Web lists-archives.com

Re: [Samba] Switching from Internal DNS to Bind9_DLZ




On Tue, 2 Jan 2018 13:20:40 -0500
lingpanda101 via samba <samba@xxxxxxxxxxxxxxx> wrote:

> On 1/2/2018 12:25 PM, Rowland Penny wrote:
> > On Tue, 2 Jan 2018 12:09:33 -0500
> > lingpanda101 via samba <samba@xxxxxxxxxxxxxxx> wrote:
> >
> >> Hello,
> >>
> >>       Installing bind9 on my Ubuntu 14.04 via. apt-get displays the
> >> following options.
> >>
> >>    #named -V
> >> BIND 9.9.5-3ubuntu0.16-Ubuntu (Extended Support Version)
> >> <id:f9b8a50e> built by make with '--prefix=/usr'
> >> '--mandir=/usr/share/man' '--infodir=/usr/share/info'
> >> '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads'
> >> '--enable-largefile' '--with-libtool' '--enable-shared'
> >> '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr'
> >> '--with-gnu-ld' '--with-geoip=/usr' '--with-atf=no' '--enable-ipv6'
> >> '--enable-rrl' '--enable-filter-aaaa' 'CFLAGS=-fno-strict-aliasing
> >> -DDIG_SIGCHASE -O2'
> >>
> >> The Samba wiki states I should see;
> >>
> >> named -V
> >> BIND 9.x.y built with ... '--with-dlopen=yes'
> >> '--with-gssapi=yes' ...
> >>
> >> As you can see I have;
> >>
> >> '--with-gssapi=/usr' and *NO* '--with-dlopen=yes'
> >>
> >> Is it possible to enable '--with-dlopen=yes' without compiling?
> >> Thanks.
> >>
> >>
> >>
> > No, but funnily enough, you won't be able enable it by compiling it
> > either ;-)
> >
> > It is now built into the standard compiled Bind9, so I suppose the
> > real answer to your question is that you can use the standard Bind9
> > package on 14.04 with Samba.
> >
> > I will update the wiki page.
> >
> > Rowland
> 
> On second read through.  I assume the only contents in named.conf is
> 
> dlz "AD DNS Zone" {
>      # For BIND 9.8
>      # database "dlopen /usr/local/samba/lib/bind9/dlz_bind9.so";
> 
>      # For BIND 9.9
>       # database "dlopen /usr/local/samba/lib/bind9/dlz_bind9_9.so";
> 
>      # For BIND 9.10
>      # database "dlopen /usr/local/samba/lib/bind9/dlz_bind9_10.so";
> 
>      # For BIND 9.11
>      # database "dlopen /usr/local/samba/lib/bind9/dlz_bind9_11.so";
> };
> 
> 
> It's safe to create this file myself then I would suppose?
> 

if you didn't have Bind9 installed when you compiled Samba, you will
not have the file. You will have a file called 'samba_upgradedns'
though and guess what you use this for ;-)

Rowland

-- 
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba