search for: agghhhh

...> > The first 2 will do nothing, only last will be used that setup. > > You want : > search p3x-dc.patrikx3.com patrikx3.com corifeus.com > But still thats not needed, you only need. > search p3x-dc.patrikx3.com > > Because the other domains are resolved through dns. > AGGHHHH, he is using something that looks like a DC short hostname for his AD subdomain, why ???? Having got that out of the way, just follow what Louis is suggesting, remove any mention of any other domain from the DC and forward all requests for anything outside the AD domain to another dns server....

Hello Rowland, See below as requested. /etc/named.conf # Global Configuration Options include "/var/lib/samba/bind-dns/named.conf"; options { dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; auth-nxdomain yes; directory

...gt; > > > > > > > > > > > /var/lib/samba...? > > > > > Do you have the file in there? I have > > > > > /usr/local/samba/bind-dns/dns.keytab > > > > > > > > > > Michal > > > > > > > > AGGHHHH > > > > > > > > Did you compile Samba yourself ? > > > > If not, then /var/lib/samba will probably be the correct path. > > > > > > > > > > > > > https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End > > > > &g...

...tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab"; > > > > > > > > > > /var/lib/samba...? > > > Do you have the file in there? I have > > > /usr/local/samba/bind-dns/dns.keytab > > > > > > Michal > > > > AGGHHHH > > > > Did you compile Samba yourself ? > > If not, then /var/lib/samba will probably be the correct path. > > > > > https://wiki.samba.org/index.php/BIND9_DLZ_DNS_Back_End > > options { > [...] > tkey-gssapi-keytab "/usr/local/samba/p...

...ast will be used that setup. > > > > You want : > > search p3x-dc.patrikx3.com patrikx3.com corifeus.com > > But still thats not needed, you only need. > > search p3x-dc.patrikx3.com > > > > Because the other domains are resolved through dns. > > > AGGHHHH, he is using something that looks like a DC short hostname for > his AD subdomain, why ???? > > Having got that out of the way, just follow what Louis is suggesting, > remove any mention of any other domain from the DC and forward all > requests for anything outside the AD domain to...

...er, who does not know and so on. > > I can confirm this isn't happening since I can resolve (for example) > the SRV records on _ldap._tcp.ads.connon.me.uk through my forwarders, > you can even test this yourself with `dig -t SRV > _ldap._tcp.ads.connon.me.uk` or similar. > AGGHHHH, your Domain DCs are resolvable on the internet, *they shouldn't be* rowland at ThinkPad ~ $ dig -t SRV _ldap._tcp.ads.connon.me.uk ; <<>> DiG 9.9.5-3ubuntu0.2-Ubuntu <<>> -t SRV _ldap._tcp.ads.connon.me.uk ;; global options: +cmd ;; Got answer: ;; ->>HEADER<&...

...named"; > > notify no; > > empty-zones-enable no; > > tkey-gssapi-keytab "/var/lib/samba/bind-dns/dns.keytab"; > > > > /var/lib/samba...? > Do you have the file in there? I have > /usr/local/samba/bind-dns/dns.keytab > > Michal AGGHHHH Did you compile Samba yourself ? If not, then /var/lib/samba will probably be the correct path. Try looking there. Rowland

Hi Rowland, Please see comments inline. On 10/03/15 08:51, Rowland Penny wrote: > Your DC's must point to themselves for DNS and your domain clients must > point to the DC's, anything outside the domain the DC's will be obtain > from the forwarders set on them. This is contrary to what the wiki says. https://wiki.samba.org/index.php/Setup_a_Samba_AD_Member_Server This page

On 05/08/2019 11:53, Patrik wrote: > the ?? file "/etc/bind/zones/enp1s0f3/patrikx3.com > <http://patrikx3.com/>"; are my domain names A, AAAA, CNAME-s, that is > where i store then, there is know AD records at all. it is all DLZ. > *_ > _* If 'patrikx3.com' is a registered dns domain name, then you should have used a subdomain of this for the AD dns