samba - May 2018 - DNS not running

How do I troubleshoot the DNS service not running with Samba?

 

I've already verified nothing else is running on port 53.  

 

I'm running 4.3.11-Ubuntu.

On Tue, 29 May 2018 22:27:04 -0500
Robb Schiefer via samba <samba at lists.samba.org> wrote:
> How do I troubleshoot the DNS service not running with Samba?
> 
>  
> 
> I've already verified nothing else is running on port 53.  
> 
>  
> 
> I'm running 4.3.11-Ubuntu.
> 
Yes, but how are you running Samba ?

Please post your smb.conf

Rowland

On Wed, 30 May 2018 08:17:44 -0500
<rschiefer at suturehealth.com> wrote:
> # Global parameters
> [global]
>         workgroup = acme
>         realm = acme.com
>         netbios name = DC-1
>         server role = active directory domain controller
OK, so you are running Samba as a DC
>         server services = dns, dnsupdate, drepl, kcc, kdc, ldap,
> cldap, nbt, drepl, wrepl, rpc, s3fs, winbindd allow dns updates 
That line is totally mixed up (not really sure if this is a problem)
and there is something missing 'ntp_signd', As you don't need that
line
on a DC using the internal dns server, I suggest you remove it and see
if that helps.

Normally the 'server services' line only exists on a DC that is using
the Bind9 dns server and looks like this:

server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
 winbindd, ntp_signd, kcc, dnsupdate

Or this: 

server services = -dns

So, as you seem to be using the internal dns, how did you get the line ?
Did you try Bind9 at one time and if so how did you change back ?

Rowland

On Wed, 30 May 2018 09:48:58 -0500
<rschiefer at suturehealth.com> wrote:
> I removed the server services line and restarted samba but no
> change.  Here is the syslog for the restart:
> 
Comparing your log output with mine, there doesn't seem to much
difference (except for the error messages)
> 
> -----Original Message-----
> Normally the 'server services' line only exists on a DC that is
using
> the Bind9 dns server and looks like this:
> 
> server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
> winbindd, ntp_signd, kcc, dnsupdate
> 
> Or this: 
> 
> server services = -dns
> 
> So, as you seem to be using the internal dns, how did you get the
> line ? Did you try Bind9 at one time and if so how did you change
> back ?
> 
So how about answering the above question ?

Also is apparmor installed ?

Rowland