similar to: BIND 9.9 setup with samba

> From: Rowland penny via samba <samba at lists.samba.org> > To: samba at lists.samba.org > Date: 05/14/2019 02:50 PM > Subject: Re: [Samba] Workstations cannot update DNS > Sent by: "samba" <samba-bounces at lists.samba.org> > > On 14/05/2019 21:36, Durwin via samba wrote: > > I am trying to get DDNS working, so workstations can update their ip.

On 15/05/2019 17:57, durwin at mgtsciences.com wrote: > > > > May 14 14:22:32 audit[2117]: AVC apparmor="DENIED" > operation="file_lock" > > > profile="/usr/sbin/named" name="/var/lib/samba/private/dns.keytab" > > > pid=2117 comm="isc-worker0000" requested_mask="k" denied_mask="k" > > >

I am trying to get DDNS working, so workstations can update their ip. The domain is msi.mycompany.com The DC server works, as well as group policies. I set rights to these files > chgrp bind /var/lib/samba/private/ > chmod 750 /var/lib/samba/private/ > chgrp bind /var/lib/samba/private/dns.keytab > chmod 640 /var/lib/samba/private/dns.keytab journalctl shows this. May 14 14:22:32

https://bugs.freedesktop.org/show_bug.cgi?id=103689 Bug ID: 103689 Summary: there is an exploitable page fault that can be reliably triggered from the chromium sandbox can possibly lead to remote attackers causing a denial of service condition or possibly running system code. Product: xorg

From Ubuntu 14.04, I have installed Samba 4.1.6 and bind 9.9.5 and have them working together as per https://wiki.samba.org/index.php/DNS_Backend_BIND To make it work I had to add the following overrides to /etc/apparmor.d/local/usr.sbin.named: # Samba4 DLZ and Active Directory Zones /usr/lib/x86_64-linux-gnu/samba/** rm, /usr/lib/x86_64-linux-gnu/ldb/modules/ldb/** rm,

Last week, Debian testing (Buster) added apparmor to the list of dependencies for its latest kernel release, apparently because systemd needs it.  Recently, I noticed my first casualty - bind9 - due to apparmor failures with bind_dlz. Here is the initial journalctl results: Nov 23 10:12:12 debpdc named[16080]: starting BIND 9.10.6-Debian <id:9d1ea0b> -f -u bind Nov 23 10:12:12 debpdc

On Sun, 16 Oct 2016 12:38:00 -0500 Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > I am working on my second Ubuntu 16.04.1LTS running Samba 4.5.0 with > Bind9_DLZ. > > I have one machine just like this one. Same hardware, same software > setup. First machine is working fine. > > At the moment this (second) machine is not joined to the other

Hello, I think I submitted this before, but I am not sure this has been addressed I am using AppArmor with Dovecot, without any issue. However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See: ------------ Dec 09 14:35:53 portal2 kernel: audit: type=1400 audit(1544366153.379:3035): apparmor="DENIED" operation="file_mmap"

On 2018-12-09 23:13, Timo Sirainen wrote: > On 9 Dec 2018, at 16.44, Andr? Rodier via dovecot <dovecot at dovecot.org> > wrote: >> >> Hello, >> >> I think I submitted this before, but I am not sure this has been >> addressed >> >> I am using AppArmor with Dovecot, without any issue. >> >> However, I think there is a bug in the

On 2016-10-16 12:55, Rowland Penny via samba wrote: > On Sun, 16 Oct 2016 12:38:00 -0500 > Bob of Donelson Trophy via samba <samba at lists.samba.org> wrote: > >> I am working on my second Ubuntu 16.04.1LTS running Samba 4.5.0 with >> Bind9_DLZ. >> >> I have one machine just like this one. Same hardware, same software >> setup. First machine is

