Bind problem

szabi · January 16, 2017, 6:05pm

Hi,
i have a problem that the bind cant start have an does anyone idea where is the problem?
“zone _msdcs.datec.ro/NONE: has no NS records”???
I make a dns modification and after restart that is the situation:

Jan 16 19:52:37 ad named[11927]: starting BIND 9.8.4-rpz2+rl005.12-P1 -c /etc/bind/named.conf.samba4 -f -d 0
Jan 16 19:52:37 ad named[11927]: built with ‘–prefix=/usr’ ‘–mandir=/usr/share/man’ ‘–infodir=/usr/share/info’ ‘–sysconfdir=/etc/bind’ ‘–localstatedir=/var’ ‘–enable-threads’ ‘–enable-largefile’ ‘–with-libtool’ ‘–enable-shared’ ‘–enable-static’ ‘–with-openssl=/usr’ ‘–with-gssapi=/usr’ ‘–with-gnu-ld’ ‘–with-geoip=/usr’ ‘–enable-ipv6’ ‘–with-dlz-dlopen’ ‘CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2’
Jan 16 19:52:37 ad named[11927]: ----------------------------------------------------
Jan 16 19:52:37 ad named[11927]: BIND 9 is maintained by Internet Systems Consortium,
Jan 16 19:52:37 ad named[11927]: Inc. (ISC), a non-profit 501©(3) public-benefit
Jan 16 19:52:37 ad named[11927]: corporation. Support and training for BIND 9 are
Jan 16 19:52:37 ad named[11927]: available at isc.org/support
Jan 16 19:52:37 ad named[11927]: ----------------------------------------------------
Jan 16 19:52:37 ad named[11927]: adjusted limit on open files from 4096 to 1048576
Jan 16 19:52:37 ad named[11927]: found 2 CPUs, using 2 worker threads
Jan 16 19:52:37 ad named[11927]: using up to 4096 sockets
Jan 16 19:52:37 ad named[11927]: loading configuration from ‘/etc/bind/named.conf.samba4’
Jan 16 19:52:37 ad named[11927]: reading built-in trusted keys from file ‘/etc/bind/bind.keys’
Jan 16 19:52:37 ad named[11927]: using default UDP/IPv4 port range: [1024, 65535]
Jan 16 19:52:37 ad named[11927]: using default UDP/IPv6 port range: [1024, 65535]
Jan 16 19:52:37 ad named[11927]: listening on IPv6 interfaces, port 53
Jan 16 19:52:37 ad named[11927]: listening on IPv4 interface lo, 127.0.0.1#53
Jan 16 19:52:37 ad named[11927]: listening on IPv4 interface eth0, 194.153.231.2#53
Jan 16 19:52:37 ad named[11927]: listening on IPv4 interface docker0, 172.17.42.1#53
Jan 16 19:52:37 ad named[11927]: generating session key for dynamic DNS
Jan 16 19:52:37 ad named[11927]: sizing zone task pool based on 1 zones
Jan 16 19:52:37 ad named[11927]: Loading ‘samba4.zone’ using driver dlopen
Jan 16 19:52:37 ad named[11927]: samba_dlz: started for DN DC=datec,DC=ro
Jan 16 19:52:37 ad named[11927]: samba_dlz: starting configure
Jan 16 19:52:37 ad named[11927]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=DomainDnsZones,DC=datec,DC=ro’
Jan 16 19:52:37 ad named[11927]: samba_dlz: configured writeable zone ‘datec.ro’
Jan 16 19:52:37 ad named[11927]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=ForestDnsZones,DC=datec,DC=ro’
Jan 16 19:52:37 ad named[11927]: zone _msdcs.datec.ro/NONE: has no NS records
Jan 16 19:52:37 ad named[11927]: samba_dlz: Failed to configure zone ‘_msdcs.datec.ro’
Jan 16 19:52:37 ad named[11927]: samba_dlz: shutting down
Jan 16 19:52:37 ad named[11927]: loading configuration: bad zone
Jan 16 19:52:37 ad named[11927]: exiting (due to fatal error)
Jan 16 19:53:37 ad named[11959]: starting BIND 9.8.4-rpz2+rl005.12-P1 -c /etc/bind/named.conf.samba4 -f -d 0
Jan 16 19:53:37 ad named[11959]: built with ‘–prefix=/usr’ ‘–mandir=/usr/share/man’ ‘–infodir=/usr/share/info’ ‘–sysconfdir=/etc/bind’ ‘–localstatedir=/var’ ‘–enable-threads’ ‘–enable-largefile’ ‘–with-libtool’ ‘–enable-shared’ ‘–enable-static’ ‘–with-openssl=/usr’ ‘–with-gssapi=/usr’ ‘–with-gnu-ld’ ‘–with-geoip=/usr’ ‘–enable-ipv6’ ‘–with-dlz-dlopen’ ‘CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2’
Jan 16 19:53:37 ad named[11959]: ----------------------------------------------------
Jan 16 19:53:37 ad named[11959]: BIND 9 is maintained by Internet Systems Consortium,
Jan 16 19:53:37 ad named[11959]: Inc. (ISC), a non-profit 501©(3) public-benefit
Jan 16 19:53:37 ad named[11959]: corporation. Support and training for BIND 9 are
Jan 16 19:53:37 ad named[11959]: available at isc.org/support
Jan 16 19:53:37 ad named[11959]: ----------------------------------------------------
Jan 16 19:53:37 ad named[11959]: adjusted limit on open files from 4096 to 1048576
Jan 16 19:53:37 ad named[11959]: found 2 CPUs, using 2 worker threads
Jan 16 19:53:37 ad named[11959]: using up to 4096 sockets
Jan 16 19:53:37 ad named[11959]: loading configuration from ‘/etc/bind/named.conf.samba4’
Jan 16 19:53:37 ad named[11959]: reading built-in trusted keys from file ‘/etc/bind/bind.keys’
Jan 16 19:53:37 ad named[11959]: using default UDP/IPv4 port range: [1024, 65535]
Jan 16 19:53:37 ad named[11959]: using default UDP/IPv6 port range: [1024, 65535]
Jan 16 19:53:37 ad named[11959]: listening on IPv6 interfaces, port 53
Jan 16 19:53:37 ad named[11959]: listening on IPv4 interface lo, 127.0.0.1#53
Jan 16 19:53:37 ad named[11959]: listening on IPv4 interface eth0, 194.153.231.2#53
Jan 16 19:53:37 ad named[11959]: listening on IPv4 interface docker0, 172.17.42.1#53
Jan 16 19:53:37 ad named[11959]: generating session key for dynamic DNS
Jan 16 19:53:37 ad named[11959]: sizing zone task pool based on 1 zones
Jan 16 19:53:37 ad named[11959]: Loading ‘samba4.zone’ using driver dlopen
Jan 16 19:53:37 ad named[11959]: samba_dlz: started for DN DC=datec,DC=ro
Jan 16 19:53:37 ad named[11959]: samba_dlz: starting configure
Jan 16 19:53:37 ad named[11959]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=DomainDnsZones,DC=datec,DC=ro’
Jan 16 19:53:37 ad named[11959]: samba_dlz: configured writeable zone ‘datec.ro’
Jan 16 19:53:37 ad named[11959]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=ForestDnsZones,DC=datec,DC=ro’
Jan 16 19:53:37 ad named[11959]: zone _msdcs.datec.ro/NONE: has no NS records
Jan 16 19:53:37 ad named[11959]: samba_dlz: Failed to configure zone ‘_msdcs.datec.ro’
Jan 16 19:53:37 ad named[11959]: samba_dlz: shutting down
Jan 16 19:53:37 ad named[11959]: loading configuration: bad zone
Jan 16 19:53:37 ad named[11959]: exiting (due to fatal error)
