Displaying 20 results from an estimated 187 matches for "rfc1035".
2019 Jan 22
5
samba_dns_question
On Tue, 22 Jan 2019 11:12:37 +0200
Hajdu Szabolcs via samba <samba at lists.samba.org> wrote:
> I configured it but no luck apparmor is configured as the link
> suggests i tried to rejoin and deleted the local database manually
> but then still recreates these five zones with CNF and gives the
> error.
>
>
CNF = Collision
Something is creating the objects in AD and
2018 Feb 26
2
smbclient //server/netlogon -k -c 'ls' fails with "NT_STATUS_LOGON_FAILURE"
....154.124.1;
> 193.231.252.1;
> };
>
> dnssec-enable yes;
> dnssec-validation yes;
I have this instead:
dnssec-validation no;
dnssec-enable no;
dnssec-lookaside no;
>
> auth-nxdomain no; # conform to RFC1035
> listen-on-v6 { none; };
> };
>
> /etc/bind/named.conf.default-zones:
Nothing wrong there
>
>
> /var/lib/samba/private/named.conf:
Nothing wrong there
Is Apparmor running or is a firewall running ?
Rowland
2019 Jan 22
4
samba_dns_question
...Z is trying to load a zone defined in the default.
Same for the empty-zones-enable
>
> >
> > These to my cause your problem.
> > Might load zones that bind9_DLZ is trying to load also.
> >
> > Set to yes:
> > > auth-nxdomain no; # conform to RFC1035
> > The AD is the AUTHORITIVE Server.
> > For that you need : auth-nxdomain yes;
>
> Sorry, but no you don't, well I don't
>
> rowland at Computer4:~$ nslookup
> > set querytype=soa
> > samdom.example.com
> Server: 192.168.0.6
> Addre...
2015 Apr 18
2
Question about domain name with BIND9_DLZ
...nsfers-in 500;
empty-zones-enable yes;
//forwarders { 8.8.8.8; 8.8.4.4; };
recursion yes;
//allow-transfer {"none";};
allow-query { any; };
allow-recursion { any; };
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
rate-limit {
responses-per-second 5;
#window 5;
#log-only yes;
};
};
zone "." {
type hint;
file "/etc/bind/db.root";
};
In the client machine i've configured as...
2019 May 04
2
Issues with bind9 dlz
...// you will need to update your keys. See
https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};
/usr/lib/x86_64-linux-gnu/samba/bind9
-rw-r--r-- 1 root root 38904 Apr 4 18:05 dlz_bind9.so
-rw-r--r-- 1 root root 38904 Apr 4 18:05 dlz_bind9_10.so
-rw-r--r-- 1 root root 38904 Apr 4 18:05 dlz_bind9_11.so
-rw-r--r-- 1 root root 38904 Apr 4 18:05 dlz_bind9...
2019 Jan 22
0
samba_dns_question
...at you change this.
Disable :
> include "/etc/bind/named.conf.default-zones";
And this supports it :
> empty-zones-enable no;
These to my cause your problem.
Might load zones that bind9_DLZ is trying to load also.
Set to yes:
> auth-nxdomain no; # conform to RFC1035
The AD is the AUTHORITIVE Server.
For that you need : auth-nxdomain yes;
Greetz,
Louis
> -----Oorspronkelijk bericht-----
> Van: samba [mailto:samba-bounces at lists.samba.org] Namens
> Hajdu Szabolcs via samba
> Verzonden: dinsdag 22 januari 2019 12:19
> Aan: samba at li...
2006 Jan 12
1
2.5.STABLE6-3.4E.11 Problem
...e squid to crash. I ran squid with the "-d 10"
option to find out what happens, and this is the error i get.
How you reproduce this error is, find a SSL enabled website, get the IP
address and type into your browser, https://<ipaddress>/ and this will
produce the error
(squid): rfc1035.c:417: rfc1035RRUnpack: Assertion `(*off) <= sz' failed.
Squid will then proceed to restart itself.
Has anyone else found this problem?
Regards,
Peter K
2015 Jan 19
2
cannot update W7 or linux clients
...=========================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
auth-nxdomain yes; # conform to RFC1035 =no
listen-on-v6 { none; };
listen-on port 53 { "thisserverip"; 127.0.0.1; };
notify no;
empty-zones-enable no;
// Add any subnets or hosts you want to allow to use this DNS server
allow-query { "all-networks"; 127.0.0.1/32; };
// Add any subnets or hosts you want to al...
2015 Apr 18
2
Question about domain name with BIND9_DLZ
...8.8.8.8; 8.8.4.4; };
>> recursion yes;
>> //allow-transfer {"none";};
>> allow-query { any; };
>> allow-recursion { any; };
>>
>> dnssec-validation auto;
>>
>> auth-nxdomain no; # conform to RFC1035
>> listen-on-v6 { any; };
>>
>> rate-limit {
>> responses-per-second 5;
>> #window 5;
>> #log-only yes;
>> };
>> };
>>
>> zone "." {
>> type hi...
