samba - Oct 2016 - Automated population of Reverse PTR on Samba 4.4.5 integrated with Bind 9.9.4

Hi experts ,

Is it possible to have automated population of Reverse PTR  on Samba 
4.4.5 integrated with Bind 9.9.4 ? I have tried creating the Reverse 
zone too . When a client ( windows ) joins the SAMBA domain the forward 
lookup is populated with correct host-name and present IP , but reverse 
zone does not have any entry . Although I can create reverse PTR manually .

Kindly help me with this query

Attaching named.conf for reference.

TIA

Regards

Biswajit Banerjee

-------------- next part --------------
//
// named.conf
//
// Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
// server as a caching only nameserver (as a localhost DNS resolver only).
//
// See /usr/share/doc/bind*/sample/ for example named configuration files.
//

options {
        tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab";
        listen-on port 53 { 127.0.0.1; any; };
#       listen-on port 53 { 127.0.0.1; 172.18.101.14; };
        listen-on-v6 port 53 {::1; any; };
#       listen-on-v6 port 53 { ::1; 2404:a800:1000:d:7800::e; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        allow-query     { localhost; any; };
#       allow-query     { localhost; 172.18.0.0/16; 2404:a800:1000:d::/64; };

        /*
         - If you are building an AUTHORITATIVE DNS server, do NOT enable
recursion.
         - If you are building a RECURSIVE (caching) DNS server, you need to
enable
           recursion.
         - If your recursive DNS server has a public IP address, you MUST enable
access
           control to limit queries to your legitimate users. Failing to do so
will
           cause your server to become part of large scale DNS amplification
           attacks. Implementing BCP38 within your network would greatly
           reduce such attack surface
        */
        recursion yes;

        dnssec-enable yes;
        dnssec-validation yes;

        /* Path to ISC DLV key */
        bindkeys-file "/etc/named.iscdlv.key";

        managed-keys-directory "/var/named/dynamic";

        pid-file "/run/named/named.pid";
        session-keyfile "/run/named/session.key";
};

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };
};

zone "." IN {
        type hint;
        file "named.ca";
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";
include "/usr/local/samba/private/named.conf";

On Wed, 26 Oct 2016 20:47:05 +0530
Biswajit Banerjee via samba <samba at lists.samba.org> wrote:
> Hi experts ,
> 
> Is it possible to have automated population of Reverse PTR  on Samba 
> 4.4.5 integrated with Bind 9.9.4 ? I have tried creating the Reverse 
> zone too . When a client ( windows ) joins the SAMBA domain the
> forward lookup is populated with correct host-name and present IP ,
> but reverse zone does not have any entry . Although I can create
> reverse PTR manually .
> 
> Kindly help me with this query
> 
> Attaching named.conf for reference.
> 
> TIA
> 
> Regards
> 
> Biswajit Banerjee
> 
Yes, you can run a dhcp server on the DC. See the Samba wiki.

Rowland

Thanks Rowland .

We have DHCP ( ISC-DHCP) on other Linux box . Can we use the same to 
integrate with DNS  . Can you please give me pointer to some document to 
the same .

TIA

Regards

Biswajit Banerjee


On Thursday 27 October 2016 01:40 PM, Rowland Penny via samba
wrote:
> On Wed, 26 Oct 2016 20:47:05 +0530
> Biswajit Banerjee via samba <samba at lists.samba.org> wrote:
>
>> Hi experts ,
>>
>> Is it possible to have automated population of Reverse PTR  on Samba
>> 4.4.5 integrated with Bind 9.9.4 ? I have tried creating the Reverse
>> zone too . When a client ( windows ) joins the SAMBA domain the
>> forward lookup is populated with correct host-name and present IP ,
>> but reverse zone does not have any entry . Although I can create
>> reverse PTR manually .
>>
>> Kindly help me with this query
>>
>> Attaching named.conf for reference.
>>
>> TIA
>>
>> Regards
>>
>> Biswajit Banerjee
>>
> Yes, you can run a dhcp server on the DC. See the Samba wiki.
>
> Rowland
>

Hi,


is there now other way? When using win rsat dns admin - chechking create 
reverse PTR also doesn't work...manual creating works....

Is using dynamic update from dhcp the only way?


Am 27.10.2016 um 10:10 schrieb Rowland Penny via samba:
> On Wed, 26 Oct 2016 20:47:05 +0530
> Biswajit Banerjee via samba <samba at lists.samba.org> wrote:
>
>> Hi experts ,
>>
>> Is it possible to have automated population of Reverse PTR  on Samba
>> 4.4.5 integrated with Bind 9.9.4 ? I have tried creating the Reverse
>> zone too . When a client ( windows ) joins the SAMBA domain the
>> forward lookup is populated with correct host-name and present IP ,
>> but reverse zone does not have any entry . Although I can create
>> reverse PTR manually .
>>
>> Kindly help me with this query
>>
>> Attaching named.conf for reference.
>>
>> TIA
>>
>> Regards
>>
>> Biswajit Banerjee
>>
> Yes, you can run a dhcp server on the DC. See the Samba wiki.
>
> Rowland
>