search for: nsupdflags

On Thu, 3 Sep 2015, Rowland Penny wrote: > What are the permissions on /var/lib/samba/private/dns ? Also don't forget the permissions on /var/lib/samba/private If you're using sernet's packages, you'll have to chgrp it to to named or give it o+x perms.

...l like : user at realm > SETDHCPUSER=dhcpduser > # DNS domain, change this to YOUR dns domain > domain=example.com > # TXT RRs (rfc4701) > # Set to YES to use TXT RRs > TXTRRS="NO" > # Additional nsupdate flags (-g already applied), e.g. "-d" for debug > #NSUPDFLAGS="-d" > # DNS nameserver > ns=127.0.0.1 > # > ## Do not change anything below here > # Kerberos principal > SETPRINCIPAL=$SETDHCPUSER@$SETREALM > # Kerberos keytab > SETDHCPKEYTAB=/etc/$SETDHCPUSER.keytab > # Default DNS resource records TTL > RRTTL="3600...

...to samba4 ## this will create a Principal like : user at realm SETDHCPUSER=dhcpduser # DNS domain, change this to YOUR dns domain domain=example.com # TXT RRs (rfc4701) # Set to YES to use TXT RRs TXTRRS="NO" # Additional nsupdate flags (-g already applied), e.g. "-d" for debug #NSUPDFLAGS="-d" # DNS nameserver ns=127.0.0.1 # ## Do not change anything below here # Kerberos principal SETPRINCIPAL=$SETDHCPUSER@$SETREALM # Kerberos keytab SETDHCPKEYTAB=/etc/$SETDHCPUSER.keytab # Default DNS resource records TTL RRTTL="3600" # krbcc ticket cache export KRB5CCNAME=&qu...

...ot;, ClientIP, "0", ""); } ===================================   CURRENT DHCP-DYNDNS.SH   /usr/local/bin/dhcp-dyndns.sh =================================== #!/bin/bash # /usr/local/bin/dhcp-dyndns.sh # Additional nsupdate flags (-g already applied), e.g. "-d" for debug NSUPDFLAGS="-d" # krbcc ticket cache export KRB5CCNAME="/tmp/dhcp-dyndns.cc" # Variables supplied by dhcpd.conf action=$1 ip=$2 DHCID=$3 name=${4%%.*} # Check for valid kerberos ticket _KERBEROS () { klist -c /tmp/dhcp-dyndns.cc -s if [ "$?" != "0" ]; then     kinit -...

...SETDHCPUSER=dhcpduser >> # DNS domain, change this to YOUR dns domain >> domain=example.com >> # TXT RRs (rfc4701) >> # Set to YES to use TXT RRs >> TXTRRS="NO" >> # Additional nsupdate flags (-g already applied), e.g. "-d" for debug >> #NSUPDFLAGS="-d" >> # DNS nameserver >> ns=127.0.0.1 >> # >> ## Do not change anything below here >> # Kerberos principal >> SETPRINCIPAL=$SETDHCPUSER@$SETREALM >> # Kerberos keytab >> SETDHCPKEYTAB=/etc/$SETDHCPUSER.keytab >> # Default DNS resour...

...t;> # DNS domain, change this to YOUR dns domain >>> domain=example.com >>> # TXT RRs (rfc4701) >>> # Set to YES to use TXT RRs >>> TXTRRS="NO" >>> # Additional nsupdate flags (-g already applied), e.g. "-d" for debug >>> #NSUPDFLAGS="-d" >>> # DNS nameserver >>> ns=127.0.0.1 >>> # >>> ## Do not change anything below here >>> # Kerberos principal >>> SETPRINCIPAL=$SETDHCPUSER@$SETREALM >>> # Kerberos keytab >>> SETDHCPKEYTAB=/etc/$SETDHCPUSER.keyt...

Hello Rolawnd, I followed the wikipage exactly. Bind9 is installed on the Samba DC. The Linux-Client should be a member of the Active Directory-domain? Regards ----- Mensaje original ----- De: "samba" <samba at lists.samba.org> Para: "samba" <samba at lists.samba.org> Enviados: Sábado, 7 de Octubre 2017 13:29:43 Asunto: Re: [Samba] bind9 and isc-dhcp-Server for

...ot;."$1".in-addr.arpa"}') > > > so the PTR is complet with all 4 octets of the IP-Address. That's why > I don't understand that the dnsupdate is not working > > Finally the update of the reverse zone is done with this: > > > > nsupdate -g ${NSUPDFLAGS} << UPDATE server 127.0.0.1 realm > > ${REALM} update delete ${ptr} 3600 PTR update add ${ptr} 3600 PTR > > ${name}.${domain} send UPDATE result2=$? > > > > If you restart bind9, do you find lines like these in the syslog: > > > > Dec 26 18:10:23 member1...

