search for: 2b_clones_

...explains it : https://wiki.samba.org/index.php/DNS, in exact words not compiled in required BIND-DLZ options : --with-dlopen=yes \ --with-dlz-bdb \ --with-dlz-ldap \ --with-dlz-filesystem=yes \ And here an HowTO for Debian to fix that : https://wiki.samba.org/index.php/DNS#Debian_.2F_Ubuntu_.2B_clones_-_Build_New_ISC_Bind_9.8_.2F_9.9_.2F_9.10 ( just updated for debian as well. ) Verify your Bind9 build options with "named -V" or "named-sdb -V": -- Mit freundlichen Gr??en / Best Regards Horst Venzke ; PGP NET : 1024G/082F2E6D ; http://www.remsnet.de Legal Notice: This...

...IND-DLZ options : > > > > --with-dlopen=yes \ > > --with-dlz-bdb \ > > --with-dlz-ldap \ > > --with-dlz-filesystem=yes \ > > > > > > And here an HowTO for Debian to fix that : > > > > https://wiki.samba.org/index.php/DNS#Debian_.2F_Ubuntu_.2B_clones_-_Build_New_ISC_Bind_9.8_.2F_9.9_.2F_9.10 > > ( just updated for debian as well. ) > > > > Verify your Bind9 build options with "named -V" or "named-sdb -V": > > > > > > > > > > -- > > Mit freundlichen Gr??en / Best Regards &g...

Hi Rowland, I didn't build samba, I'm running the sernet packages, # rpm -qa | grep sernet sernet-samba-libsmbclient0-4.8.6-16.el7.x86_64 sernet-samba-ad-4.8.6-16.el7.x86_64 sernet-samba-libs-4.8.6-16.el7.x86_64 sernet-samba-client-4.8.6-16.el7.x86_64 sernet-samba-winbind-4.8.6-16.el7.x86_64 sernet-samba-common-4.8.6-16.el7.x86_64 sernet-samba-4.8.6-16.el7.x86_64 I don't mind having

...p/DNS, in exact words not compiled in required BIND-DLZ options : > > --with-dlopen=yes \ > --with-dlz-bdb \ > --with-dlz-ldap \ > --with-dlz-filesystem=yes \ > > > And here an HowTO for Debian to fix that : > > https://wiki.samba.org/index.php/DNS#Debian_.2F_Ubuntu_.2B_clones_-_Build_New_ISC_Bind_9.8_.2F_9.9_.2F_9.10 > ( just updated for debian as well. ) > > Verify your Bind9 build options with "named -V" or "named-sdb -V": > > > > > -- > Mit freundlichen Gr??en / Best Regards > > Horst Venzke ; PGP NET : 1024G/082F2E...

...e packages as prod. > OK, I do not use RHEL or Centos, I use Devuan and Bind9 on that OS isn't built with '--disable-isc-spnego', this combined with what it says here: https://wiki.samba.org/index.php/Using_BIND_DLZ_backend_with_secured_/_signed_DNS_updates#RHEL_.2F_CENTOS_.2F_FC_.2B_clones_-_ReBuild_Distributed_ISC_Bind_RPM Led me to believe this is your problem. However, you say it works on one DC, but not with multiple DC's. You have mentioned that you demoted DC's, removed all data for the deleted DC from AD and then rejoined it again with a newer version of Samba using t...

...>>> --with-dlopen=yes \ >>> --with-dlz-bdb \ >>> --with-dlz-ldap \ >>> --with-dlz-filesystem=yes \ >>> >>> >>> And here an HowTO for Debian to fix that : >>> >>> https://wiki.samba.org/index.php/DNS#Debian_.2F_Ubuntu_.2B_clones_-_Build_New_ISC_Bind_9.8_.2F_9.9_.2F_9.10 >>> ( just updated for debian as well. ) >>> >>> Verify your Bind9 build options with "named -V" or "named-sdb -V": >>> >>> >>> >>> >>> -- >>> Mit freundlich...

...gt;>> --with-dlz-bdb \ > >>> --with-dlz-ldap \ > >>> --with-dlz-filesystem=yes \ > >>> > >>> > >>> And here an HowTO for Debian to fix that : > >>> > >>> https://wiki.samba.org/index.php/DNS#Debian_.2F_Ubuntu_.2B_clones_-_Build_New_ISC_Bind_9.8_.2F_9.9_.2F_9.10 > >>> ( just updated for debian as well. ) > >>> > >>> Verify your Bind9 build options with "named -V" or "named-sdb -V": > >>> > >>> > >>> > >>> > &gt...

...z-bdb \ >>>>> --with-dlz-ldap \ >>>>> --with-dlz-filesystem=yes \ >>>>> >>>>> >>>>> And here an HowTO for Debian to fix that : >>>>> >>>>> https://wiki.samba.org/index.php/DNS#Debian_.2F_Ubuntu_.2B_clones_-_Build_New_ISC_Bind_9.8_.2F_9.9_.2F_9.10 >>>>> ( just updated for debian as well. ) >>>>> >>>>> Verify your Bind9 build options with "named -V" or "named-sdb -V": >>>>> >>>>> >>>>> >>...

And some more information about this strange effect apparently no-one has seen before. I now added the missing zone: samba-tool dns zonecreate verdandi 10.16.172.in-addr.arpa -U Administrator and it claims that the zone is okay, but the next one is missing: Dec 29 10:31:12 verdandi named[2601]: Loading 'ad.microsult.de' using driver dlopen Dec 29 10:31:12 verdandi named[2601]:

...t; OK, I do not use RHEL or Centos, I use Devuan and Bind9 on that OS > isn't built with '--disable-isc-spnego', this combined with what it says > here: > > > https://wiki.samba.org/index.php/Using_BIND_DLZ_backend_with_secured_/_signed_DNS_updates#RHEL_.2F_CENTOS_.2F_FC_.2B_clones_-_ReBuild_Distributed_ISC_Bind_RPM > > Led me to believe this is your problem. However, you say it works on > one DC, but not with multiple DC's. > > You have mentioned that you demoted DC's, removed all data for the > deleted DC from AD and then rejoined it again with a ne...