samba - Jul 2015 - Strange issue with share access on domain controllers

Le 13/07/2015 17:02, Rowland Penny a écrit :
> On 13/07/15 15:57, Sébastien Le Ray wrote:
>> Le 13/07/2015 16:51, Rowland Penny a écrit :
>>> On 12/07/15 17:41, Sébastien Le Ray wrote:
>>>>         dns forwarder = 127.0.0.1
>>> Why is the DC forwarding unknown DNS addresses to itself ?
>> It isn't 127.0.0.1 is not part of the interfaces directive :-)
>
> OK then, what is running on 127.0.0.1:53 ??
Bind as a slave + recursive resolver

On 13/07/15 16:11, Sébastien Le Ray wrote:
>
>
> Le 13/07/2015 17:02, Rowland Penny a écrit :
>> On 13/07/15 15:57, Sébastien Le Ray wrote:
>>> Le 13/07/2015 16:51, Rowland Penny a écrit :
>>>> On 12/07/15 17:41, Sébastien Le Ray wrote:
>>>>>         dns forwarder = 127.0.0.1
>>>> Why is the DC forwarding unknown DNS addresses to itself ?
>>> It isn't 127.0.0.1 is not part of the interfaces directive :-)
>>
>> OK then, what is running on 127.0.0.1:53 ??
>
> Bind as a slave + recursive resolver
Then it is undoubtedly interfering with the samba DNS server which will 
also be trying to run on port 53!

Just run one of them, either the internal DNS server or the Bind DNS 
server, not both.

Rowland

Le 13/07/2015 17:17, Rowland Penny a écrit :
> On 13/07/15 16:11, Sébastien Le Ray wrote:
>>
>>
>> Le 13/07/2015 17:02, Rowland Penny a écrit :
>>> On 13/07/15 15:57, Sébastien Le Ray wrote:
>>>> Le 13/07/2015 16:51, Rowland Penny a écrit :
>>>>> On 12/07/15 17:41, Sébastien Le Ray wrote:
>>>>>>         dns forwarder = 127.0.0.1
>>>>> Why is the DC forwarding unknown DNS addresses to itself ?
>>>> It isn't 127.0.0.1 is not part of the interfaces directive
:-)
>>>
>>> OK then, what is running on 127.0.0.1:53 ??
>>
>> Bind as a slave + recursive resolver
>
> Then it is undoubtedly interfering with the samba DNS server which 
> will also be trying to run on port 53!
>
> Just run one of them, either the internal DNS server or the Bind DNS 
> server, not both.
>
> Rowland
>
No it won't since bind interfaces prevents samba to bind on 127.0.0.1 :-)