[Samba] bind9 refuses to start -> zone has no NS records

Rowland penny rpenny at samba.org
Thu Apr 30 13:46:53 UTC 2020

On 30/04/2020 14:19, Benedikt Kaleß via samba wrote:
> Hi Denis,
> thanks a lot!
>> you said that the zone is empty. It is not a problem per se but for some
>> time Bind-DLZ has been a bit more strict and ask for a NS record for
>> every zone. So you just have to create a NS field in your zone pointing
>> to one of your DC and you should be fine. Internal DNS does not have
>> this requirements.
>> samba-tool dns mydc 21.168.192.in-addr.arpa @ NS mydc.mydomain.lan. -P
> There is something missing, right?
> perhaps this way:
> samba-tool dns add|update mydc 21.168.192.in-addr.arpa NS
> mydc.mydomain.lan -Uadministrator
The syntax is:

samba-tool dns add <server> <zone> <name> NS fqdn_string

In your instance <server> is mydc, <zone> is 21.168.192.in-addr.arpa, 
<name> is '@', the fqdn_string is mydc.mydomain.lan

You will also need to add a user with the required permissions, '-P' is 
probably not enough, so '-Uadministrator' will have the correct permissions.


More information about the samba mailing list