samba4+bind_dlz

[mortifix]

всем привет.

samba4+bind_dlz (samba-4.1.14, bind-9.

Вроде, как настроено, на компах статика, компы вводятся вдомен, но при этом не добавляются записи в зону DNS.
В логах вообще нет никакой инфрмации о введении компьютеров, т.е. в /var/log/messages /var/log/samba/log.samba - пусто.

Если в этом вопросе есть у кого опыт, помогите плз..

вот конфиги и доп. информация:

/etc/resolv.conf:

Код: [Выделить]

search icetest.test.local
nameserver 10.64.254.186/etc/hosts:

Код: [Выделить]

127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
10.64.254.186 dc.icetest.test.local dc/etc/sysconfig/network:

Код: [Выделить]

NETWORKING=yes
HOSTNAME=dc.icetest.test.local
NOZEROCONF=yesсеть:

Код: [Выделить]

DEVICE=eth2
TYPE=Ethernet
ONBOOT=yes
NM_CONTROLLED=no
BOOTPROTO=static
IPADDR=10.64.254.186
NETMASK=255.255.255.0
NETWORK=10.64.254.0
BROADCAST=10.64.254.255
GATEWAY=10.64.254.2
DNS1=10.64.254.186
#HWADDR=fe:54:00:82:be:db
PEERDNS=no
DOMAIN=icetest.test.local
named.conf

(Нажмите, чтобы показать/скрыть)

//
// named.conf for Red Hat caching-nameserver
//

acl "trusted" {
        127.0.0.1;
        localhost;
        10.64.254.0/24;
        };


options {
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        zone-statistics yes;
        listen-on { 127.0.0.1; 10.64.254.186; };
        allow-transfer { trusted; };
        allow-query { trusted; };
        allow-recursion { trusted; };

        allow-update { trusted; };

        forwarders { 10.64.254.186; };

        tkey-gssapi-keytab "/etc/dns.keytab";

};

controls {
        inet 127.0.0.1  allow { localhost; };
};

zone "." IN {
        type hint;
        file "named.ca";
};

zone "localdomain" IN {
        type master;
        file "localdomain.zone";
        allow-update { none; };
};

zone "localhost" IN {
        type master;
        file "localhost.zone";
        allow-update { none; };
};
zone "0.0.127.in-addr.arpa" IN {
        type master;
        file "named.local";
        allow-update { none; };
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
        type master;
        file "named.ip6.local";
        allow-update { none; };
};

zone "255.in-addr.arpa" IN {
        type master;
        file "named.broadcast";
        allow-update { none; };
};

zone "0.in-addr.arpa" IN {
        type master;
        file "named.zero";
        allow-update { none; };
};

dlz "AD DNS Zone" {
    database "dlopen /usr/lib64/samba/bind9/dlz_bind9.so";
};

#include "/etc/named.rfc1912.zones";
#include "/etc/named.root.key";
##include "/etc/named.test.zones";

#include "/etc/rndc.key";

smb.conf:

(Нажмите, чтобы показать/скрыть)

# Global parameters
[global]
        workgroup = ICETEST
        realm = ICETEST.TEST.LOCAL
        netbios name = DC
        server role = active directory domain controller
        wins server = 127.0.0.1
        wins support = Yes
        server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate, smb
        dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, winreg, srvsvc
        idmap_ldb:use rfc2307 = yes

        allow dns updates = signed

[netlogon]
        path = /var/lib/samba/sysvol/icetest.test.local/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

ntp.conf:

(Нажмите, чтобы показать/скрыть)

# Local clock (this is not the localhost address!)
server 127.127.1.0
fudge  127.127.1.0 stratum 10

driftfile       /var/lib/ntp/ntp.drift
logfile         /var/log/ntp
ntpsigndsocket  /var/lib/samba/ntp_signd/


# Access control
# Default restriction: Only allow querying time (incl. ms-sntp) from this machine
##restrict default kod nomodify notrap nopeer mssntp

# Allow everything from localhost
restrict 127.0.0.1
restrict 10.64.254.0 mask 255.255.255.0 nomodify notrap

/etc/krb5.conf:

Код: [Выделить]

[libdefaults]
        default_realm = ICETEST.TEST.LOCAL
        dns_lookup_realm = false
        dns_lookup_kdc = true
# kinit administrator@ICETEST.TEST.LOCAL:

