lines should be enabled AFTER you provision or join a DC with bind9_dlz >> // or AFTER upgrading your dns from internal to bind9_dlz // Before Samba 4.9.0 // tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab"; // From Samba 4.9.0 ( You will need to run samba_dnsupgrade if upgrading your Samba version. ) //tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab";

 
 
and .. 

>>  And this next one is done also AFTER you provisioned/joined or upgrade from samba internal dns to bind9_dlz. 
The fourth file /etc/bind/named.conf.local, just needs the addition of one line, to link in another file provided by Samba:

//include "/var/lib/samba/bind-dns/named.conf";
Greetz, 
 
Louis
 


Van: L.P.H. van Belle 
Verzonden: maandag 2 september 2019 16:27
Aan: 'Marcio Demetrio Bacci'
Onderwerp: RE: [Samba] Problems with Internal DNS Samba 4



Hai Marcio, 
 
Ive updated the wiki a bit so that part should be a bit more clear. 
If DC3 is a new server, then yes. 
 
Just a side note i added on the wiki. 
 
( named.conf.options ) 
 
 
 

Van: Marcio Demetrio Bacci [mailto:marciobacci at gmail.com] 
Verzonden: maandag 2 september 2019 16:11
Aan: L.P.H. van Belle
CC: samba at lists.samba.org
Onderwerp: Re: [Samba] Problems with Internal DNS Samba 4



Hi, 

> 127.0.01 should be ... Ah you know.. Your missing a "dot".. 
Sorry, it was lack of attention. I'm tired!

I will join the domain a third DC (samba4-dc3). So just install bind9, configure bind9_dlz and join with the command "
samba-tool domain join empresa.com.br DC -k yes --server=samba4-dc1.empresa.com.br --dns-backend=BIND9_DLZ" ?


Regards,


Márcio Bacci  





Em seg, 2 de set de 2019 às 10:30, L.P.H. van Belle via samba <samba at lists.samba.org> escreveu:

Marcio, 

Just so you know what was wrong. 

> listen-on port 53 { 192.168.1.20; 127.0.01; }; 

The Bin9 "not starting problem " wrong was..  

127.0.01 should be ... Ah you know.. Your missing a "dot".. 

But good you made it. 


Greetz, 

Louis




More information about the samba mailing list