samba - May 2016 - standalone ADDC with samba_internal dns backend - windows client do not register in dns

Hi

first project with samba, first post on this mailing list and, actually, 
first time using a mailing list ever ;-)



In summary
=========================================I try to install samba in a test VMs,
everything seems fine but when
windows client joins the domain it doesn't register in samba's internal
dns



in detail
=========================================My objective
- for a small business (200 users), get rid of an old microsoft AD and 
use Samba instead
- before going into production, I test the setup on VMs to learn how the 
beast behaves
- I use the "internal_dns" as a dns backend


Problem :
- domain provision is ok
- all tests are ok
- windows client (7pro or 10pro) joins the domain without complaining 
but it doesn't register in the dns


My source of informations :
- for the setup : 
https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller
- for the verification : 
https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller#Testing_your_Samba_Domain_Controller
     - all thoses tests on the domains are ok
- I found also this 
https://wiki.samba.org/index.php/Fix_DNS_dynamic_updates_in_Samba_versions_prior_4.0.7
but the version I use are older then 4.0.7
     - tried ipconfig /registerdns -> same problem


The operating systems OS I tested :
- samba 4.2.7 binary pkg on FreeBSD 10.2                     -> works, I 
can't find why
- samba 4.3.3 binary pkg or ports on FreeBSD 10.2        -> same problem
- samba 4.3.8 binary pkg on FreeBSD 10.3                     -> same problem
- samba 4.4.2 with github on Debian 8.4 -> same problem


Any suggestion will be appreciated !

Thanks
DS

On 5/4/2016 5:02 AM, David STIEVENARD wrote:
> Hi
>
> first project with samba, first post on this mailing list and, 
> actually, first time using a mailing list ever ;-)
>
>
>
> In summary
> =========================================> I try to install samba in a
test VMs, everything seems fine but when
> windows client joins the domain it doesn't register in samba's 
> internal dns
>
>
>
> in detail
> =========================================> My objective
> - for a small business (200 users), get rid of an old microsoft AD and 
> use Samba instead
> - before going into production, I test the setup on VMs to learn how 
> the beast behaves
> - I use the "internal_dns" as a dns backend
>
>
> Problem :
> - domain provision is ok
> - all tests are ok
> - windows client (7pro or 10pro) joins the domain without complaining 
> but it doesn't register in the dns
>
>
> My source of informations :
> - for the setup : 
>
https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller
> - for the verification : 
>
https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller#Testing_your_Samba_Domain_Controller
>     - all thoses tests on the domains are ok
> - I found also this 
>
https://wiki.samba.org/index.php/Fix_DNS_dynamic_updates_in_Samba_versions_prior_4.0.7
> but the version I use are older then 4.0.7
>     - tried ipconfig /registerdns -> same problem
>
>
> The operating systems OS I tested :
> - samba 4.2.7 binary pkg on FreeBSD 10.2                     -> works, 
> I can't find why
> - samba 4.3.3 binary pkg or ports on FreeBSD 10.2        -> same problem
> - samba 4.3.8 binary pkg on FreeBSD 10.3                     -> same 
> problem
> - samba 4.4.2 with github on Debian 8.4 -> same problem
>
>
> Any suggestion will be appreciated !
>
> Thanks
> DS
>
>
David,

     Secure updates are broken on Samba 4.3 and higher when using the 
internal DNS. You must use 'allow dns updates = nonsecure' in your 
smb.conf global section. Otherwise use bind.

See bug https://bugzilla.samba.org/show_bug.cgi?id=11520

-- 
-James

Best suggestion i can make is .
Use bind_DLZ not internal dns, DLZ is more flexable. 
And use samba 4.4.3 ( or 4.3.9 or 4.2.12 ) 

I you want to test on debian jessie with samba 4.4.3 (amd64
packages)
>> http://downloads.van-belle.nl/samba4/ << 
Or compile yourself from debian sid. 


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> lingpanda101 at gmail.com
> Verzonden: woensdag 4 mei 2016 13:55
> Aan: samba at lists.samba.org
> Onderwerp: Re: [Samba] standalone ADDC with samba_internal dns backend -
> windows client do not register in dns
> 
> On 5/4/2016 5:02 AM, David STIEVENARD wrote:
> > Hi
> >
> > first project with samba, first post on this mailing list and,
> > actually, first time using a mailing list ever ;-)
> >
> >
> >
> > In summary
> > =========================================> > I try to install
samba in a test VMs, everything seems fine but when
> > windows client joins the domain it doesn't register in samba's
> > internal dns
> >
> >
> >
> > in detail
> > =========================================> > My objective
> > - for a small business (200 users), get rid of an old microsoft AD and
> > use Samba instead
> > - before going into production, I test the setup on VMs to learn how
> > the beast behaves
> > - I use the "internal_dns" as a dns backend
> >
> >
> > Problem :
> > - domain provision is ok
> > - all tests are ok
> > - windows client (7pro or 10pro) joins the domain without complaining
> > but it doesn't register in the dns
> >
> >
> > My source of informations :
> > - for the setup :
> >
> https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Con
> troller
> > - for the verification :
> >
> https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Con
> troller#Testing_your_Samba_Domain_Controller
> >     - all thoses tests on the domains are ok
> > - I found also this
> >
> https://wiki.samba.org/index.php/Fix_DNS_dynamic_updates_in_Samba_versions
> _prior_4.0.7
> > but the version I use are older then 4.0.7
> >     - tried ipconfig /registerdns -> same problem
> >
> >
> > The operating systems OS I tested :
> > - samba 4.2.7 binary pkg on FreeBSD 10.2                     ->
works,
> > I can't find why
> > - samba 4.3.3 binary pkg or ports on FreeBSD 10.2        -> same
problem
> > - samba 4.3.8 binary pkg on FreeBSD 10.3                     ->
same
> > problem
> > - samba 4.4.2 with github on Debian 8.4 -> same problem
> >
> >
> > Any suggestion will be appreciated !
> >
> > Thanks
> > DS
> >
> >
> 
> David,
> 
>      Secure updates are broken on Samba 4.3 and higher when using the
> internal DNS. You must use 'allow dns updates = nonsecure' in your
> smb.conf global section. Otherwise use bind.
> 
> See bug https://bugzilla.samba.org/show_bug.cgi?id=11520
> 
> --
> -James
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba

good lords of Kobol, that solved my problem !
thank you very much !

As we can consider this as an official workaround, should it be in the 
wiki ? (this is definitively in my docs now :)



On 05/04/2016 07:55 PM, lingpanda101 at gmail.com wrote:
> On 5/4/2016 5:02 AM, David STIEVENARD wrote:
>> Hi
>>
>> first project with samba, first post on this mailing list and, 
>> actually, first time using a mailing list ever ;-)
>>
>>
>>
>> In summary
>> =========================================>> I try to install
samba in a test VMs, everything seems fine but when
>> windows client joins the domain it doesn't register in samba's 
>> internal dns
>>
>>
>>
>> in detail
>> =========================================>> My objective
>> - for a small business (200 users), get rid of an old microsoft AD 
>> and use Samba instead
>> - before going into production, I test the setup on VMs to learn how 
>> the beast behaves
>> - I use the "internal_dns" as a dns backend
>>
>>
>> Problem :
>> - domain provision is ok
>> - all tests are ok
>> - windows client (7pro or 10pro) joins the domain without complaining 
>> but it doesn't register in the dns
>>
>>
>> My source of informations :
>> - for the setup : 
>>
https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller
>> - for the verification : 
>>
https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller#Testing_your_Samba_Domain_Controller
>>     - all thoses tests on the domains are ok
>> - I found also this 
>>
https://wiki.samba.org/index.php/Fix_DNS_dynamic_updates_in_Samba_versions_prior_4.0.7
>> but the version I use are older then 4.0.7
>>     - tried ipconfig /registerdns -> same problem
>>
>>
>> The operating systems OS I tested :
>> - samba 4.2.7 binary pkg on FreeBSD 10.2 -> works, I can't find
why
>> - samba 4.3.3 binary pkg or ports on FreeBSD 10.2        -> same
problem
>> - samba 4.3.8 binary pkg on FreeBSD 10.3 -> same problem
>> - samba 4.4.2 with github on Debian 8.4 -> same problem
>>
>>
>> Any suggestion will be appreciated !
>>
>> Thanks
>> DS
>>
>>
>
> David,
>
>     Secure updates are broken on Samba 4.3 and higher when using the 
> internal DNS. You must use 'allow dns updates = nonsecure' in your 
> smb.conf global section. Otherwise use bind.
>
> See bug https://bugzilla.samba.org/show_bug.cgi?id=11520
>