Jan 16 19:54:38 ad named[11993]: starting BIND 9.8.4-rpz2+rl005.12-P1 -c /etc/bind/named.conf.samba4 -f -d 0
Jan 16 19:54:38 ad named[11993]: built with ‘–prefix=/usr’ ‘–mandir=/usr/share/man’ ‘–infodir=/usr/share/info’ ‘–sysconfdir=/etc/bind’ ‘–localstatedir=/var’ ‘–enable-threads’ ‘–enable-largefile’ ‘–with-libtool’ ‘–enable-shared’ ‘–enable-static’ ‘–with-openssl=/usr’ ‘–with-gssapi=/usr’ ‘–with-gnu-ld’ ‘–with-geoip=/usr’ ‘–enable-ipv6’ ‘–with-dlz-dlopen’ ‘CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2’
Jan 16 19:54:38 ad named[11993]: ----------------------------------------------------
Jan 16 19:54:38 ad named[11993]: BIND 9 is maintained by Internet Systems Consortium,
Jan 16 19:54:38 ad named[11993]: Inc. (ISC), a non-profit 501©(3) public-benefit
Jan 16 19:54:38 ad named[11993]: corporation. Support and training for BIND 9 are
Jan 16 19:54:38 ad named[11993]: available at isc.org/support
Jan 16 19:54:38 ad named[11993]: ----------------------------------------------------
Jan 16 19:54:38 ad named[11993]: adjusted limit on open files from 4096 to 1048576
Jan 16 19:54:38 ad named[11993]: found 2 CPUs, using 2 worker threads
Jan 16 19:54:38 ad named[11993]: using up to 4096 sockets
Jan 16 19:54:38 ad named[11993]: loading configuration from ‘/etc/bind/named.conf.samba4’
Jan 16 19:54:38 ad named[11993]: reading built-in trusted keys from file ‘/etc/bind/bind.keys’
Jan 16 19:54:38 ad named[11993]: using default UDP/IPv4 port range: [1024, 65535]
Jan 16 19:54:38 ad named[11993]: using default UDP/IPv6 port range: [1024, 65535]
Jan 16 19:54:38 ad named[11993]: listening on IPv6 interfaces, port 53
Jan 16 19:54:38 ad named[11993]: listening on IPv4 interface lo, 127.0.0.1#53
Jan 16 19:54:38 ad named[11993]: listening on IPv4 interface eth0, 194.153.231.2#53
Jan 16 19:54:38 ad named[11993]: listening on IPv4 interface docker0, 172.17.42.1#53
Jan 16 19:54:38 ad named[11993]: generating session key for dynamic DNS
Jan 16 19:54:38 ad named[11993]: sizing zone task pool based on 1 zones
Jan 16 19:54:38 ad named[11993]: Loading ‘samba4.zone’ using driver dlopen
Jan 16 19:54:38 ad named[11993]: samba_dlz: started for DN DC=datec,DC=ro
Jan 16 19:54:38 ad named[11993]: samba_dlz: starting configure
Jan 16 19:54:38 ad named[11993]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=DomainDnsZones,DC=datec,DC=ro’
Jan 16 19:54:38 ad named[11993]: samba_dlz: configured writeable zone ‘datec.ro’
Jan 16 19:54:38 ad named[11993]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=ForestDnsZones,DC=datec,DC=ro’
Jan 16 19:54:38 ad named[11993]: zone _msdcs.datec.ro/NONE: has no NS records
Jan 16 19:54:38 ad named[11993]: samba_dlz: Failed to configure zone ‘_msdcs.datec.ro’
Jan 16 19:54:38 ad named[11993]: samba_dlz: shutting down
Jan 16 19:54:38 ad named[11993]: loading configuration: bad zone
Jan 16 19:54:38 ad named[11993]: exiting (due to fatal error)
Jan 16 19:55:01 ad /USR/SBIN/CRON[12026]: (root) CMD (if [ -x /usr/bin/mrtg ] && [ -r /etc/mrtg.cfg ] && [ -d “$(grep ‘^[[:space:]][^#][[:space:]]*WorkDir’ /etc/mrtg.cfg | awk ‘{ print $NF }’)” ]; then mkdir -p /var/log/mrtg ; env LANG=C /usr/bin/mrtg /etc/mrtg.cfg 2>&1 | tee -a /var/log/mrtg/mrtg.log ; fi)
