similar to: client @0x7f6ed800bc20 172.16.5.86#62582: update 'campus.company.intra/IN' denied

On Mon, 2 Jul 2018 10:27:58 -0300 Elias Pereira via samba <samba at lists.samba.org> wrote: > Hello, > > The error described in the email title happens in version 9.10 of the > bind that I have installed in our main DC. In face of that, I found > the samba wiki article that talks about this problem. >

> > Hmm, bind 9.12.x isn't supported yet. He works with "dlopen /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_11.so" without problems, at first. include "/etc/bind/rndc.key"; > controls { > inet 127.0.0.1 allow { localhost; } keys { rndc-key;}; > }; > You do not need the four lines above Ok, but if I leave it, does not have problems

On Mon, 2 Jul 2018 12:12:07 -0300 Elias Pereira via samba <samba at lists.samba.org> wrote: > > > > Hmm, bind 9.12.x isn't supported yet. > > > He works with "dlopen > /usr/lib/x86_64-linux-gnu/samba/bind9/dlz_bind9_11.so" without > problems, at first. I repeat, Bind 9.12.x is unsupported at this time, just because it worked once is no reason to

On Mon, 2 Jul 2018 22:56:39 -0300 Elias Pereira via samba <samba at lists.samba.org> wrote: > > > > I don't know what error you are getting, even if you have posted it, > > can you post the full error. Can you please post all the lines from > > syslog around the error and not just the error. > > > The only logs that show is below. > >

On Tue, 3 Jul 2018 10:37:29 -0300 Elias Pereira via samba <samba at lists.samba.org> wrote: > > > > auth-nxdomain yes; # conform to RFC1035 =no > > > Why do you use this variable as "yes"? :) To be honest, I cannot remember just why I set it, I can just tell you that I have used it that way for nearly six years now, but if you insist in knowing, I will

On Mon, 2 Jul 2018 14:22:36 -0300 Elias Pereira via samba <samba at lists.samba.org> wrote: > > > > I repeat, Bind 9.12.x is unsupported at this time, just because it > > worked once is no reason to use it. It may have nothing to do with > > your problem, but using a supported Bind version will rule it out. > > > Ok. :) > > I'll reinstall using

@Rowland Penny <rpenny at samba.org> The link below indicates that the error message may come from windows "In the default configuration a Windows client will try to register its name with A record in the DNS domain it thinks it belongs to." https://docs.menandmice.com/pages/viewpage.action?pageId=6360958 Tomorrow I'll create a GPO to disable this option. Do you think it is

> > To be honest, I cannot remember just why I set it, I can just tell you > that I have used it that way for nearly six years now, but if you > insist in knowing, I will search my old notes to find the reason. If it's not much work for you, I'd like to know why. :) Is the above block in syslog as posted, or is it another 'grep' block. > If the lines are not

> > auth-nxdomain yes; # conform to RFC1035 =no Why do you use this variable as "yes"? :) Note the lack of './daemon.log.1:33430:'. I have '/var/log/deamon.log' > and it contains lines in the format above, they all start with the date. I used a grep to find the lines with "denied" and posted. If I get the logs directly from syslog, it usually

> > I repeat, Bind 9.12.x is unsupported at this time, just because it > worked once is no reason to use it. It may have nothing to do with your > problem, but using a supported Bind version will rule it out. Ok. :) I'll reinstall using supported version 9.11.3-2 OK, your server, but I think you should be aware that I have been using > Bind9 with Samba since December 2012

> > I don't know what error you are getting, even if you have posted it, > can you post the full error. Can you please post all the lines from > syslog around the error and not just the error. The only logs that show is below. ./daemon.log.1:33430:Jul 2 06:16:28 dc3 named[9754]: client 10.10.4.3#52074: update 'campus.company.intra/IN' denied ./daemon.log.1:33432:Jul 2

Hi, I need some help with a routing/shaping setup that is a bit beyond my current linux routing knowledge. I''ve read the how-to and most of the related mailing list topics, but I still need some help to solve this problem. I''ve been asking questions on various lists, but it seems like the answers just add additional confusion. I decided to just describe what I''m trying

Alright, I'm taking the plunge: We're switching our three AD DCs from Samba internal to BIND_DLZ back end. I needed a version of BIND with DLZ, as it appears support for that is not so ubiquitous. I went here first: https://wiki.samba.org/index.php/Using_BIND_DLZ_backend_with_secured_/_signed_DNS_updates We use Ubuntu 14.04 here, and the Debian/Ubuntu instructions fail on apt-get

On Tue, 21 Aug 2018 16:50:19 +0200 "L.P.H. van Belle via samba" <samba at lists.samba.org> wrote: > > ; TSIG error with server: tsig verify failure > > Mayabe update/setup your TSIG key. > https://access.redhat.com/documentation/en-us/openshift_enterprise/2/html/puppet_deployment_guide/generating_a_bind_tsig_key > > Im also wondering why RH is using :

Hi Rowland, I didn't build samba, I'm running the sernet packages, # rpm -qa | grep sernet sernet-samba-libsmbclient0-4.8.6-16.el7.x86_64 sernet-samba-ad-4.8.6-16.el7.x86_64 sernet-samba-libs-4.8.6-16.el7.x86_64 sernet-samba-client-4.8.6-16.el7.x86_64 sernet-samba-winbind-4.8.6-16.el7.x86_64 sernet-samba-common-4.8.6-16.el7.x86_64 sernet-samba-4.8.6-16.el7.x86_64 I don't mind having

hello . i have no problem shaping incoming traffic from WAN how do i shape outgoing traffic to WAN depending on the speed limit of each subnet .... ex: 10.10.6.0 --> 512kbps (DOWNLOAD / UPLOAD) 10.10.5.0 --> 256kbps (DOWNLOAD / UPLOAD) do i have to used forward handle, and used iptables -s 10.10.6.0/24 -d WAN -j MARK --set-mark 101 and used iptables -s 10.10.5.0/24 -d WAN -j MARK

https://www1.montpellier.inra.fr/intranet/intracampus/logiciels/consult/

Thank you for your inquiry to the Campus Hub. Depending on the volume and complexity of requests currently being received, please allow up to 3-4 business days for us to research and answer your question. If you have not included your full name and Tech ID in your original email, please resubmit your request and include this information. To safeguard the privacy of student information, all

Hello, everyone. To recapitulate the results of our research: 1) I can confirm Samba 4.8 and Bind 9.9.4 (distribution package) on CentOS 7 (tested od 7.5) work even with dynamic DNS updates without any additional fixes or need to recompile Bind package. I think it will work also on other RHEL 7 clones, so we should update Wiki page:

On Wed, 31 Oct 2018 18:36:52 +0200 Eben Victor <eben.victor at gmail.com> wrote: > Hello Rowland, > > I have already checked and the DN's are in AD, see attached. > > SOA: > <domain>.corp. 3600 IN SOA psad102zadprh.<domain>.corp. . > 9766 3600 600 86400 3600 > > See below NS, but the 1st NS (zatprdc001) doesn't exsit, and I