New answers tagged

0

Samba has the capability to automatically update the BIND zone files via Kerberos. You have to configure bind with auto update. Check this article for full configuration and integration between Bind and Samba as domain controller Samba/Active Directory domain controller


3

While this ventures very close to being an opinion based question, I'm going to go ahead and say that this is objectively a bad idea. You're falling into the classic trap of over-engineering something that doesn't need to be over-engineered. Most reputable DNS administrators (i.e. known names) would criticize this as a bad practice. I don't have to ask ...


1

It can't be done the way you want to achieve it. View matching stops at the first match, and outside views, only one default set of entries can exist. A client can match only one set of zones. You could have all your views contain all of the zone definitions you want to serve to clients (in your example, 192.168.1.200 should be in "teens" acl only, and the "...


0

Turns out it was DNSMasq on the slave box. It was already bound to the ip and port 53, so named wasn't able to accept return traffic where it was listening. As soon as I disabled the dnsmasq service, it started working.


0

Check the permissions on your BIND directories. BIND directories and files must be owned or at least writable by the BIND user (most likely named). If your network isn't routing IPv6, remove the IPv6 lines from your config.


1

I checked port 53 using telnet 138.201.14.109 53 and found out that is was blocked. I had forgotten to reload firewall after adding port 53 to listen to both TCP and UDP protocols. Just shared my mistake for someone else who maybe do the same.


0

There was a problem with allow-recursion, I put back ournets instead and it went fine. It seems nslookup only works if recursion is available.


2

The original behavior is that slaves periodically perform a check that their zone data is current, based on comparing the SOA SERIAL field, with an interval specified in the SOA REFRESH field. If the slave's local data is old it will trigger a zone transfer (IXFR/AXFR). In addition to this, if the master sends a notify message that will trigger this same ...


0

The second situation you mention is standard DNS behavior, as any resolving server who is not the authoritative source will try and contact the master, or something in between with an authoritative unexpired record (though not the entire domain set unless requested).


3

There is no query based way to get server state. Glue, negative cache timers, etc. must be dumped from memory using the rndc dumpdb command. Record types beginning with \- are negatively cached. \-A, \-AAAA, etc. \-ANY indicates a true NXDOMAIN. No records live alongside or beneath this entity. The above might be confusing if you have not been exposed to ...


0

You need to allow queries from evereywhere. Either add the following to each of the zone statements in named.conf.local to individually allow zones to be queried or add it in the named.conf.options to allow all zones to be queried: allow-query { any; }; I recommend using dig to debug: apt-get install dnsutils # for debian/ununtu dig +trace example.ir ...


0

The samba4 packages that ship with both CentOS 6 and 7 do not have domain controller functionality. If you look inside, eg, samba-dc-4.2.3-10.el7.x86_64.rpm, you'll find it contains exactly one file, /usr/share/doc/samba-dc-4.2.3/README.dc. This file reads as follows: MIT Kerberos 5 Support Fedora is using MIT Kerberos implementation as its ...


0

Bind 9.10 has a new in-view zone option to say that “this zone I am defining in this view is really the same zone as the one I previously defined in this other view”. This will keep Bind informed that the zones are not separate zones but in reality the same zone.


1

This problem can be only reproduced with "vsftpd extended builds" taken from http://vsftpd.devnet.ru or from CentALT repository. I was not able to reproduce it any more with regular builds.



Top 50 recent answers are included