similar to: Bind_DLZ krb errors @ startup.

I"m seeing this as well, after I updated my CentOS 7 hosts to the latest release. Something seems to have broken! On 10 May 2018 at 17:54, Tom Diehl via samba <samba at lists.samba.org> wrote: > Hi, > > I have 2 self compiled samba 4 DCs running 4.7.7 on Centos 7.5. One of them > is operating normally. On the other DC bind will not start. I turned up > debugging on

On Mon, 6 Nov 2017 11:39:50 +0100 (CET) Maxence SARTIAUX via samba <samba at lists.samba.org> wrote: > Hello. > > To follow-up this issue, since the upgrade, when i do a named reload > it crash, look like there's duplicated zones. > > Here's the log when i trigger a reload > > > nov 05 03:09:02 data.contoso.com named[2807]: received control >

Using your log parameters, the shutting down message is not showed, but when I reload rndc a get the same effect. Everything is working fine until bond9_dlz needs to reload (and no restart) rndc. When this happens, I need to restart bind and everything works fine again. I'm starting named with named -d 3 -u named and using /var/log/messages. See log using your parameters: # rndc reload

Dear Rowland , Just keep in mind that the Debian RPI maintated by rasperry.org PI fellows and _not_ mainly by the Mainsteam debian pkg maintainers, and ways behind the main distro - allmost. > > Even though there is no mention of dlopen, samba_dlz works. > yes/no ->> its not displaying the DLZ file open <<- and that happen even on my now +1J old samba4.0 RPI samba4 ad.

Hi everyone, unfortunately, I managed to break my Samba AD DC configuration :-( and would like to ask the experts on this list. When restarting my Samba AC DC I noticed, that it didn't come up properly. samba outputs the following lines to /var/log/syslog > Nov 24 12:46:52 addc01 samba[30784]: /usr/sbin/samba_dnsupdate: > RuntimeError: kinit for ADDC01$@MYDOMAIN.LAN failed (Cannot

Dear Roland, and here we have one reasons / prove regarding Debian and current Samba BIND DLZ issues : http://metadata.ftp-master.debian.org/changelogs//main/b/bind9/bind9_9.8.4.dfsg.P1-6+nmu2+deb7u3_changelog MSG >> " * disable dlz until we get a patch to make it build again" Well Debian Maintainers seems seeking missing the dlz patches that RHEL & SLES maintainers created

And some more information about this strange effect apparently no-one has seen before. I now added the missing zone: samba-tool dns zonecreate verdandi 10.16.172.in-addr.arpa -U Administrator and it claims that the zone is okay, but the next one is missing: Dec 29 10:31:12 verdandi named[2601]: Loading 'ad.microsult.de' using driver dlopen Dec 29 10:31:12 verdandi named[2601]:

Hi Maxence, > Fyi, i've updated to 4.7.1, the dbcheck still not fix the broken links, > is the fix you talk about planned for a future release ? > > Our customer reported me, some users have issues when their logon server > is DC1 but not when it's DC2. > > On DC1 some users have access to all shares, some doesn't have any > access at all. actually this last

Hello , review bind9 options ... >> Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u >> bind -4 >> Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' >> '--mandir=/usr/share/man' '--infodir=/usr/share/info' >> '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads'

> There doesn't seem anything wrong there, the only comment I would make, > is '/var/lib/samba/bind-dns/named.conf' pointing to the correct version > of named ? Yes cat /var/lib/samba/bind-dns/named.conf dlz "AD DNS Zone" { # For BIND 9.8.x # database "dlopen /usr/lib64/samba/bind9/dlz_bind9.so"; # For BIND 9.9.x database "dlopen

Hello! Yes, Windows dns too, my dns in samba is Bind!!! I dont understande -> "where does Bind store the zone info ? *" :-| Thanks Em 28-06-2016 18:25, Rowland penny escreveu: > On 28/06/16 21:37, Carlos A. P. Cunha wrote: >> Hello! >> I have Samba 4.3.3 with Windows Server 2008 R2 SP1, I cm problems in >> DNS, which in windows can not create dns entries:

Mathias, Thanks for your reply. Please, try to start your bind with some debug level and run commando "rndc reload" and see the end of the log. I saw samba source code and found the destroy dns function in dlz_bind9.c and called by turture blz_bind9.c. When dlz_bind9.c is shutting down, I get this error when I try to update dns. update failed: NOTAUTH Failed nsupdate: 2

> So, you are using Samba without problem, it is just that when you try > to use Bind9 instead of the internal dns server, your problems start. > > Let's just recap > > You have run 'samba_upgradedns' > You have altered smb.conf > You have configured 'named.conf' correctly > The Samba 'named.conf' file is readable by 'named' (this

It seems like the BIND 9.8 that ships with CentOS 6.x (and probably RHEL 6.x) is not built with --with-dlopen option. Platform: CentOS 6.5 BIND 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1 Error seen: RuntimeError: kinit for HOSTNAME$EXAMPLE.COM failed (Cannot contact any KDC for requested realm) Background: Trying to setup Samba 4 using an existing install of BIND 9.8 as the DNS backend. However,

Hello. To follow-up this issue, since the upgrade, when i do a named reload it crash, look like there's duplicated zones. Here's the log when i trigger a reload nov 05 03:09:02 data.contoso.com named[2807]: received control channel command 'reload' nov 05 03:09:02 data.contoso.com named[2807]: loading configuration from '/etc/named.conf' nov 05 03:09:02 data.contoso.com

Hello! After updating (only one dc) for samba 4.5.3 is occurring duplicate zone errors, when I run rndc reload Samba_dlz: Ignoring duplicate zone This replied to all my dcs ... When I run: Samba_dnsupdate --verbose --all-names I get the error Update failed: NOTAUTH .... .... Update failed: NOTAUTH Failed nsupdate: 2 Failed update of 21 entries Like this topic to have reference to this,

options { listen-on port 53 { 127.0.0.1; 172.17.2.187; }; //listen-on-v6 port 53 { ::1; }; directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; memstatistics-file "/var/named/data/named_mem_stats.txt"; allow-query { localhost; 172.17.0.0/16; }; allow-transfer { localhost;

Hi Bob, ? Ok, things are looking ok again? dpkg-reconfiure krb5.conf , doesnt do much expect installing and configuringing krb5.conf which basicly only sets the REALM.? "init administrator" will not connect to kerberos? If the DNS isnt running, its unable to resolv the servernames for the REALM. Resulting in, you not able to kinit. ? Greetz, ? Louis ? ? Van: Robert Wooden

Hi, I have a test system with two DCs based on samba v 4.8.0 with BIND9_DLZ as the dns backend running on a fresh install of Gentoo. I can't get DNS Updates to work on both DCs. If I issue the command: samba_dnsupdate --verbose after the 2nd DC has joined the domain I get the errors (just showing the last entry): update(nsupdate): SRV

Hello, The error described in the email title happens in version 9.10 of the bind that I have installed in our main DC. In face of that, I found the samba wiki article that talks about this problem. https://wiki.samba.org/index.php/Using_BIND_DLZ_backend_with_secured_/_signed_DNS_updates I made a new installation via source with the suggested options: root at dc3:~# fakeroot ./configure