samba - Dec 2016 - DNS dlz_bind9 error - samba 4.5.2

Hi,

I just did a new provision of my samba domain and now
the formerly working bind 9.10 + dlz setup does no
longer work.

When trying to start bind9 it quits with the following
error:

named[5818]: samba_dlz: started for DN DC=mydomain,DC=de
named[5818]: samba_dlz: starting configure
named[5818]: dns_rdata_fromtext: buffer-0x7f9bc9231ec0:1: near 'srv2..':
empty label
named[5818]: Failed to put rr
named[5818]: zone mydomain.de/NONE: could not find NS and/or SOA records
named[5818]: zone mydomain.de/NONE: has 0 SOA records
named[5818]: zone mydomain.de/NONE: has no NS records
named[5818]: samba_dlz: Failed to configure zone 'mydomain.de'
named[5818]: loading configuration: bad zone
named[5818]: exiting (due to fatal error)
systemd[1]: bind9.service: Main process exited, code=exited, 
status=1/FAILURE

If I'm reverting to the build-in DNS server of samba
the same DNS entries work fine. However I need to do
zone transfers (which samba's build-in DNS did not
support the last time I checked).

Does anyone else see this behaviour?

BTW: I'm running samba 4.5.2.

Marcel

Hi all,

here's the solution to my own question:

Permissions to /etc/samba/smb.conf were 640,
however 644 (or read access for bind/named) is required
for dlz to work.

Once found the fix is trivial, however the samba_dlz
error message didn't really point to the real cause
of this trouble :-(

Something like "/etc/samba/smb.conf: permission denied"
would be very nice.

Bye,
    Marcel




Am 2016-12-12 20:56, schrieb Marcel via samba:
> Hi,
> 
> I just did a new provision of my samba domain and now
> the formerly working bind 9.10 + dlz setup does no
> longer work.
> 
> When trying to start bind9 it quits with the following
> error:
> 
> named[5818]: samba_dlz: started for DN DC=mydomain,DC=de
> named[5818]: samba_dlz: starting configure
> named[5818]: dns_rdata_fromtext: buffer-0x7f9bc9231ec0:1: near
> 'srv2..': empty label
> named[5818]: Failed to put rr
> named[5818]: zone mydomain.de/NONE: could not find NS and/or SOA 
> records
> named[5818]: zone mydomain.de/NONE: has 0 SOA records
> named[5818]: zone mydomain.de/NONE: has no NS records
> named[5818]: samba_dlz: Failed to configure zone 'mydomain.de'
> named[5818]: loading configuration: bad zone
> named[5818]: exiting (due to fatal error)
> systemd[1]: bind9.service: Main process exited, code=exited, 
> status=1/FAILURE
> 
> If I'm reverting to the build-in DNS server of samba
> the same DNS entries work fine. However I need to do
> zone transfers (which samba's build-in DNS did not
> support the last time I checked).
> 
> Does anyone else see this behaviour?
> 
> BTW: I'm running samba 4.5.2.
> 
> Marcel

Hai, 

Did you check the mask of the user that did install/set samba. 
I think you umask was NOT set to umask 0022 but to 0027

Installed now aboutt 7 servers with (a debian 4.5.2) samba version. 
Untill now 0 problems. 

So can you please check this? 


Greetz, 

Louis

> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens Marcel via
samba
> Verzonden: dinsdag 13 december 2016 16:42
> Aan: marcel at linux-ng.de
> CC: samba at lists.samba.org
> Onderwerp: Re: [Samba] DNS dlz_bind9 error - samba 4.5.2
> 
> Hi all,
> 
> here's the solution to my own question:
> 
> Permissions to /etc/samba/smb.conf were 640,
> however 644 (or read access for bind/named) is required
> for dlz to work.
> 
> Once found the fix is trivial, however the samba_dlz
> error message didn't really point to the real cause
> of this trouble :-(
> 
> Something like "/etc/samba/smb.conf: permission denied"
> would be very nice.
> 
> Bye,
>     Marcel
> 
> 
> 
> 
> Am 2016-12-12 20:56, schrieb Marcel via samba:
> > Hi,
> >
> > I just did a new provision of my samba domain and now
> > the formerly working bind 9.10 + dlz setup does no
> > longer work.
> >
> > When trying to start bind9 it quits with the following
> > error:
> >
> > named[5818]: samba_dlz: started for DN DC=mydomain,DC=de
> > named[5818]: samba_dlz: starting configure
> > named[5818]: dns_rdata_fromtext: buffer-0x7f9bc9231ec0:1: near
> > 'srv2..': empty label
> > named[5818]: Failed to put rr
> > named[5818]: zone mydomain.de/NONE: could not find NS and/or SOA
> > records
> > named[5818]: zone mydomain.de/NONE: has 0 SOA records
> > named[5818]: zone mydomain.de/NONE: has no NS records
> > named[5818]: samba_dlz: Failed to configure zone 'mydomain.de'
> > named[5818]: loading configuration: bad zone
> > named[5818]: exiting (due to fatal error)
> > systemd[1]: bind9.service: Main process exited, code=exited,
> > status=1/FAILURE
> >
> > If I'm reverting to the build-in DNS server of samba
> > the same DNS entries work fine. However I need to do
> > zone transfers (which samba's build-in DNS did not
> > support the last time I checked).
> >
> > Does anyone else see this behaviour?
> >
> > BTW: I'm running samba 4.5.2.
> >
> > Marcel
> 
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba