search for: dns

...: cross tools >>> stage 4.1: building includes >>> stage 4.2: building libraries [...] cc -O2 -pipe -DVERSION='"9.8.1-P1"' -DHAVE_CONFIG_H -D_REENTRANT -D_THREAD_SAFE -DLIBINTERFACE=84 -DLIBREVISION=1 -DLIBAGE=3 -DWANT_IPV6 -DOPENSSL -DUSE_MD5 -DWORDS_BIGENDIAN -DNS_LOCALSTATEDIR='"/var"' -DNS_SYSCONFDIR='"/etc/namedb"' -DNAMED_CONFFILE='"/etc/namedb/named.conf"' -DRNDC_CONFFILE='"/etc/namedb/rndc.conf"' -DRNDC_KEYFILE='"/etc/namedb/rndc.key"' -I/src/lib/bind/dns/.. -I/sr...

...r it was out of place there, or I'm not providing the right kind of info or... I'm open to suggestions.) At this stage I'd approach bliss if someone could even tell me how to make bind forget that IPv6 exists, and therefore stop hammering these queries at an apparently unsympathetic NT DNS server. Two affected (dns-forwarding-only) machines are: FreeBSD 4.8-PRERELEASE #0: Mon Feb 24 12:43:50 EST 2003 named 8.3.4-REL Mon Feb 24 11:46:20 EST 2003 4.6-RELEASE FreeBSD 4.6-RELEASE #0: Tue Jun 11 06:14:12 GMT 2002 named 8.3.2-T1B Tue Jun 11 03:58:03 GMT 2002 BTW, requiring BIND to use...

Hi all, Thank you Mark for these precisions. I did switch a DC to --dns-backend=NONE using samba-tool domain join. This removed dns-<DCname> user for this DC and associated keytab. We changed /etc/resolv.conf to use another DC - one with Bind running - as nameserver. Stopping there, running samba_dnsupdate gave error "NOTAUTH". As we want our DC bein...

Hi all, How to configure Samba to remove DNS service from DC? I thought there was an option for samba_dnsupgrade command to tell "remove all DNS service from current DC" but I don't find it anymore. This question is because we are about to deploy an AD with 20 or more DC and there is no need they are all DNS servers. In fact h...

...[root at dc2 kwhite]# iptables -L -n Chain INPUT (policy ACCEPT) target     prot opt source               destination Chain FORWARD (policy ACCEPT) target     prot opt source               destination Chain OUTPUT (policy ACCEPT) target     prot opt source               destination Running samba_dnsupdate gets TKEY is unacceptable.  I've followed the steps on the wiki: https://wiki.samba.org/index.php/Dns_tkey_negotiategss:_TKEY_is_unacceptable Here is what I've done: [root at dc2 kwhite]# klist -k /var/lib/samba/private/dns.keytab Keytab name: FILE:/var/lib/samba/private/dns.keytab...

...>>>> both with BIND9_DLZ. Samba is at version 4.4.5, bind is version >>>> 9.10.4-P1, all brand new. >>>> >>>> The existing DC runs fine, but the added DC refuses to update its >>>> local bind database: every attempt to update the local DNS results >>>> in "update failed: NOTAUTH". AD replication works perfectly. >>>> >>>> Both systems are set up identically except for the >>>> provisioning/joining command. On the first I did >>>> samba-tool domain provision --use...

...to have >>>> been resolved long ago I never thought to check the SOA records. You are >>>> perfectly correct - the second DC is not listed >>>> >>> >>> since when is more than one NS listed in the SOA? >>> >>> http://rscott.org/dns/soa.html >>> >>> MNAME ("Primary NS") - This entry is the domain name of the name >>> server that was the original source of the data (this entry MUST be >>> your primary nameserver). This is your primary nameserver, and MUST be >>> the one and...

...check? Thanks, Joachim -----Ursprüngliche Nachricht----- Von: samba [mailto:samba-bounces at lists.samba.org] Im Auftrag von mathias dufresne Gesendet: Montag, 23. Mai 2016 15:19 An: Jo L <j.o.l at live.com> Cc: samba at lists.samba.org Betreff: Re: [Samba] DC2: TKEY is unacceptable, Failed DNS update? Hi, Are you using Samba's internal DNS or Bind? If you are using Bind9_DLZ as dns-backend it should be a right issue on files used by Bind itself (ie private/dns.keytab, private/named.conf, private/dns or private/dns/* and of course private itself). If you are running internal DNS a...

Hi All Apologies if this is obvious, but I''m a bit flaky around SSL certificates. NB puppet version 0.25.5 We use the brilliant feature of certificates where you can have Alternate DNS names for a certificate which is manifested in the puppet master config file as certdnsnames. All our clients connect to puppet-$ location.example.com, and if $location is down, we can point the CNAME to another puppet server which has the original puppet-$location in the puppet servers certificate...

