[Samba] Changing IP Scope on a Samba DC

Rowland penny rpenny at samba.org
Mon Aug 31 19:08:53 UTC 2020

On 31/08/2020 19:59, Peter Pollock wrote:
> Yes, it is <>
> Thank you.

OK, try these files:


// This is the primary configuration file for the BIND DNS server named.
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
// If you are just adding zones, please do that in 

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";


options {
         directory "/var/cache/bind";
         notify no;
         empty-zones-enable no;
         allow-query {;; };
         allow-recursion {;; };
         forwarders {
         allow-transfer { none; };
         dnssec-validation no;
         dnssec-enable no;
         dnssec-lookaside no;
         listen-on-v6 { none; };
         listen-on port 53 {;; };

         tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab";


// Do any local configuration here

// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";

// adding the Samba dlopen ( Bind DLZ ) module
include "/var/lib/samba/bind-dns/named.conf";


// prime the server with knowledge of the root servers
zone "." {
     type hint;
     file "/usr/share/dns/root.hints";

// be authoritative for the localhost forward and reverse zones, and for
// broadcast zones as per RFC 1912

zone "localhost" {
     type master;
     file "/etc/bind/db.local";

zone "127.in-addr.arpa" {
     type master;
     file "/etc/bind/db.127";

zone "0.in-addr.arpa" {
     type master;
     file "/etc/bind/db.0";

zone "255.in-addr.arpa" {
     type master;
     file "/etc/bind/db.255";


# This DNS configuration is for BIND 9.8.0 or later with dlz_dlopen support.
# This file should be included in your main BIND configuration file
# For example with
# include "/var/lib/samba/bind-dns/named.conf";

# This configures dynamically loadable zones (DLZ) from AD schema
# Uncomment only single database line, depending on your BIND version
dlz "AD DNS Zone" {
     # For BIND 9.8.x
     # database "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9.so";

     # For BIND 9.9.x
     # database "dlopen 

     # For BIND 9.10.x
     # database "dlopen 

     # For BIND 9.11.x
      database "dlopen 

     # For BIND 9.12.x
     # database "dlopen 

They are based on my working Bind9 files and that the Samba keytab etc 
are now in /var/lib/samba/bind-dns. Also that you are using Debian with 

Any questions, please ask.


More information about the samba mailing list