Jan 16 19:55:01 ad /USR/SBIN/CRON[12028]: (root) CMD (/usr/sbin/jitter 60 /usr/share/univention-samba4/scripts/sysvol-sync.sh >>/var/log/univention/sysvol-sync.log 2>&1)
Jan 16 19:55:38 ad named[12070]: starting BIND 9.8.4-rpz2+rl005.12-P1 -c /etc/bind/named.conf.samba4 -f -d 0
Jan 16 19:55:38 ad named[12070]: built with ‘–prefix=/usr’ ‘–mandir=/usr/share/man’ ‘–infodir=/usr/share/info’ ‘–sysconfdir=/etc/bind’ ‘–localstatedir=/var’ ‘–enable-threads’ ‘–enable-largefile’ ‘–with-libtool’ ‘–enable-shared’ ‘–enable-static’ ‘–with-openssl=/usr’ ‘–with-gssapi=/usr’ ‘–with-gnu-ld’ ‘–with-geoip=/usr’ ‘–enable-ipv6’ ‘–with-dlz-dlopen’ ‘CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2’
Jan 16 19:55:38 ad named[12070]: ----------------------------------------------------
Jan 16 19:55:38 ad named[12070]: BIND 9 is maintained by Internet Systems Consortium,
Jan 16 19:55:38 ad named[12070]: Inc. (ISC), a non-profit 501©(3) public-benefit
Jan 16 19:55:38 ad named[12070]: corporation. Support and training for BIND 9 are
Jan 16 19:55:38 ad named[12070]: available at isc.org/support
Jan 16 19:55:38 ad named[12070]: ----------------------------------------------------
Jan 16 19:55:38 ad named[12070]: adjusted limit on open files from 4096 to 1048576
Jan 16 19:55:38 ad named[12070]: found 2 CPUs, using 2 worker threads
Jan 16 19:55:38 ad named[12070]: using up to 4096 sockets
Jan 16 19:55:38 ad named[12070]: loading configuration from ‘/etc/bind/named.conf.samba4’
Jan 16 19:55:38 ad named[12070]: reading built-in trusted keys from file ‘/etc/bind/bind.keys’
Jan 16 19:55:38 ad named[12070]: using default UDP/IPv4 port range: [1024, 65535]
Jan 16 19:55:38 ad named[12070]: using default UDP/IPv6 port range: [1024, 65535]
Jan 16 19:55:38 ad named[12070]: listening on IPv6 interfaces, port 53
Jan 16 19:55:38 ad named[12070]: listening on IPv4 interface lo, 127.0.0.1#53
Jan 16 19:55:38 ad named[12070]: listening on IPv4 interface eth0, 194.153.231.2#53
Jan 16 19:55:38 ad named[12070]: listening on IPv4 interface docker0, 172.17.42.1#53
Jan 16 19:55:38 ad named[12070]: generating session key for dynamic DNS
Jan 16 19:55:38 ad named[12070]: sizing zone task pool based on 1 zones
Jan 16 19:55:38 ad named[12070]: Loading ‘samba4.zone’ using driver dlopen
Jan 16 19:55:38 ad named[12070]: samba_dlz: started for DN DC=datec,DC=ro
Jan 16 19:55:38 ad named[12070]: samba_dlz: starting configure
Jan 16 19:55:38 ad named[12070]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=DomainDnsZones,DC=datec,DC=ro’
Jan 16 19:55:38 ad named[12070]: samba_dlz: configured writeable zone ‘datec.ro’
Jan 16 19:55:38 ad named[12070]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=ForestDnsZones,DC=datec,DC=ro’
Jan 16 19:55:38 ad named[12070]: zone _msdcs.datec.ro/NONE: has no NS records
Jan 16 19:55:38 ad named[12070]: samba_dlz: Failed to configure zone ‘_msdcs.datec.ro’
Jan 16 19:55:38 ad named[12070]: loading configuration: bad zone
