Hello, I've two domains : * DomainA with a Windows 2016 AD * DomainB with a Samba 4.8.4 AD (with DNS internal Backend and with a second samba AD in 4.6.7) With DNS tools, in the Windows 2016 AD i can set "Conditional forwarders" to DomainB with the IP of the Samba 4.8.4 (checked green) But with the tools in DomainB, I can't set a "Conditional forwarders" to DomainA with the IP of Windows 2016 AD. So, it is a bug ? can Samba do that ? Regards -- Hervé Hénoch Responsable informatique Institut Sainte Catherine 250 chemin de Baigne-Pieds CS 80005 — 84918 AVIGNON cedex 9 Téléphone : 04.90.27.57.44
On Thu, 13 Dec 2018 12:14:04 +0100 Hervé Hénoch via samba <samba at lists.samba.org> wrote:> Hello, > > I've two domains : > > * DomainA with a Windows 2016 AD > * DomainB with a Samba 4.8.4 AD (with DNS internal Backend and with > a second samba AD in 4.6.7) > > With DNS tools, in the Windows 2016 AD i can set "Conditional > forwarders" to DomainB with the IP of the Samba 4.8.4 (checked green) > > But with the tools in DomainB, I can't set a "Conditional forwarders" > to DomainA with the IP of Windows 2016 AD. > > So, it is a bug ? can Samba do that ? > > Regards >Been asked before: https://lists.samba.org/archive/samba/2017-June/209070.html Don't know if it works, the guy never came back and told us ;-) Rowland
I've asked this question because it is the first step before domain approbation. Several questions in my message : 1) With Samba AD, can we via "Windows DNS Tools" set a conditional forwarders ? 2) If yes, is it possible with samba internal dns ? 3) If we can't use "Windows DNS Tools" do we have another method to do "conditional forwarder" ? Regards Le 13/12/2018 à 13:00, Rowland Penny via samba a écrit :> On Thu, 13 Dec 2018 12:14:04 +0100 > Hervé Hénoch via samba <samba at lists.samba.org> wrote: > >> Hello, >> >> I've two domains : >> >> * DomainA with a Windows 2016 AD >> * DomainB with a Samba 4.8.4 AD (with DNS internal Backend and with >> a second samba AD in 4.6.7) >> >> With DNS tools, in the Windows 2016 AD i can set "Conditional >> forwarders" to DomainB with the IP of the Samba 4.8.4 (checked green) >> >> But with the tools in DomainB, I can't set a "Conditional forwarders" >> to DomainA with the IP of Windows 2016 AD. >> >> So, it is a bug ? can Samba do that ? >> >> Regards >> > Been asked before: > > https://lists.samba.org/archive/samba/2017-June/209070.html > > Don't know if it works, the guy never came back and told us ;-) > > Rowland >
Hai,> -----Oorspronkelijk bericht----- > Van: samba [mailto:samba-bounces at lists.samba.org] Namens > Hénoch Hervé via samba > Verzonden: donderdag 13 december 2018 13:11 > Aan: Rowland Penny; samba at lists.samba.org > Onderwerp: Re: [Samba] Conditional forwarders > > I've asked this question because it is the first step before domain > approbation. > > Several questions in my message : > > 1) With Samba AD, can we via "Windows DNS Tools" set a conditional > forwarders ?No, you need bind9_dlz for and edit the files manualy.> > 2) If yes, is it possible with samba internal dns ?No, see 1.> > 3) If we can't use "Windows DNS Tools" do we have another method to do > "conditional forwarder" ?Yes, see 1. And per example, its pretty simple also. You need something like this. zone "internal1.domain.tld" { type forward; forwarders { 192.168.0.1; 192.168.0.1; }; }; zone "0.168.192.in-addr.arpa" { type forward; forwarders { 192.168.0.1; 192.168.0.1; }; }; zone "domain.tld" { type forward; forwarders { 192.168.0.1; 192.168.0.1; }; // ! Please note. If this is a mail relay. Point it tot and internet DNS or get stuck with SPF/DKIM/DMARC // for a proxy, you can set it to internal dns or external dns, depending on you needs. // forwarders { 8.8.8.8; 62.212.131.101; }; And dont forget to adjust krb5.conf for a multi kerberos domain, if you use that. If you have a lot of request, setup caching and forwarding dns proxy. Greetz, Louis