Код: [Выделить]

Password for administrator@ICETEST.TEST.LOCAL:
Warning: Your password will expire in 41 days on Tue Jan 27 08:33:19 2015klist:

Код: [Выделить]

Ticket cache: FILE:/tmp/krb5cc_0
Default principal: administrator@ICETEST.TEST.LOCAL

# samba-tool dns serverinfo dc:

(Нажмите, чтобы показать/скрыть)

  dwVersion                   : 0xece0205
  fBootMethod                 : DNS_BOOT_METHOD_DIRECTORY
  fAdminConfigured            : FALSE
  fAllowUpdate                : TRUE
  fDsAvailable                : TRUE
  pszServerName               : DC.icetest.test.local
  pszDsContainer              : CN=MicrosoftDNS,DC=DomainDnsZones,DC=icetest,DC=test,DC=local
  aipServerAddrs              : ['10.64.254.186 (53)']
  aipListenAddrs              : ['10.64.254.186 (53)']
  aipForwarders               : []
  dwLogLevel                  : 0
  dwDebugLevel                : 0
  dwForwardTimeout            : 3
  dwRpcPrototol               : 0x5
  dwNameCheckFlag             : DNS_ALLOW_MULTIBYTE_NAMES
  cAddressAnswerLimit         : 0
  dwRecursionRetry            : 3
  dwRecursionTimeout          : 8
  dwMaxCacheTtl               : 86400
  dwDsPollingInterval         : 180
  dwScavengingInterval        : 0
  dwDefaultRefreshInterval    : 168
  dwDefaultNoRefreshInterval  : 168
  fAutoReverseZones           : FALSE
  fAutoCacheUpdate            : FALSE
  fRecurseAfterForwarding     : FALSE
  fForwardDelegations         : TRUE
  fNoRecursion                : FALSE
  fSecureResponses            : FALSE
  fRoundRobin                 : TRUE
  fLocalNetPriority           : FALSE
  fBindSecondaries            : FALSE
  fWriteAuthorityNs           : FALSE
  fStrictFileParsing          : FALSE
  fLooseWildcarding           : FALSE
  fDefaultAgingState          : FALSE
  dwRpcStructureVersion       : 0x2
  aipLogFilter                : []
  pwszLogFilePath             : None
  pszDomainName               : icetest.test.local
  pszForestName               : icetest.test.local
  pszDomainDirectoryPartition : DC=DomainDnsZones,DC=icetest,DC=test,DC=local
  pszForestDirectoryPartition : DC=ForestDnsZones,DC=icetest,DC=test,DC=local
  dwLocalNetPriorityNetMask   : 0xff
  dwLastScavengeTime          : 0
  dwEventLogLevel             : 4
  dwLogFileMaxSize            : 0
  dwDsForestVersion           : 2
  dwDsDomainVersion           : 2
  dwDsDsaVersion              : 4

# samba_dnsupdate --verbose

(Нажмите, чтобы показать/скрыть)

IPs: ['10.64.254.186']
Looking for DNS entry A dc.icetest.test.local 10.64.254.186 as dc.icetest.test.local.
Looking for DNS entry A icetest.test.local 10.64.254.186 as icetest.test.local.
Looking for DNS entry SRV _ldap._tcp.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.icetest.test.local dc.icetest.test.local 389
Looking for DNS entry SRV _ldap._tcp.dc._msdcs.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.dc._msdcs.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.dc._msdcs.icetest.test.local dc.icetest.test.local 389
Looking for DNS entry SRV _ldap._tcp.4d0dbc3a-c883-4806-97c9-c465de685ea2.domains._msdcs.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.4d0dbc3a-c883-4806-97c9-c465de685ea2.domains._msdcs.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.4d0dbc3a-c883-4806-97c9-c465de685ea2.domains._msdcs.icetest.test.local dc.icetest.test.local 389
Looking for DNS entry SRV _kerberos._tcp.icetest.test.local dc.icetest.test.local 88 as _kerberos._tcp.icetest.test.local.
Checking 0 100 88 dc.icetest.test.local. against SRV _kerberos._tcp.icetest.test.local dc.icetest.test.local 88
Looking for DNS entry SRV _kerberos._udp.icetest.test.local dc.icetest.test.local 88 as _kerberos._udp.icetest.test.local.
Checking 0 100 88 dc.icetest.test.local. against SRV _kerberos._udp.icetest.test.local dc.icetest.test.local 88
Looking for DNS entry SRV _kerberos._tcp.dc._msdcs.icetest.test.local dc.icetest.test.local 88 as _kerberos._tcp.dc._msdcs.icetest.test.local.
Checking 0 100 88 dc.icetest.test.local. against SRV _kerberos._tcp.dc._msdcs.icetest.test.local dc.icetest.test.local 88
Looking for DNS entry SRV _kpasswd._tcp.icetest.test.local dc.icetest.test.local 464 as _kpasswd._tcp.icetest.test.local.
Checking 0 100 464 dc.icetest.test.local. against SRV _kpasswd._tcp.icetest.test.local dc.icetest.test.local 464
Looking for DNS entry SRV _kpasswd._udp.icetest.test.local dc.icetest.test.local 464 as _kpasswd._udp.icetest.test.local.
Checking 0 100 464 dc.icetest.test.local. against SRV _kpasswd._udp.icetest.test.local dc.icetest.test.local 464
Looking for DNS entry CNAME 510f3695-dc6b-41b2-a0a2-fe7e79bebb86._msdcs.icetest.test.local dc.icetest.test.local as 510f3695-dc6b-41b2-a0a2-fe7e79bebb86._msdcs.icetest.test.local.
Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.Default-First-Site-Name._sites.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.Default-First-Site-Name._sites.icetest.test.local dc.icetest.test.local 389
Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local dc.icetest.test.local 389
Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.icetest.test.local dc.icetest.test.local 88 as _kerberos._tcp.Default-First-Site-Name._sites.icetest.test.local.
Checking 0 100 88 dc.icetest.test.local. against SRV _kerberos._tcp.Default-First-Site-Name._sites.icetest.test.local dc.icetest.test.local 88
Looking for DNS entry SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local dc.icetest.test.local 88 as _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local.
Checking 0 100 88 dc.icetest.test.local. against SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local dc.icetest.test.local 88
Looking for DNS entry SRV _ldap._tcp.pdc._msdcs.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.pdc._msdcs.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.pdc._msdcs.icetest.test.local dc.icetest.test.local 389
Looking for DNS entry A gc._msdcs.icetest.test.local 10.64.254.186 as gc._msdcs.icetest.test.local.
Looking for DNS entry SRV _gc._tcp.icetest.test.local dc.icetest.test.local 3268 as _gc._tcp.icetest.test.local.
Checking 0 100 3268 dc.icetest.test.local. against SRV _gc._tcp.icetest.test.local dc.icetest.test.local 3268
Looking for DNS entry SRV _ldap._tcp.gc._msdcs.icetest.test.local dc.icetest.test.local 3268 as _ldap._tcp.gc._msdcs.icetest.test.local.
Checking 0 100 3268 dc.icetest.test.local. against SRV _ldap._tcp.gc._msdcs.icetest.test.local dc.icetest.test.local 3268
Looking for DNS entry SRV _gc._tcp.Default-First-Site-Name._sites.icetest.test.local dc.icetest.test.local 3268 as _gc._tcp.Default-First-Site-Name._sites.icetest.test.local.
Checking 0 100 3268 dc.icetest.test.local. against SRV _gc._tcp.Default-First-Site-Name._sites.icetest.test.local dc.icetest.test.local 3268
Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.icetest.test.local dc.icetest.test.local 3268 as _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.icetest.test.local.
Checking 0 100 3268 dc.icetest.test.local. against SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.icetest.test.local dc.icetest.test.local 3268
Looking for DNS entry A DomainDnsZones.icetest.test.local 10.64.254.186 as DomainDnsZones.icetest.test.local.
Looking for DNS entry SRV _ldap._tcp.DomainDnsZones.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.DomainDnsZones.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.DomainDnsZones.icetest.test.local dc.icetest.test.local 389
Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.icetest.test.local dc.icetest.test.local 389
Looking for DNS entry A ForestDnsZones.icetest.test.local 10.64.254.186 as ForestDnsZones.icetest.test.local.
Looking for DNS entry SRV _ldap._tcp.ForestDnsZones.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.ForestDnsZones.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.ForestDnsZones.icetest.test.local dc.icetest.test.local 389
Looking for DNS entry SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.icetest.test.local dc.icetest.test.local 389 as _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.icetest.test.local.
Checking 0 100 389 dc.icetest.test.local. against SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.icetest.test.local dc.icetest.test.local 389
No DNS updates needed

# samba_dnsupdate --verbose --all-names

(Нажмите, чтобы показать/скрыть)

IPs: ['10.64.254.186']
Calling nsupdate for A dc.icetest.test.local 10.64.254.186 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
dc.icetest.test.local.   900   IN   A   10.64.254.186

Calling nsupdate for A icetest.test.local 10.64.254.186 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
icetest.test.local.   900   IN   A   10.64.254.186

Calling nsupdate for SRV _ldap._tcp.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.icetest.test.local. 900 IN   SRV   0 100 389 dc.icetest.test.local.

Calling nsupdate for SRV _ldap._tcp.dc._msdcs.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.dc._msdcs.icetest.test.local. 900 IN   SRV 0 100 389 dc.icetest.test.local.

Calling nsupdate for SRV _ldap._tcp.4d0dbc3a-c883-4806-97c9-c465de685ea2.domains._msdcs.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.4d0dbc3a-c883-4806-97c9-c465de685ea2.domains._msdcs.icetest.test.local. 900 IN SRV 0 100 389 dc.icetest.test.local.

Calling nsupdate for SRV _kerberos._tcp.icetest.test.local dc.icetest.test.local 88 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.icetest.test.local. 900 IN SRV   0 100 88 dc.icetest.test.local.

Calling nsupdate for SRV _kerberos._udp.icetest.test.local dc.icetest.test.local 88 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._udp.icetest.test.local. 900 IN SRV   0 100 88 dc.icetest.test.local.

Calling nsupdate for SRV _kerberos._tcp.dc._msdcs.icetest.test.local dc.icetest.test.local 88 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.dc._msdcs.icetest.test.local. 900 IN SRV   0 100 88 dc.icetest.test.local.

Calling nsupdate for SRV _kpasswd._tcp.icetest.test.local dc.icetest.test.local 464 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kpasswd._tcp.icetest.test.local. 900 IN SRV   0 100 464 dc.icetest.test.local.

Calling nsupdate for SRV _kpasswd._udp.icetest.test.local dc.icetest.test.local 464 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kpasswd._udp.icetest.test.local. 900 IN SRV   0 100 464 dc.icetest.test.local.

Calling nsupdate for CNAME 510f3695-dc6b-41b2-a0a2-fe7e79bebb86._msdcs.icetest.test.local dc.icetest.test.local (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
510f3695-dc6b-41b2-a0a2-fe7e79bebb86._msdcs.icetest.test.local.   900 IN CNAME dc.icetest.test.local.

Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.icetest.test.local. 900 IN SRV 0 100 389 dc.icetest.test.local.

Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local.   900 IN SRV 0 100 389 dc.icetest.test.local.

Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.icetest.test.local dc.icetest.test.local 88 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.Default-First-Site-Name._sites.icetest.test.local. 900 IN SRV 0 100 88 dc.icetest.test.local.

Calling nsupdate for SRV _kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local dc.icetest.test.local 88 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_kerberos._tcp.Default-First-Site-Name._sites.dc._msdcs.icetest.test.local. 900   IN SRV 0 100 88 dc.icetest.test.local.

Calling nsupdate for SRV _ldap._tcp.pdc._msdcs.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.pdc._msdcs.icetest.test.local. 900 IN SRV 0 100 389 dc.icetest.test.local.

Calling nsupdate for A gc._msdcs.icetest.test.local 10.64.254.186 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
gc._msdcs.icetest.test.local. 900 IN   A   10.64.254.186

Calling nsupdate for SRV _gc._tcp.icetest.test.local dc.icetest.test.local 3268 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_gc._tcp.icetest.test.local. 900 IN   SRV   0 100 3268 dc.icetest.test.local.

Calling nsupdate for SRV _ldap._tcp.gc._msdcs.icetest.test.local dc.icetest.test.local 3268 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.gc._msdcs.icetest.test.local. 900 IN   SRV 0 100 3268 dc.icetest.test.local.

Calling nsupdate for SRV _gc._tcp.Default-First-Site-Name._sites.icetest.test.local dc.icetest.test.local 3268 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_gc._tcp.Default-First-Site-Name._sites.icetest.test.local. 900   IN SRV 0 100 3268 dc.icetest.test.local.

Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.icetest.test.local dc.icetest.test.local 3268 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.gc._msdcs.icetest.test.local.   900 IN SRV 0 100 3268 dc.icetest.test.local.

Calling nsupdate for A DomainDnsZones.icetest.test.local 10.64.254.186 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
DomainDnsZones.icetest.test.local. 900 IN A   10.64.254.186

Calling nsupdate for SRV _ldap._tcp.DomainDnsZones.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.DomainDnsZones.icetest.test.local. 900 IN SRV 0 100 389 dc.icetest.test.local.

Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.DomainDnsZones.icetest.test.local. 900 IN SRV   0 100 389 dc.icetest.test.local.

Calling nsupdate for A ForestDnsZones.icetest.test.local 10.64.254.186 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
ForestDnsZones.icetest.test.local. 900 IN A   10.64.254.186

Calling nsupdate for SRV _ldap._tcp.ForestDnsZones.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.ForestDnsZones.icetest.test.local. 900 IN SRV 0 100 389 dc.icetest.test.local.

Calling nsupdate for SRV _ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.icetest.test.local dc.icetest.test.local 389 (add)
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags:; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
_ldap._tcp.Default-First-Site-Name._sites.ForestDnsZones.icetest.test.local. 900 IN SRV   0 100 389 dc.icetest.test.local.

лог при старте bina'а:

(Нажмите, чтобы показать/скрыть)

Dec 16 08:54:52 dc named-sdb[1623]: starting BIND 9.8.2rc1-RedHat-9.8.2-0.30.rc1.el6 -u named
Dec 16 08:54:52 dc named-sdb[1623]: built with '--build=x86_64-redhat-linux-gnu' '--host=x86_64-redhat-linux-gnu' '--target=x86_64-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib64' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--with-libtool' '--localstatedir=/var' '--enable-threads' '--enable-ipv6' '--enable-filter-aaaa' '--with-pic' '--disable-static' '--disable-openssl-version-check' '--with-dlopen=yes' '--with-dlz-ldap=yes' '--with-dlz-postgres=yes' '--with-dlz-mysql=yes' '--with-dlz-filesystem=yes' '--with-gssapi=yes' '--disable-isc-spnego' '--with-docbook-xsl=/usr/share/sgml/docbook/xsl-stylesheets' '--enable-fixed-rrset' 'build_alias=x86_64-redhat-linux-gnu' 'host_alias=x86_64-redhat-linux-gnu' 'target_alias=x86_64-redhat-linux-gnu' 'CFLAGS= -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m64 -mtune=generic' 'CPPFLAGS= -DDIG_SIGCHASE'
Dec 16 08:54:52 dc named-sdb[1623]: ----------------------------------------------------
Dec 16 08:54:52 dc named-sdb[1623]: BIND 9 is maintained by Internet Systems Consortium,
Dec 16 08:54:52 dc named-sdb[1623]: Inc. (ISC), a non-profit 501(c)(3) public-benefit
Dec 16 08:54:52 dc named-sdb[1623]: corporation.  Support and training for BIND 9 are
Dec 16 08:54:52 dc named-sdb[1623]: available at https://www.isc.org/support
Dec 16 08:54:52 dc named-sdb[1623]: ----------------------------------------------------
Dec 16 08:54:52 dc named-sdb[1623]: adjusted limit on open files from 4096 to 1048576
Dec 16 08:54:52 dc named-sdb[1623]: found 1 CPU, using 1 worker thread
Dec 16 08:54:52 dc named-sdb[1623]: using up to 4096 sockets
Dec 16 08:54:52 dc named-sdb[1623]: SDB ldap zone database module loaded.
Dec 16 08:54:52 dc named-sdb[1623]: SDB postgreSQL DB zone database module loaded.
Dec 16 08:54:52 dc named-sdb[1623]: SDB sqlite3 DB zone database module loaded.
Dec 16 08:54:52 dc named-sdb[1623]: SDB directory DB zone database module loaded.
Dec 16 08:54:52 dc named-sdb[1623]: loading configuration from '/etc/named.conf'
Dec 16 08:54:52 dc named-sdb[1623]: using default UDP/IPv4 port range: [1024, 65535]
Dec 16 08:54:52 dc named-sdb[1623]: using default UDP/IPv6 port range: [1024, 65535]
Dec 16 08:54:52 dc named-sdb[1623]: listening on IPv4 interface lo, 127.0.0.1#53
Dec 16 08:54:52 dc named-sdb[1623]: listening on IPv4 interface eth2, 10.64.254.186#53
Dec 16 08:54:52 dc named-sdb[1623]: generating session key for dynamic DNS
Dec 16 08:54:52 dc named-sdb[1623]: sizing zone task pool based on 7 zones
Dec 16 08:54:52 dc named-sdb[1623]: Loading 'AD DNS Zone' using driver dlopen
Dec 16 08:54:52 dc named-sdb[1623]: samba_dlz: started for DN DC=icetest,DC=test,DC=local
Dec 16 08:54:52 dc named-sdb[1623]: samba_dlz: starting configure
Dec 16 08:54:52 dc named-sdb[1623]: samba_dlz: configured writeable zone 'icetest.test.local'
Dec 16 08:54:52 dc named-sdb[1623]: samba_dlz: configured writeable zone '_msdcs.icetest.test.local'
Dec 16 08:54:52 dc named-sdb[1623]: set up managed keys zone for view _default, file 'dynamic/managed-keys.bind'
Dec 16 08:54:52 dc named-sdb[1623]: Warning: 'empty-zones-enable/disable-empty-zone' not set: disabling RFC 1918 empty zones
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 127.IN-ADDR.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 254.169.IN-ADDR.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 100.51.198.IN-ADDR.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 113.0.203.IN-ADDR.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: D.F.IP6.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 8.E.F.IP6.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 9.E.F.IP6.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: A.E.F.IP6.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: B.E.F.IP6.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
Dec 16 08:54:52 dc named-sdb[1623]: zone 'version.bind' allows updates by IP address, which is insecure
Dec 16 08:54:52 dc named-sdb[1623]: zone 'hostname.bind' allows updates by IP address, which is insecure
Dec 16 08:54:52 dc named-sdb[1623]: zone 'authors.bind' allows updates by IP address, which is insecure
Dec 16 08:54:52 dc named-sdb[1623]: zone 'id.server' allows updates by IP address, which is insecure
Dec 16 08:54:52 dc named-sdb[1623]: command channel listening on 127.0.0.1#953
Dec 16 08:54:52 dc named-sdb[1623]: zone 0.in-addr.arpa/IN: loaded serial 42
Dec 16 08:54:52 dc named-sdb[1623]: zone 0.0.127.in-addr.arpa/IN: loaded serial 1997022700
Dec 16 08:54:53 dc named-sdb[1623]: zone 255.in-addr.arpa/IN: loaded serial 42
Dec 16 08:54:53 dc named-sdb[1623]: zone 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 1997022700
Dec 16 08:54:53 dc named-sdb[1623]: zone localdomain/IN: loaded serial 42
Dec 16 08:54:53 dc named-sdb[1623]: zone localhost/IN: loaded serial 42
Dec 16 08:54:53 dc named-sdb[1623]: managed-keys-zone ./IN: loaded serial 0
Dec 16 08:54:53 dc named-sdb[1623]: running

Пользователь решил продолжить мысль 16 Декабря 2014, 09:44:01:upd.

если поднять dhcp, то при включении компьютера в логах такая инфа:

Код: [Выделить]

Dec 16 09:15:43 dc named-sdb[1623]: samba_dlz: starting transaction on zone icetest.test.local
Dec 16 09:15:43 dc named-sdb[1623]: client 10.64.254.186#49714: update 'icetest.test.local/IN' denied
Dec 16 09:15:43 dc named-sdb[1623]: samba_dlz: cancelling transaction on zone icetest.test.local
Dec 16 09:15:43 dc dhcpd: Unable to add forward map from 123-PC.icetest.test.local to 10.64.254.201: timed out
Dec 16 09:15:43 dc dhcpd: DHCPREQUEST for 10.64.254.201 from 52:54:00:31:58:a5 (123-PC) via eth2
Dec 16 09:15:43 dc dhcpd: DHCPACK on 10.64.254.201 to 52:54:00:31:58:a5 (123-PC) via eth2
Dec 16 09:15:59 dc dhcpd: DHCPINFORM from 10.64.254.201 via eth2
Dec 16 09:15:59 dc dhcpd: DHCPACK to 10.64.254.201 (52:54:00:31:58:a5) via eth2