[Samba] Reverse zones fail with secure updates

lingpanda101
Tue, 22 Nov 2016 14:31:49 -0000

Hi Louis,

       Comments inline

On 11/22/2016 3:38 AM, L.P.H. van Belle via samba wrote:
> Hai James,
>
> What is the connection's DNS suffix of the pc?
domain.local
> And did you setup TLS in you samba?
No. How?
>
>
> Look here, in the advanded tcp settings of the pc.  ( or ipconfig /all )
>
> And is it ticked "Use this connections dns suffix in dns
registration"
> (In dhcp option 81.)
Our routers handle DHCP.
>
> Or use Group policy editors.
> - Computer Configuration\Administrative Templates\Network\DNS Client
> 	-Connection Specific DNS Suffix: enabled, and set to your.domain.tld
> 	-Register DNS records with connection-specific DNS suffix: enabled
> 	-Register PTR Records: enabled
> 	-Dynamic Update: enabled
I tried this method as well.
>
> Or use static ips, then A and PTR are registered by the computer.
Static IP's only register if I disable secure
updates.
>
>
> Key is to remember, Windows uses the connection-specific DNS suffix to
register DNS records.
>
>
> Greetz,
>
> Louis
>
>
>> -----Oorspronkelijk bericht-----
>> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
lingpanda101 via
>> samba
>> Verzonden: maandag 21 november 2016 21:14
>> Aan: samba at lists.samba.org
>> Onderwerp: [Samba] Reverse zones fail with secure updates
>>
>> Hello,
>>
>>       I'm using Samba 4.5.1 as a ADDC and the internal DNS. If I
use
>> 'allow dns updates = secure' in my smb.conf. Only A records
update. The
>> applicable reverse zone fails to update. If I switch to using non
secure
>> updates both the A and the PTR records are updated. Is someone else
able
>> to confirm this behavior? Thanks.
>>
>>
>> --
>> - James
>>
>>
>> --
>> To unsubscribe from this list go to the following URL and read the
>> instructions:  https://lists.samba.org/mailman/options/samba
>


--
- James