[Samba] Samba4, DHCP, & BIND DLZ

[Jeff]

Hello,

I have recently compiled, installed and configured samba4 to run on a FreeBSD server.

samba -V reports the version to be Version 4.1.0pre1-GIT-57990cb.

The server has working BIND 9.9 and ISC-DHCP services running on it.

I have provisioned samba 4 to use the BIND_DLZ DNS backend.

On the whole things seem to be working. local names are being resolved. phpLDAPAdmin shows the new AD.

I need to resolve a couple of things though.

(1) log.samba has a lot of

[2012/09/20 15:41:08, 0] ../lib/util/util_runcmd.c:334(samba_runcmd_io_handler)
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was unsuccessful
[2012/09/20 15:41:08, 0] ../lib/util/util_runcmd.c:334(samba_runcmd_io_handler)
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was unsuccessful
[2012/09/20 15:41:08, 0] ../lib/util/util_runcmd.c:334(samba_runcmd_io_handler)
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was unsuccessful
[2012/09/20 15:41:08, 0] ../lib/util/util_runcmd.c:334(samba_runcmd_io_handler)
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was unsuccessful
[2012/09/20 15:41:09, 0] ../lib/util/util_runcmd.c:334(samba_runcmd_io_handler)
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was unsuccessful
[2012/09/20 15:41:09, 0] ../lib/util/util_runcmd.c:334(samba_runcmd_io_handler)
/usr/local/samba/sbin/samba_dnsupdate: response to GSS-TSIG query was unsuccessful

What does it mean and how do I fix it??


(2) I need to ensure that DHCP is playing nicely with samba4. How are DNS updates from the DHCP server propagated to samba4?? I've changed my BIND so that it no longer uses zone files for the local domain. Instead it uses the bind9 dlz driver that came with samba4. If I understand correctly, this means that bind will now pass queries about the local domain off to samba. So samba must be updated whenever a new DHCP lease is granted by the dhcp server. Does the DLZ driver handle this, or does the DHCP server need to be configured to cause these updates to go directly to samba??


Thanks,
Jeff



--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba

[Jeff]

[Gémes Géza]

Hi,

The windows clients try to update their dns records themselves without
the help of the dhcp server, for *nix clients I've seen some description
how to configure isc-dhcp to update records on a Windows AD, which
should apply to Samba as well, unfortunately I have no pointer to that
document, but Google should find it. I have no personal experience with
such setup, because I've decided to go with statically assigned
addresses (based on MAC addresses).

Regards

Geza Gemes

[Rowland Penny]

On 21/09/12 00:55, Jeff wrote:
> (2) I need to ensure that DHCP is playing nicely with samba4. How are DNS updates from the DHCP server propagated to samba4?? I've changed my BIND so that it no longer uses zone files for the local domain. Instead it uses the bind9 dlz driver that came with samba4. If I understand correctly, this means that bind will now pass queries about the local domain off to samba. So samba must be updated whenever a new DHCP lease is granted by the dhcp server. Does the DLZ driver handle this, or does the DHCP server need to be configured to cause these updates to go directly to samba??
>
>
> Thanks,
> Jeff
>
>
>

Hi, you could start here:

http://blog.michael.kuron-germany.de/2011/02/isc-dhcpd-dynamic-dns-updates-against-secure-microsoft-dns/

I did have a variant of this working on Ubuntu 12.04 with Bind 9.9.1,
dhcp & samba4 beta8 but had problems when I moved to samba RC1 & the
internal dns.
The problem turned out to be, although the script updated dns it always
returned an error, so it seemed not work, I just rewrote the script to
check another way.

Rowland


--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.