Jan 16 19:55:38 ad named[12070]: exiting (due to fatal error)
Jan 16 19:55:38 ad named[12070]: samba_dlz: shutting down
Jan 16 19:56:38 ad named[12140]: starting BIND 9.8.4-rpz2+rl005.12-P1 -c /etc/bind/named.conf.samba4 -f -d 0
Jan 16 19:56:38 ad named[12140]: built with ‘–prefix=/usr’ ‘–mandir=/usr/share/man’ ‘–infodir=/usr/share/info’ ‘–sysconfdir=/etc/bind’ ‘–localstatedir=/var’ ‘–enable-threads’ ‘–enable-largefile’ ‘–with-libtool’ ‘–enable-shared’ ‘–enable-static’ ‘–with-openssl=/usr’ ‘–with-gssapi=/usr’ ‘–with-gnu-ld’ ‘–with-geoip=/usr’ ‘–enable-ipv6’ ‘–with-dlz-dlopen’ ‘CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2’
Jan 16 19:56:38 ad named[12140]: ----------------------------------------------------
Jan 16 19:56:38 ad named[12140]: BIND 9 is maintained by Internet Systems Consortium,
Jan 16 19:56:38 ad named[12140]: Inc. (ISC), a non-profit 501©(3) public-benefit
Jan 16 19:56:38 ad named[12140]: corporation. Support and training for BIND 9 are
Jan 16 19:56:38 ad named[12140]: available at isc.org/support
Jan 16 19:56:38 ad named[12140]: ----------------------------------------------------
Jan 16 19:56:38 ad named[12140]: adjusted limit on open files from 4096 to 1048576
Jan 16 19:56:38 ad named[12140]: found 2 CPUs, using 2 worker threads
Jan 16 19:56:38 ad named[12140]: using up to 4096 sockets
Jan 16 19:56:38 ad named[12140]: loading configuration from ‘/etc/bind/named.conf.samba4’
Jan 16 19:56:38 ad named[12140]: reading built-in trusted keys from file ‘/etc/bind/bind.keys’
Jan 16 19:56:38 ad named[12140]: using default UDP/IPv4 port range: [1024, 65535]
Jan 16 19:56:38 ad named[12140]: using default UDP/IPv6 port range: [1024, 65535]
Jan 16 19:56:38 ad named[12140]: listening on IPv6 interfaces, port 53
Jan 16 19:56:38 ad named[12140]: listening on IPv4 interface lo, 127.0.0.1#53
Jan 16 19:56:38 ad named[12140]: listening on IPv4 interface eth0, 194.153.231.2#53
Jan 16 19:56:38 ad named[12140]: listening on IPv4 interface docker0, 172.17.42.1#53
Jan 16 19:56:38 ad named[12140]: generating session key for dynamic DNS
Jan 16 19:56:38 ad named[12140]: sizing zone task pool based on 1 zones
Jan 16 19:56:38 ad named[12140]: Loading ‘samba4.zone’ using driver dlopen
Jan 16 19:56:39 ad named[12140]: samba_dlz: started for DN DC=datec,DC=ro
Jan 16 19:56:39 ad named[12140]: samba_dlz: starting configure
Jan 16 19:56:39 ad named[12140]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=DomainDnsZones,DC=datec,DC=ro’
Jan 16 19:56:39 ad named[12140]: samba_dlz: configured writeable zone ‘datec.ro’
Jan 16 19:56:39 ad named[12140]: samba_dlz: trying partition ‘CN=MicrosoftDNS,DC=ForestDnsZones,DC=datec,DC=ro’
Jan 16 19:56:39 ad named[12140]: zone _msdcs.datec.ro/NONE: has no NS records
Jan 16 19:56:39 ad named[12140]: samba_dlz: Failed to configure zone ‘_msdcs.datec.ro’
Jan 16 19:56:39 ad named[12140]: loading configuration: bad zone
Jan 16 19:56:39 ad named[12140]: exiting (due to fatal error)
Jan 16 19:56:39 ad named[12140]: samba_dlz: shutting down

thorp-hansen · January 18, 2017, 9:47am

Can you check here: http://sdb.univention.de/content/20/254/en/bind-zone-transfer-failed.html - further down the article, there are also missing NS records mentioned.

lebernd · February 2, 2017, 8:13pm

Hi,

I may have a similar problem after a system reboot today.
log written from bottom to top:

2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: shutting down 2017-02-02 21:05:54 Critical (2) NAMED : exiting (due to fatal error) 2017-02-02 21:05:54 Critical (2) NAMED : loading configuration: bad zone 2017-02-02 21:05:54 Error (3) NAMED : samba_dlz: Failed to configure zone '_msdcs.domain.test' 2017-02-02 21:05:54 Error (3) NAMED : zone _msdcs.domain.test/NONE: has no NS records 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: trying partition 'CN=MicrosoftDNS,DC=ForestDnsZones,DC=domain,DC=test' 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: configured writeable zone 'domain.local' 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: trying partition 'CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=test' 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: configured writeable zone 'domain.test' 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: trying partition 'CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=test' 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: configured writeable zone 'xy.168.192.in-addr.arpa' 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: trying partition 'CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=test' 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: configured writeable zone 'xx.168.192.in-addr.arpa' 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: trying partition 'CN=MicrosoftDNS,DC=DomainDnsZones,DC=domain,DC=test' 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: starting configure 2017-02-02 21:05:54 Informational (6) NAMED : samba_dlz: started for DN DC=domain,DC=test 2017-02-02 21:05:54 Informational (6) NAMED : Loading 'samba4.zone' using driver dlopen 2017-02-02 21:05:54 Informational (6) NAMED : sizing zone task pool based on 1 zones 2017-02-02 21:05:54 Informational (6) NAMED : generating session key for dynamic DNS 2017-02-02 21:05:54 Informational (6) NAMED : listening on IPv4 interface docker0, 172.17.42.1#53 2017-02-02 21:05:54 Informational (6) NAMED : listening on IPv4 interface eth0, 192.168.xx.z#53 2017-02-02 21:05:54 Informational (6) NAMED : listening on IPv4 interface lo, 127.0.0.1#53 2017-02-02 21:05:54 Informational (6) NAMED : listening on IPv6 interfaces, port 53 2017-02-02 21:05:54 Informational (6) NAMED : using default UDP/IPv6 port range: [1024, 65535] 2017-02-02 21:05:54 Informational (6) NAMED : using default UDP/IPv4 port range: [1024, 65535] 2017-02-02 21:05:54 Informational (6) NAMED : reading built-in trusted keys from file '/etc/bind/bind.keys' 2017-02-02 21:05:54 Informational (6) NAMED : loading configuration from '/etc/bind/named.conf.samba4' 2017-02-02 21:05:54 Informational (6) NAMED : using up to 4096 sockets 2017-02-02 21:05:54 Informational (6) NAMED : found 2 CPUs, using 2 worker threads 2017-02-02 21:05:54 Notification (5) NAMED : adjusted limit on open files from 4096 to 1048576 2017-02-02 21:05:54 Notification (5) NAMED : ---------------------------------------------------- 2017-02-02 21:05:54 Notification (5) NAMED : available at https://www.isc.org/support 2017-02-02 21:05:54 Notification (5) NAMED : corporation. Support and training for BIND 9 are 2017-02-02 21:05:54 Notification (5) NAMED : Inc. (ISC), a non-profit 501(c)(3) public-benefit 2017-02-02 21:05:54 Notification (5) NAMED : BIND 9 is maintained by Internet Systems Consortium, 2017-02-02 21:05:54 Notification (5) NAMED : ---------------------------------------------------- 2017-02-02 21:05:54 Notification (5) NAMED : built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' '--with-geoip=/usr' '--enable-ipv6' '--with-dlz-dlopen' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2' 2017-02-02 21:05:54 Notification (5) NAMED : starting BIND 9.8.4-rpz2+rl005.12-P1 -c /etc/bind/named.conf.samba4 -f -d 0

The linked script in sdb won’t give any output as far as I see.

greif · February 16, 2017, 11:26am

Hello all,

Seems the DLZ backend of Samba returns something that can’t be interpreted as a valid zone. The ‘samba4.zone’, located in /etc/bind/named.conf.samba4, calls dlz_bind9.so from the Samba distribution. Fortunately, the module provides a means to increase the log level, just for this module. Log levels are described in diablotin.com/librairie/netw … h12_01.htm. I would first set

ucr set dns/dlz/debug/level='3'

and start bind again. Let’s see if it is telling us what is wrong with that zone. (Log size can increase dramatically, so don’t forget to reset the level to 0 afterwards.)

If this doesn’t yield anything useful, we should approach from the ‘other side’, check what Samba ‘knows’ about the zone in question.

Regards,
Frank Greif.