2018 Jul 02
2
client @0x7f6ed800bc20 172.16.5.86#62582: update 'campus.company.intra/IN' denied
...;;
forwarders { xxx.xxx.xxx.xxx; }; #public IP
allow-query { internal; };
#dnssec-enable no;
dnssec-validation no;
#dnssec-lookaside auto;
tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
auth-nxdomain no; # conform to RFC1035
listen-on port 53 { 127.0.0.1; xxx.xxx.xxx.xxx; }; #public IP
#listen-on-v6 { none; };
zone-statistics yes;
statistics-file "/var/log/named/stats/named_stats.log";
};
include "/etc/bind/rndc.key";
controls {
inet 127.0.0.1 allow { local...
2017 Dec 11
0
Replication problems bdc to pdc
...conf.default-zones";
> include "/var/lib/samba/private/named.conf";
>
> named.conf.options:-----------------------
>
> options {
> directory "/var/cache/bind";
>
> dnssec-validation auto;
>
> auth-nxdomain no; # conform to RFC1035
> listen-on-v6 { none; };
> tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
> };
You haven't set any forwarders.
>
> smb.conf:------------------------------
>
> # Global parameters
> [global]
> netbios name = RY11CITDC
> re...
2017 Dec 11
3
Replication problems bdc to pdc
...ude "/var/lib/samba/private/named.conf";
>>
>> named.conf.options:-----------------------
>>
>> options {
>> directory "/var/cache/bind";
>>
>> dnssec-validation auto;
>>
>> auth-nxdomain no; # conform to RFC1035
>> listen-on-v6 { none; };
>> tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
>> };
> You haven't set any forwarders.
My network has only 10 stations and can not access the Internet. I just
need Windows domain users. Bind9 I chose for future...
2019 May 04
2
Issues with bind9 dlz
...named.conf.local";
include "/etc/bind/named.conf.default-zones";
include "/var/lib/samba/private/named.conf";
named.conf.options has
dnssec-validation auto;
tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
The following in /var/lib/samba/private/named.conf
dlz "AD DNS Zone" {
# For BIND 9.8.x
# database "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9.so";
# For BIND 9.9.x
# database "dlopen
/usr/lib/x86_64-linux-gnu/s...
2017 Jun 12
1
smbclient ends in NT_STATUS_CONNECTION_REFUSED error
...file "/etc/bind/192.168.15.db";
allow-update { localhost; };
};
---
named.conf.options:
options {
directory "/var/cache/bind";
forwarders {
193.189.250.99;
192.168.15.1;
};
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};
2018 Jul 03
2
client @0x7f6ed800bc20 172.16.5.86#62582: update 'campus.company.intra/IN' denied
>
> auth-nxdomain yes; # conform to RFC1035 =no
Why do you use this variable as "yes"? :)
Note the lack of './daemon.log.1:33430:'. I have '/var/log/deamon.log'
> and it contains lines in the format above, they all start with the date.
I used a grep to find the lines with "denied" and posted. If I...
2009 Nov 19
1
Samba 4 + bind9
...e master;
file "200.168.192.in-addr.arpa.zone";
update-policy {
grant *.LOCAL wildcard *.200.168.192.in-addr.arpa. PTR;
};
};
And named.options here:
options {
directory "/var/cache/bind";
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
tkey-gssapi-credential "DNS/selb.local";
tkey-domain "SELB.LOCAL";
};
Thanks for any help
Gilberto Nunes Ferreira
TI
Selbetti Gest?o de Documentos
Telefone: +55 (47) 3441-6004
Celular: +55 (47) 8861-6672
"Bendita a na??o...
2016 Nov 10
1
ERROR:connection refused after provision
...==========================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};
<blockquote>
> 8. set permissions to bind9
> 9. set nameserver in resolv.conf
What are you setting the nameserver to ?
</blockquote>
The resolv.conf content is:
nameserver 10.53.3.11
domain ejemplo.cu
<blockquote>
> 10. edit app...
2017 May 16
2
DNS (bind_dlz) forwarding not working
...allow-query {
clientes;
};
forwarders {
xxx.xxx.xxx.10; # Our DNS
};
forward only;
tkey-gssapi-keytab "/var/lib/samba/private/dns.keytab";
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
listen-on port 53 { 127.0.0.1; xxx.xxx.xxx.6; };
};
xxx.xxx.xxx.6 -> Ip of AD
*smb.conf*
# Global parameters
[global]
netbios name = ADDC
realm = MYINSTITUTION.EDU
server services = s3fs, rpc, nbt, wrepl, ldap, cldap, kdc, drepl,
w...
2015 Apr 18
0
Question about domain name with BIND9_DLZ
...es;
> //forwarders { 8.8.8.8; 8.8.4.4; };
> recursion yes;
> //allow-transfer {"none";};
> allow-query { any; };
> allow-recursion { any; };
>
> dnssec-validation auto;
>
> auth-nxdomain no; # conform to RFC1035
> listen-on-v6 { any; };
>
> rate-limit {
> responses-per-second 5;
> #window 5;
> #log-only yes;
> };
> };
>
> zone "." {
> type hint;
> file "/etc/bind/db.roo...
2019 Jan 12
2
Samba + BIND9 DLZ. DNS dosen't resolve FQDN, only short hostname
...o the
config is scattered here and there, but if I put all includes together,
we get this:
options {
directory "/var/cache/bind";
// External DNS forwarder
forwarders {
10.10.10.1;
};
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { any; };
};
// The RFC1918 zones file is modified by commenting out 10. section
becouse this is our subnet and we don't want it to fall to empty zones
include "/etc/bind/zones.rfc1918";
zone "." {
type hint;
file "/etc/bind/db.root"...