Samba 4.0.5 AD DC, Isc-DHCP-Server and DDNS

[JnPson]

I run Samba 4.0.5 as AD DC and I have installed Isc-DHCP-Server that I hopefully can use for dynamically updates to my Samba internal DNS (DDNS).
Last week I had samba 4 alpha18 installed and I could find several howto's on DDNS that helped me solved this issue. But now the paths and much more has changed for Samba and DNS, and as far as I understand BIND9 is not in use. I don't know where I can find named.conf, or if it even exist in samba 4.0.5. This means that all the howto's I followed before is a bit dated.

In dhcpd.conf I've added ddns-update-style interim; but that is not enough, or maybe even wrong update-style. I admin the DNS server with ssh and from an XP machine using Adminpak. Through the mmc I've added the zone in-addr.arpa because I thought that might solve the error.

But now I get repeated errors in syslog that says 'Timed out' for every new IP lease. Their IP is added to the DNS when added to the domain but the isc-dhcp-server cannot update the records.

Apr 18 13:21:12 dc01 dhcpd: Unable to add forward map from pc01.mydomain.lan to 10.0.0.164: timed out

Apr 18 14:22:44 dc01 dhcpd: unable to add reverse map from 164.0.0.10.in-addr.arpa. to pc01.mydomain.lan: timed out

I wonder, how do I get my DHCP-server to update DNS dynamically? And does named.conf exist in Samba 4.0.5

An additional question: How do I start|stop|restart DNS in Samba 4.0.5? Do I have to restart samba4 to restart DNS?

//
JnPson

[Toxic64]

Hi Jpson,

I have the same issue here. I'm working on it but ddns-update-style doesn't work with Samba 4 but It might be corrected in Samba 4 next release

DNS is integrated to samba4 restart your Samba 4 daemon will restart DNS.

I found the problem but don't have a solution ...yet

It seems SAMBA_INTERNAL accepts only secure updates via kerberos from your DHCP.
It seems it's not possible to configure SAMBA_INTERNAL to accept unsecure updates so you have to configure your ISC-DHCP-SERVER to work with Kerberos allowing secure connections to the DNS. I don't know how it's done.

[JnPson]

Hi Toxic64. Thank you for responding.
Is there another dhcp-server I could install maybe that supports kerberos?
I have only heard of isc-dhcp-server.

//JnPson

[Toxic64]

I think you understood me wrong. Isc-dhcp certainly works with Kerberos but has to be configured. I now no other DHCP you can use as a replacement

[JnPson]

Oh sorry. I did misunderstand.
Then it is about finding the right guide/howto for samba 4.0.5. and isc-dhcp-server.

[Toxic64]

I'm still on it.

[JnPson]

Thank you Toxic64.

[Toxic64]

HI . seems to be a pretty known issue or bug no real fix at the moment. probably in next update

[JnPson]

Hi Toxic64 and thanks for helping me.

I did an update and upgrade this moring at work and after that samba4 is not responding as usual. I get a strange result when running testparm and I can't use samba-tool testparm either. Testparm is checking the old smb.conf in /etc/samba/smb.conf, and I can no longer do a version-check on samba with samba -V or samba4 -V.

But the domain controller seems to be running and I can create accounts using Active Directory Users and Computer-snap-in.

I should say that I installed samba-tools twice. First I thought I just missed some lines of error when it didn't give the expected result. I thought it was because I didn't pay attention so I installed it again and noticed the same error with samba-tool testparm

The result using only testparm:

root@dc01:/# testparm
Load smb config files from /etc/samba/smb.conf
rlimit_max: increasing rlimit_max (1024) to minimum Windows limit (16384)
Processing section "[printers]"
Processing section "[print$]"
Loaded services file OK.
ERROR: lock directory /var/run/samba does not exist
ERROR: pid directory /var/run/samba does not exist
Server role: ROLE_STANDALONE
Press enter to see a dump of your service definitions

[global]
    server string = %h server (Samba, Ubuntu)
    map to guest = Bad User
    obey pam restrictions = Yes
    pam password change = Yes
    passwd program = /usr/bin/passwd %u
    passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
    unix password sync = Yes
    syslog = 0
    log file = /var/log/samba/log.%m
    max log size = 1000
    dns proxy = No
    usershare allow guests = Yes
    panic action = /usr/share/samba/panic-action %d
    idmap config * : backend = tdb

[printers]
    comment = All Printers
    path = /var/spool/samba
    create mask = 0700
    printable = Yes
    print ok = Yes
    browseable = No

[print$]
    comment = Printer Drivers
    path = /var/lib/samba/printers

The testresult is not how I configured it. I should see /User, /Profiles and /Files. And the domain-info is missing.

This is the result using samba-tool testparm

root@dc01:/# samba-tool testparm
Traceback (most recent call last):
  File "/usr/bin/samba-tool", line 26, in <module>
    from samba.netcmd.main import cmd_sambatool
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/main.py", line 23, in <module>
    from samba.netcmd.dbcheck import cmd_dbcheck
  File "/usr/lib/python2.7/dist-packages/samba/netcmd/dbcheck.py", line 23, in <module>
    from samba.auth import system_session
ImportError: libauth4.so: cannot open shared object file: No such file or directory

This is the result using Samba -V and Samba4 -V

root@dc01:/etc/samba# Samba -V
No command 'Samba' found, did you mean:
 Command 'samba' from package 'samba4' (universe)
Samba: command not found
root@dc01:/etc/samba# samba4 -V
No command 'samba4' found, did you mean:
 Command 'samba' from package 'samba4' (universe)
samba4: command not found
root@dc01:/etc/samba# Samba4 -V
Samba4: command not found

Now I'm confused.

//JnPson

[Toxic64]

Wrong move my friend. you installed samba4 from git if I recall correctly then you should have updated from git too...

Ubuntu repos do not hold samba4.0.5 updates...only samba 4.0.0 Alpha 18 if I recall correctly.

https://wiki.samba.org/index.php/Bui...source_version