Web lists-archives.com

Re: [Samba] samba internal DNS Zone transfers and notify for slaves?




Hi,

I'm not sure what options are available to you. But regarding my post : yes, this is about authorizing zone transfers in samba's bind DLZ module.

The code shipping in Samba today allows every zone transfers. The contribution I've made is adding an option in smb.conf to make it possible to limit it to selected IP addresses.

See https://gitlab.com/samba-team/samba/merge_requests/169.

It is not merged (yet?), so today you can't use this configuration.


Now whether DLZ is the best option for you - I can't tell. I'm not using Samba, just hacking on it on behalf of my clients.


Best regards,

Julien


Le 26/02/2019 à 22:50, Jeff Sadowski via samba a écrit :
I was wondering if I can implement slave DNS servers for a samba domain.
I would like to setup a slave section on my bind server that gets its
information from my samba-ad dns server?

Or is my only option at the moment to use bind-dlz with bind on my samba-dc?

This page:
https://wiki.samba.org/index.php/DNS_Administration

says zone transfers is unimplemented
but one of the links on there

https://bugzilla.samba.org/show_bug.cgi?id=9634

I see

Julien ROPÉ 2018-11-27 10:04:49 UTC

Hi,

One of my clients asked for a fix on this issue. Seeing the comments on this thread, I implemented the suggested modification : add an option in smb.conf to control the list of authorized clients for a DNS zone transfer.

The implementation has been submitted on github : https://github.com/samba-team/samba/pull/213

This is my first contribution - any comment is appreciated

Regards,
Julien
Julien mentions authorized clients for DNS zone transfers?

Looks like this is in DLZ.
Wondering where to find examples to add authorized clients.
Looks like the Fedora developers are against using DLZ but I see no
alternative to have slave servers.
I want slave servers so that I can implement multiple domains.

--
Julien ROPÉ

Mail : jrope@xxxxxxxxxxxx
Tél : 06.38.99.80.22

--
Message envoyé grâce à OBM, la Communication Libre par Linagora

--
To unsubscribe from this list go to the following URL and read the
instructions:  https://lists.samba.org/mailman/options/samba