Hey Rowland, Below is a cutdown version of my DHCP. As you can see, I haven't really set anything up for ddns-update. While using Samba4's internal DNS I had the setting 'ddns-update-style interim;' and it seemed to have worked fine. But with bind I'm not sure what else is needed. Thanks for taking a look at it. Philip # # DHCP Server Configuration file. # see

...forwarders { 192.168.10.3; 10.0.0.3; }; allow-query { 127.0.0.1/32; 192.168.16.0/24; }; allow-recursion { 127.0.0.1/32; 192.168.16.0/24; }; tkey-gssapi-keytab "/usr/local/samba/private/dns.keytab"; }; I remove the comment sign '#' NSUPDFLAGS="-d" But the logs are the same: Oct 7 17:44:38 samba467 dhcpd: DHCPREQUEST for 192.168.16.38 from 08:00:27:e7:0a:66 (omtest) via eth0 Oct 7 17:44:38 samba467 dhcpd: DHCPACK on 192.168.16.38 to 08:00:27:e7:0a:66 (omtest) via eth0 Oct 7 17:44:55 samba467 dhcpd: Commit: IP: 192.168.16.37...

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello, I try to set up a ADDC with bind9 and dhcp-Server for dynamic DNS-updates. I followd the wiki: https://wiki.samba.org/index.php/Configure_DHCP_to_update_DNS_records_wi th_BIND9 My problem is, that the PTR Record will not be updated, because the script is using the wrong reverse-zone: - --------------------- Dez 26 17:30:05 addc-01 named[512]:

....3; }; > allow-query { 127.0.0.1/32; 192.168.16.0/24; }; > allow-recursion { 127.0.0.1/32; 192.168.16.0/24; }; > tkey-gssapi-keytab > "/usr/local/samba/private/dns.keytab"; }; > > I remove the comment sign '#' > NSUPDFLAGS="-d" > > But the logs are the same: > Oct 7 17:44:38 samba467 dhcpd: DHCPREQUEST for 192.168.16.38 from > 08:00:27:e7:0a:66 (omtest) via eth0 Oct 7 17:44:38 samba467 dhcpd: > DHCPACK on 192.168.16.38 to 08:00:27:e7:0a:66 (omtest) via eth0 Oct > 7 17:44:55 samba467 dhc...

... : DNS_ZONE_TYPE_PRIMARY   Version                     : 50   dwDpFlags                   : DNS_DP_AUTOCREATED DNS_DP_FOREST_DEFAULT DNS_DP_ENLISTED    pszDpFqdn                   : ForestDnsZones.solinos.loc Yesterday I have also try to force the use of this zone into shell , > nsupdate -g ${NSUPDFLAGS} << UPDATE > server 127.0.0.1 > realm ${REALM} > zone 12.11.10.in-addr.arpa <---<<< > update delete ${ptr} 3600 PTR > update add ${ptr} 3600 PTR ${name}.${domain} > send  > UPDATE but none is changed, the error log is the same. Furthermore this morning...

....3; }; > allow-query { 127.0.0.1/32; 192.168.16.0/24; }; > allow-recursion { 127.0.0.1/32; 192.168.16.0/24; }; > tkey-gssapi-keytab > "/usr/local/samba/private/dns.keytab"; }; > > I remove the comment sign '#' > NSUPDFLAGS="-d" > > But the logs are the same: > Oct 7 17:44:38 samba467 dhcpd: DHCPREQUEST for 192.168.16.38 from > 08:00:27:e7:0a:66 (omtest) via eth0 Oct 7 17:44:38 samba467 dhcpd: > DHCPACK on 192.168.16.38 to 08:00:27:e7:0a:66 (omtest) via eth0 Oct > 7 17:44:55 samba467 dhc...

Il giorno mar, 25/04/2017 alle 14.36 +0100, Rowland Penny via samba ha scritto: > > However I would like to enable also the DHCP service, and think > > it's right to activate it on this server. > > > > What is the best way to do so? > > Well you could always do it the way I have been doing it for the last > 5 years, see here: > >