Hello Timo, I will try this evening. Kind regards, Andr?. On 10 December 2018 07:56:26 GMT+00:00, Timo Sirainen <tss at iki.fi> wrote: >On 10 Dec 2018, at 7.50, Andr? Rodier <andre at rodier.me> wrote: >> >> On 2018-12-09 23:13, Timo Sirainen wrote: >>> On 9 Dec 2018, at 16.44, Andr? Rodier via dovecot ><dovecot at dovecot.org> wrote:

Hello, I've running Ubuntu-14.04 as my host and my guest. I've been trying to get guest to host communication set up by configuring a virtio-serial device. My xml file contains: <channel type='unix'> <source mode='bind' path='/home/dave/vm1.agent'/> <target type='virtio' name='vm1'/> </channel> When I start up

Hello all, I am using dovecot on Debian stretch, with AppArmor, and I have this audit log: Mar 16 11:25:10 mail kernel: audit: type=1400 audit(1521199510.705:580): apparmor="DENIED" operation="file_mmap" info="Failed name lookup - disconnected path" error=-13 profile="/usr/lib/dovecot/auth" name="var/cache/nscd/hosts" pid=26797

On 9 Dec 2018, at 16.44, Andr? Rodier via dovecot <dovecot at dovecot.org> wrote: > > Hello, > > I think I submitted this before, but I am not sure this has been addressed > > I am using AppArmor with Dovecot, without any issue. > > However, I think there is a bug in the indexer working, from what I can see, a missing trailing slash. See: > > ------------

On 10 Dec 2018, at 7.50, Andr? Rodier <andre at rodier.me> wrote: > > On 2018-12-09 23:13, Timo Sirainen wrote: >> On 9 Dec 2018, at 16.44, Andr? Rodier via dovecot <dovecot at dovecot.org> wrote: >>> Hello, >>> I think I submitted this before, but I am not sure this has been addressed >>> I am using AppArmor with Dovecot, without any issue.

Hi there, I know this isn't a Dovecot issue, but hope that somebody can helps me. I've successfully installed and configured Dovecot to a Debian 9 server. Looks like everything works as well, I just see a line in the log when I send a mail: Mar 28 22:21:47 mailng kernel: [3150146.825007] audit: type=1400 audit(1553808107.757:286204): apparmor="DENIED"

Hai, A few things to add/check. For that test with that pc: this part from the previous mail. Jun 27 10:55:07 server5-ad dhcpd[2525]: Release: IP: 192.168.14.198 Jun 27 10:55:07 server5-ad dhcpd[2525]: execute_statement argv[0] = /usr/local/bin/dhcp-dyndns.sh Jun 27 10:55:07 server5-ad dhcpd[2525]: execute_statement argv[1] = delete Jun 27 10:55:07 server5-ad dhcpd[2525]: execute_statement

Hi Current wiki suggestion (https://wiki.samba.org/index.php/Configure_BIND_as_backend_for_Samba_AD#Interaction_with_AppArmor_or_SELinux) is to add the following to /etc/apparmor.d/local/usr.sbin.named # Samba4 DLZ and Active Directory Zones (default source installation) /usr/local/samba/lib/** rm, /usr/local/samba/private/dns.keytab r, /usr/local/samba/private/named.conf r,

Hi Daniel, I noticed that the patch "Add support for hotplug/unplug of disk devices in LXC" you wrote had been merged into libvirt of version 1.0.2. But when I used this function, it report an error with details as following: ubuntu@lxc:~$ vir attach-device instance-0000002c disk.xml --config error: Failed to attach device from disk.xml error: Unable to create device

Hai, You posted the correct things here, for a quick fix i I'm buzzy with something else atm but i saw that /dev/urandom part. Add in the bind9 (named) apparmor profile # Samba DLZ /{usr/,}lib/@{multiarch}/samba/bind9/*.so rm, /{usr/,}lib/@{multiarch}/samba/gensec/*.so rm, /{usr/,}lib/@{multiarch}/samba/ldb/*.so rm, /{usr/,}lib/@{multiarch}/ldb/modules/ldb/*.so rm,