Hi there, I'm in the process of switching from using Samba4 internal DNS to using BIND as my backend DNS. However, I'm currently running into some issues with the transition. Here's an example of the messages I'm getting from /var/log/messages logs: Nov 9 15:34:26 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction on zone DOMAIN Nov 9 15:34:26 pho-dcpvl-01N named[27524]: client 172.17.0.30#59051: update 'DOMAIN/IN' denied Nov 9 15:34:26 pho-dcpvl-01N named[27524]: samba_dlz: cancelling transaction on zone DOMAIN Nov 9 15:35:24 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction on zone DOMAIN Nov 9 15:35:24 pho-dcpvl-01N named[27524]: client 172.17.0.30#42206: update 'DOMAIN/IN' denied Nov 9 15:35:24 pho-dcpvl-01N named[27524]: samba_dlz: cancelling transaction on zone DOMAIN Nov 9 15:35:26 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction on zone DOMAIN Nov 9 15:35:26 pho-dcpvl-01N named[27524]: client 172.17.0.30#51563: update 'DOMAIN/IN' denied Nov 9 15:35:26 pho-dcpvl-01N named[27524]: samba_dlz: cancelling transaction on zone DOMAIN Nov 9 15:35:32 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction on zone DOMAIN * 172.17.0.30 being my DHCP server. Does anyone know what's causing the above messages? And how do you proceed in a setup with Samba4 AD / BIND with DDNS. My guess here is I'm having troubles with setting up the DHCP properly to communicate with BIND, so the DNS isn't being updated. Please let me know what other information I can provide. Thanks, Philip
Rowland Penny
2015-Nov-09 21:15 UTC
[Samba] Samba_dlz: canceling trasaction on zone domain
On 09/11/15 20:48, Philip Banh wrote:> Hi there, > > I'm in the process of switching from using Samba4 internal DNS to using BIND as my backend DNS. However, I'm currently running into some issues with the transition. > > Here's an example of the messages I'm getting from /var/log/messages logs: > > Nov 9 15:34:26 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction on zone DOMAIN > Nov 9 15:34:26 pho-dcpvl-01N named[27524]: client 172.17.0.30#59051: update 'DOMAIN/IN' denied > Nov 9 15:34:26 pho-dcpvl-01N named[27524]: samba_dlz: cancelling transaction on zone DOMAIN > Nov 9 15:35:24 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction on zone DOMAIN > Nov 9 15:35:24 pho-dcpvl-01N named[27524]: client 172.17.0.30#42206: update 'DOMAIN/IN' denied > Nov 9 15:35:24 pho-dcpvl-01N named[27524]: samba_dlz: cancelling transaction on zone DOMAIN > Nov 9 15:35:26 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction on zone DOMAIN > Nov 9 15:35:26 pho-dcpvl-01N named[27524]: client 172.17.0.30#51563: update 'DOMAIN/IN' denied > Nov 9 15:35:26 pho-dcpvl-01N named[27524]: samba_dlz: cancelling transaction on zone DOMAIN > Nov 9 15:35:32 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction on zone DOMAIN > > * 172.17.0.30 being my DHCP server. > > Does anyone know what's causing the above messages? And how do you proceed in a setup with Samba4 AD / BIND with DDNS. > > My guess here is I'm having troubles with setting up the DHCP properly to communicate with BIND, so the DNS isn't being updated. > > Please let me know what other information I can provide. > > Thanks, > Philip > > > >Can you post your dhcpd.conf ? Rowland
Hey Rowland,
Below is a cutdown version of my DHCP. As you can see, I haven't really set
anything up for ddns-update. While using Samba4's internal DNS I had the
setting 'ddns-update-style interim;' and it seemed to have worked fine.
But with bind I'm not sure what else is needed.
Thanks for taking a look at it.
Philip
#
# DHCP Server Configuration file.
# see /usr/share/doc/dhcp*/dhcpd.conf.sample
# see 'man 5 dhcpd.conf'
#
# option definitions common to all supported networks...
option domain-name "DOMAIN";
option domain-name-servers 172.17.0.170, 172.17.0.171;
filename "pxelinux.0";
next-server 172.17.0.50;
default-lease-time 600;
max-lease-time 7200;
# Use this to enble / disable dynamic dns updates globally.
#ddns-updates on; # not really necessary, ddns-update-style is good enough
ddns-update-style interim;
deny client-updates;
ignore-client-updates;
#allow client-updates;
#update-static-leases on;
key DHCP_UPDATER {
algorithm HMAC-MD5.SIG-ALG.REG.INT;
#Paste in the generated key here. Should be in quotes
secret "SECRET";
};
# If this DHCP server is the official DHCP server for the local
# network, the authoritative directive should be uncommented.
authoritative;
class "Others" {
.....
}
subnet 172.17.0.0 netmask 255.255.255.0 {
option routers 172.17.0.1;
pool {
range 172.17.0.201 172.17.0.254;
option broadcast-address 172.17.0.255;
deny members of "Others";
}
.....The rest of vlans
log-facility local6;
________________________________________
From: samba [samba-bounces at lists.samba.org] on behalf of Rowland Penny
[rowlandpenny241155 at gmail.com]
Sent: Monday, November 09, 2015 4:15 PM
To: samba at lists.samba.org
Subject: Re: [Samba] Samba_dlz: canceling trasaction on zone domain
On 09/11/15 20:48, Philip Banh wrote:> Hi there,
>
> I'm in the process of switching from using Samba4 internal DNS to using
BIND as my backend DNS. However, I'm currently running into some issues with
the transition.
>
> Here's an example of the messages I'm getting from
/var/log/messages logs:
>
> Nov 9 15:34:26 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction
on zone DOMAIN
> Nov 9 15:34:26 pho-dcpvl-01N named[27524]: client 172.17.0.30#59051:
update 'DOMAIN/IN' denied
> Nov 9 15:34:26 pho-dcpvl-01N named[27524]: samba_dlz: cancelling
transaction on zone DOMAIN
> Nov 9 15:35:24 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction
on zone DOMAIN
> Nov 9 15:35:24 pho-dcpvl-01N named[27524]: client 172.17.0.30#42206:
update 'DOMAIN/IN' denied
> Nov 9 15:35:24 pho-dcpvl-01N named[27524]: samba_dlz: cancelling
transaction on zone DOMAIN
> Nov 9 15:35:26 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction
on zone DOMAIN
> Nov 9 15:35:26 pho-dcpvl-01N named[27524]: client 172.17.0.30#51563:
update 'DOMAIN/IN' denied
> Nov 9 15:35:26 pho-dcpvl-01N named[27524]: samba_dlz: cancelling
transaction on zone DOMAIN
> Nov 9 15:35:32 pho-dcpvl-01N named[27524]: samba_dlz: starting transaction
on zone DOMAIN
>
> * 172.17.0.30 being my DHCP server.
>
> Does anyone know what's causing the above messages? And how do you
proceed in a setup with Samba4 AD / BIND with DDNS.
>
> My guess here is I'm having troubles with setting up the DHCP properly
to communicate with BIND, so the DNS isn't being updated.
>
> Please let me know what other information I can provide.
>
> Thanks,
> Philip
>
>
>
>
Can you post your dhcpd.conf ?
Rowland
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba