☰

Samba PDC 内部 DNS 转发器

tag-icon • tag-icon networking samba dns
Samba PDC 内部 DNS 转发器

我已经使用以下指南设置了 Samba PDC： https://wiki.samba.org/index.php/Setup_a_Samba_Active_Directory_Domain_Controller

我选择使用内部 Samba DNS 服务器，并指定 DNS 转发器为 8.8.8.8

当我按照指南测试 DNS 功能时，一切都正常：

user@myhost:~$ host -t SRV _ldap._tcp.ad.mydomain.com.au.
_ldap._tcp.ad.mydomain.com.au has SRV record 0 100 389 myhost.ad.mydomain.com.au.
user@myhost:~$ host -t SRV _kerberos._udp.ad.mydomain.com.au.
_kerberos._udp.ad.mydomain.com.au has SRV record 0 100 88 myhost.ad.mydomain.com.au.
user@myhost:~$ host -t A myhost.ad.mydomain.com.au.
myhost.ad.mydomain.com.au has address 192.168.1.13

当我验证外部主机时，DNS似乎失败：

user@myhost:~$ dig www.google.com

; <<>> DiG 9.9.5-3ubuntu0.5-Ubuntu <<>> www.google.com
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 31751
;; flags: qr rd ad; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 1
;; WARNING: recursion requested but not available

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags:; udp: 4096
;; QUESTION SECTION:
;www.google.com.            IN  A

;; Query time: 0 msec
;; SERVER: 192.168.1.13#53(192.168.1.13)
;; WHEN: Tue Nov 10 06:12:48 AEDT 2015
;; MSG SIZE  rcvd: 43

我如何验证 samba DNS 转发器是否正常工作？

smb.conf 文件：

# Global parameters
[global]
        workgroup = MYDOMAIN
        realm = AD.MYDOMAIN.COM.AU
        netbios name = MYHOST
        server role = active directory domain controller
        dns forwarder = 8.8.8.8,
        server services = rpc, nbt, wrepl, ldap, cldap, kdc, drepl, winbind, ntp_signd, kcc, dnsupdate, dns, smb
        dcerpc endpoint servers = epmapper, wkssvc, rpcecho, samr, netlogon, lsarpc, spoolss, drsuapi, dssetup, unixinfo, browser, eventlog6, backupkey, dnsserver, winreg, srvsvc
        idmap_ldb:use rfc2307 = yes

[netlogon]
        path = /var/lib/samba/sysvol/ad.mydomain.com.au/scripts
        read only = No

[sysvol]
        path = /var/lib/samba/sysvol
        read only = No

答案1

DNS 转发器地址后面的逗号是问题所在。

相关内容