> > --- Original message --- > Subject: Re: [Samba] name resolution: dns name different to windows > machinename > From: Gaiseric Vandal <gaiseric.vandal at gmail.com> > To: <samba at lists.samba.org> > Date: Monday, 20/12/2010 5:15 PM > > I am not sure how you would have a DNS server assign random names. > But if > you aren't...

I do : ) 2016-03-03 10:52 GMT+01:00 Rowland penny <rpenny at samba.org>: > On 03/03/16 09:31, mathias dufresne wrote: > >> Hi all, >> >> Thank you Mark for these precisions. >> >> I did switch a DC to --dns-backend=NONE using samba-tool domain join. This >> removed dns-<DCname> user for this DC and associated keytab. >> >> We changed /etc/resolv.conf to use another DC - one with Bind running - as >> nameserver. >> >> Stopping there, running samba_dnsupdate gav...

Hello Rspecers, I have a rails project where I am calling Resolv::DNS.open and then using the block to check a domain name. The code snippet in question is: domain = "mytest.com" Resolv::DNS.open do |dns| @mx = dns.getresources(domain, Resolv::DNS::Resource::IN::MX) end I obviously want to stub this out, especially for speed but can'...

Hi Mathias, Once more: Thanks for your support and guidance! Actually I reconfigured only the first DC initially, assuming that the second join asks me as does the initial one - wrong assumption. My take is the tools could be improved, e.g. : join of DC2 adds DNS record of DC2 to DC1 and verifies it is replicated before claiming success... looking in all the tools and logs for errors is tedious at best, but a big hurdle to me as a novice.. In the meantime I started from scratch until I got the first DC working with BIND9_DLZ, then cloned it, changed the net...

Hi, I'm trying to recreate dns.keytab for a DC but there seems to be a database issue, delete says the dns user doesn't exist, but upgradedns says it does. CentOS 7.2 Samba 4.5.0 samba-tool user delete dns-dc01 ERROR(exception): Failed to remove user "dns-dc01" - Unable to find user "dns-dc01" File...

Hi, I've some trouble in getting samba internal DNS server in sync with others DNS (Windows) of my AD domain. samba_dnsupdate returns: update failed: REFUSED Failed update of 1 entries I'm running samba Version 4.5.12-Debian root at mysamba4dc:~# dpkg -l | grep samba ii  python-samba                   2:4.5.12+dfsg-2+deb9u3 amd64        Py...

I installed two virtual machines with Samba as domain controllers for the same domain. I was struggling with network and DNS configuration initially, maybe my problem is related. DC1 starts up ok, the last line of the log reads STATUS=daemon 'samba' finished starting up and ready to serve connections DC2 starts with plenty of lines [2016/05/15 22:00:32.744910, 0] ../lib/util/util_runcmd.c:328(samba_runcmd...

Hi, we plan to migrate to Samba4 from Samba3 and also from Bind9 to Samba4 DNS. One question is open, everything else works really great. We need multiple domains for virtual hosts in our development enviroment. Example: samba.local as samba domain, additional anotherdomain.local for hosting. How can we add those zones in Samba via command line tools. The reverse...

On the Samba wiki at https://wiki.samba.org/index.php/Samba_Internal_DNS there is the following: If you have chosen the internal DNS as backend for your environment, there are only two options that can be added to your smb.conf, to control the behaviour of DNS at this point: # Don't allow any updates | allow unsigned updates | only allow signed updates allow dn...

Hi, Failed to change DNS: samba_upgradedns --dns-backend=BIND9_DLZ Reading domain information DNS accounts already exist No zone file /var/lib/samba/bind-dns/dns/EMPRESA.COM.BR.zone DNS records will be automatically created DNS partitions already exist Adding dns-samba4-dc1 account Failed to create link /var/lib/samba/pri...

Dear all, this is using debian stretch and Louis' 4.8.11 packages. I am trying to export a keytab, and even for a UPN, samba does not export the AES keys. What could be the mistake? root at dc2:~# net ads enctypes list dns-dc2 'dns-dc2' uses "msDS-SupportedEncryptionTypes": 31 (0x0000001f) [X] 0x00000001 DES-CBC-CRC [X] 0x00000002 DES-CBC-MD5 [X] 0x00000004 RC4-HMAC [X] 0x00000008 AES128-CTS-HMAC-SHA1-96 [X] 0x00000010 AES256-CTS-HMAC-SHA1-96 root at dc2:~# rm dns.keytab rm: remove regular file '...