[Samba] Bind9 issue

[Rowland penny]

On 30/09/2020 13:22, Robert Wooden via samba wrote:
> Yesterday I had an issue with Samba v 4.13.0.
>
> I cannot figure out why bind9 will not "host -t SRV _ldap._
> tcp.ad.dtntwk.work." or "host -t SRV _kerberos._udp.ad.dtntwk.work."
>
> root at dc1:~# host -t SRV _ldap._tcp.subdom.example.com.
Hmm, is 'subdom.example.com' really 'ad.dtntwk.work' ?
>> dc1.subdom.example.com has address 164.98.xxx.xxx
>>
> This ip address is my external ip provided from the ISP. It should be a
> local ip (192.168.0.xx)
How is your internal device getting an external IP ?
>
> root at dc1:~# cat /etc/bind/named.conf

Your bind files are the same as mine, except I have these in 'options' :

dnssec-enable no;
dnssec-lookaside no;
allow-transfer { none; };

>>          // rndc.key is installed by default on debian. Just a matter of
>> enableing it.
>>          include "/etc/bind/rndc.key";
>>              controls {
>>               inet 127.0.0.1 allow { localhost; } keys { rndc-key; };
>>          //     inet ::1 allow { ::1; } keys { rndc-key; };
>>          };
I also do not have the rndc lines, they are not required.

> And "dpkg-reconfigure krb5-user" will not reconfigure.
Strange.
>
> root at dc1:~# kinit administrator
>> kinit: Cannot find KDC for realm "SUBDOM.EXAMPLE.COM" while getting
>> initial credentials
Are Samba and Bind9 running ?

Is 'subdom.example.com' a registered domain, or is 'example.com' the 
registered domain ?

Rowland