Joined new S4 to existing 2k3 AD with MS DNS servers. The internal DNS server replicated 2 identical instances of the same domain only on the S4 DNS internal DNS server. Using samba version 4.1.0pre1-GIT-df48092
Created attachment 7936 [details] DNS pic
I actually think this is a bug with the location of the DNS database, not with the DNS server. I think Win2k3 creates the DNS partition in a different location than Win2k8, and we're hardcoding the Win2k8 location right now.
I am having problems migrating away from the internal dns server. I have 2 win2k3 servers that I would like to make go away someday. My DC2 server is currently providing pdc, dhcp and dns. DC0 will be the final replacement. Sep 3 11:36:19 dc0 named[4401]: starting BIND 9.8.2rc1-RedHat-9.8.2-0.17.rc1.el6.3 -u named Sep 3 11:36:19 dc0 named[4401]: built with '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--with-libtool' '--localstatedir=/var' '--enable-threads' '--enable-ipv6' '--with-pic' '--disable-static' '--disable-openssl-version-check' '--with-dlz-ldap=yes' '--with-dlz-postgres=yes' '--with-dlz-mysql=yes' '--with-dlz-filesystem=yes' '--with-gssapi=yes' '--disable-isc-spnego' '--with-docbook-xsl=/usr/share/sgml/docbook/xsl-stylesheets' '--enable-fixed-rrset' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'target_alias=x86_64-redhat-linux-gnu' 'CFLAGS= -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' 'CPPFLAGS= -DDIG_SIGCHASE' Sep 3 11:36:19 dc0 named[4401]: ---------------------------------------------------- Sep 3 11:36:19 dc0 named[4401]: BIND 9 is maintained by Internet Systems Consortium, Sep 3 11:36:19 dc0 named[4401]: Inc. (ISC), a non-profit 501(c)(3) public-benefit Sep 3 11:36:19 dc0 named[4401]: corporation. Support and training for BIND 9 are Sep 3 11:36:19 dc0 named[4401]: available at https://www.isc.org/support Sep 3 11:36:19 dc0 named[4401]: ---------------------------------------------------- Sep 3 11:36:19 dc0 named[4401]: adjusted limit on open files from 4096 to 1048576 Sep 3 11:36:19 dc0 named[4401]: found 1 CPU, using 1 worker thread Sep 3 11:36:19 dc0 named[4401]: using up to 4096 sockets Sep 3 11:36:19 dc0 named[4401]: loading configuration from '/etc/named.conf' Sep 3 11:36:19 dc0 named[4401]: reading built-in trusted keys from file '/etc/named.iscdlv.key' Sep 3 11:36:19 dc0 named[4401]: using default UDP/IPv4 port range: [1024, 65535] Sep 3 11:36:19 dc0 named[4401]: using default UDP/IPv6 port range: [1024, 65535] Sep 3 11:36:19 dc0 named[4401]: listening on IPv6 interface lo, ::1#53 Sep 3 11:36:19 dc0 named[4401]: generating session key for dynamic DNS Sep 3 11:36:19 dc0 named[4401]: sizing zone task pool based on 1 zones Sep 3 11:36:19 dc0 named[4401]: Loading 'AD DNS Zone' using driver dlopen Sep 3 11:36:20 dc0 named[4401]: samba_dlz: started for DN DC=taylortelephone,DC=com Sep 3 11:36:20 dc0 named[4401]: samba_dlz: starting configure Sep 3 11:36:20 dc0 named[4401]: samba_dlz: configured writeable zone 'example.lan' Sep 3 11:36:20 dc0 named[4401]: samba_dlz: configured writeable zone '198.89.70.in-addr.arpa' Sep 3 11:36:20 dc0 named[4401]: samba_dlz: configured writeable zone '173.168.192.in-addr.arpa' Sep 3 11:36:20 dc0 named[4401]: samba_dlz: configured writeable zone '183.168.192.in-addr.arpa' Sep 3 11:36:20 dc0 named[4401]: samba_dlz: configured writeable zone '170.168.192.in-addr.arpa' Sep 3 11:36:20 dc0 named[4401]: samba_dlz: configured writeable zone 'taylortelephone.com' Sep 3 11:36:20 dc0 named[4401]: samba_dlz: configured writeable zone 'taylordatacom.com' Sep 3 11:36:20 dc0 named[4401]: samba_dlz: configured writeable zone '_msdcs.taylortelephone.com' Sep 3 11:36:20 dc0 named[4401]: samba_dlz: Failed to configure zone 'taylortelephone.com' Sep 3 11:36:20 dc0 named[4401]: loading configuration: already exists Sep 3 11:36:20 dc0 named[4401]: exiting (due to fatal error)
Upgraded domain to win2kr2. Removed all DC's except new 2k8r2 server. Add samba 4.0.9 as member server and problem still exists. Upgraded to samba-master same issue. This problem also prevents you from changing the DNS backend from internal to bind. This also prevents you from using bind on a new provision.