similar to: Is there any tool to convert DNS database to zone files?

On Thu, 24 Apr 2025 08:55:07 +0300 Sami Hulkko via samba <samba at lists.samba.org> wrote: > HI, > > Anybody have idea of how to get from BIND9 samba zone database neat > BIND9 zone files automatically? > > Like: > > 389 Directory Server - Howto:BIND > <https://www.port389.org/docs/389ds/howto/howto-bind.html> > On the page you linked to, the first

Hi, The case I have is dns-sec that with current samba DC implementations with samba native or samba with Bind9 do not work. In Bind9 native this feature(dns-sec) is available. SH On 24/04/2025 9.50, Rowland Penny via samba wrote: > On Thu, 24 Apr 2025 08:55:07 +0300 > Sami Hulkko via samba <samba at lists.samba.org> wrote: > >> HI, >> >> Anybody have idea of

On Thu, 24 Apr 2025 10:48:02 +0300 Sami Hulkko via samba <samba at lists.samba.org> wrote: > Hi, > > The case I have is dns-sec that with current samba DC implementations > with samba native or samba with Bind9 do not work. In Bind9 native > this feature(dns-sec) is available. > Samba AD does not implement DNSSEC, so I fail to see what using a different dns server will

> In my Samba domain i've started to upgrade windows hosts to Windows11 24H2. > System GPO stop to apply (User GPO apply flawlessy). Complain about 'machine > account'. > In Event viewer, i've catch event '1097', that led to me to: >

I'm testing to a seamless upgrade from 4.3.11 to 4.8.3 on my test setup. Database migrating from 4.3.11 was successful. After "samba-tool dbdcheck --cross-ncs --fix --yes", 4.8.3 was launching ok except replication (4.3.11 to 4.8.3 : WERR_BADFILE). After demoting older ones and seize (transfer doesn't work) all roles to 4.8.3, dns (bind_dlz) service won't start anymore

Hi all, I would like install 389 Directory Server on a Centos 6.8 server. I followed the instructions reported in : https://wiki.centos.org/HowTos/DirectoryServerSetup?highlight=%28directory%29%7C%28server%29 and installed with yum the following packages : 389-ds-base-1.2.11.15-75.el6_8.x86_64 389-ds-console-1.2.6-1.el6.noarch 389-ds-base-libs-1.2.11.15-75.el6_8.x86_64

Hi ... Rowland Penny wrote on 06.07.2015 13:22:57: > > Is there no way to detect on my PDC what is the problem. Why is my PDC > > Samba rejecting my samba member server...? > > > > Permissions ?? Is the join correct ? Yes... net rpc testjoin returns OK. > It has been sometime since I did anything major with an LDAP PDC and > even then I used smbldap tools. It

I just upgraded bind9 on my backup DC to 9.9.5-7-Debian and restarting the service failed: Dec 22 12:25:55 verdandi named[18534]: starting BIND 9.9.5-7-Debian -u bind -4 Dec 22 12:25:55 verdandi named[18534]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var'

Hi samba team ! I'm face with a new problem on a new Samba PDC install (Debian 9). I don't know why, but systemd run multiples "rndc reconfig" commands during the init script. So the bind9 log file show : -> A successful start -> A failed reconfig (samba_dlz Ignoring duplicate zone) at each boot/reboot. So I need to restart bind9 each time manually. I created a wrapper

On 05/08/2019 10:14, Patrik wrote: > I am not using flatfiles and i using BIND_DLZ it shows in my log and i > do not use flatfiles. BIND_DLZ only. Oh yes you are, you have this in your /etc/bind/named.conf.local : ??? zone "patrikx3.com" { ??????? type master; ??????? file "/etc/bind/zones/enp1s0f3/patrikx3.com"; ??????? include

Hello All, I hope someone might be able to assist me. Env: RHEL 7 Samba 4.10 Bind9 DLZ 9.4 I have tried everything to disable 'DNS Zone Transfers' when using Bind9 DLZ with Samba ADDC. I'm using below line , and I have tried different acl's as well, but nothing seems to work. allow-transfer {"none";}; Can someone please advise on how to disable 'DNS Zone

Hi all, it seems the workaround is no longer needed, got an extra update of bind 9.18.28 today: --- Changes for bind9 (bind9 bind9-dnsutils bind9-host bind9-libs bind9-utils) --- bind9 (1:9.18.28-1~deb12u2) bookworm-security; urgency=medium * Fix the assertion failure in samba-libs DLZ module. (Closes #1074378) Tested it, and yes, it worked... Regards Ingo https://github.com/WAdama

Hello! Own Samba 4.4.5 with BIND 9.9.7, and realized (in older Samba versions also) that the DNS zone transfer works when anyone makes the request, the update is correct only DC can. This behavior seems "wrong", right? Its block I (tried a few things, but without success). Thank you

And some more information about this strange effect apparently no-one has seen before. I now added the missing zone: samba-tool dns zonecreate verdandi 10.16.172.in-addr.arpa -U Administrator and it claims that the zone is okay, but the next one is missing: Dec 29 10:31:12 verdandi named[2601]: Loading 'ad.microsult.de' using driver dlopen Dec 29 10:31:12 verdandi named[2601]:

Hello Rowland, thank you very much! Ive read the mails but I didnt realize that this may be the same problem. I can confirm that your workaround fixes the issue. Regards, Matthias. Am 26.07.24 um 08:48 schrieb Rowland Penny via samba: > On Fri, 26 Jul 2024 08:38:58 +0200 > Matthias K?hne | Ellerhold Aktiengesellschaft via samba > <samba at lists.samba.org> wrote: > >>

Sorry, Louis, not all of us use systemd. > Almost Harry... > > For debian Stretch. # cat /etc/debian_version buster/sid # cat /proc/1/cmdline /sbin/init You see: good old init. Just a test machine for a scheduled upgrade. > systemctl cat bind9 > # /lib/systemd/system/bind9.service > [Unit] > Description=BIND Domain Name Server > Documentation=man:named(8) >

Hi! How to get usermod working with SSSD/389DS ? We have SSSD set up on our server and it uses 389DS. SSSD was enabled with the following command: authconfig --enablesssd --enablesssdauth --ldapbasedn=dc=example,dc=com --enableshadow --enablemkhomedir --enablelocauthorize --update Running for example "usermod -L username" returns: usermod: user 'username' does not exist in

Thanks Roland, You are correct. Our Bind9 DLZ is version 9.9.4. I'll have to check if I will be able to upgrade to a newer version of Bind, these are on our production servers. On Mon, Jul 22, 2019 at 9:40 AM Rowland penny via samba < samba at lists.samba.org> wrote: > On 22/07/2019 08:24, Eben Victor via samba wrote: > > Hello All, > > > > I hope someone might be

Hello rowland, > > hang on a bit, the Debian link is for bind 9.8.x and the dlz reference > is for 9.8.1.dfsg-1. > I don?t recomend to use Bind 9.8.1 / 9.8.2 anymore - most distro use it but the shuold move due DLZ compile & bind bugs. and 9.8 soon goes on end of Life see https://kb.isc.org/article/AA-01211/81/BIND-9.8.8-Release-Notes.html > Rowland > This just

Last month I struggled with a severe DLZ issue and today I could solve it. Credits for the important idea go to Peter Serbe, thanks! I checked the DNS contents using RSAT. There was nothing wrong with SOA nor NS entries, but the reverse zones were actually forward zones with proper names in the in-addr.arpa. domain. I built proper reverse zones and deleted the forward-reverse zones and Bind