Ben op het moment al een tijdje bezig een linux server op te zetten. Dit duurt bij elkaar langer dan ik verwacht had. Maar goed aan het eind heb je ook wat. Op het moment heb ik LDAP, Samba PDC en DHCP draaien. Het is de bedoeling dat deze een windows 2003 server gaat vervangen. Nu wil ik ook DDNS ondersteunen maar dit krijg ik niet goed voor elkaar. Met linux gaat het goed, maar een windows client registeren bij DNS gaat niet. Ik heb hiervoor al verschillende topic op GoT en artikelen die verder op internet te vinden zijn doorgenomen. Maar ik kom er niet uit, er is iets wat ik over het hoofd zie. Het enige wat ik kan vinden dat het ietst te maken heeft met rrset maar ik zou niet weten wat ik daar mee moet
Ter verduidelijking heb ik de log waar een client zich probeerd aan te melden toegevoegd. Samen met dhcp.conf en named.conf.
/var/log/messages
/etc/dhcpd.conf
/etc/named.conf
/etc/samba/smb.conf
Ter verduidelijking heb ik de log waar een client zich probeerd aan te melden toegevoegd. Samen met dhcp.conf en named.conf.
/var/log/messages
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
| Sep 23 11:14:32 linuxserver dhcpd: DHCPDISCOVER from 00:50:04:37:0b:ce (client1) via eth1 Sep 23 11:14:33 linuxserver dhcpd: DHCPOFFER on 192.168.1.9 to 00:50:04:37:0b:ce (client1) via eth1 Sep 23 11:14:33 linuxserver slapd[3480]: conn=31 fd=17 ACCEPT from IP=127.0.0.1:32810 (IP=0.0.0.0:389) Sep 23 11:14:33 linuxserver slapd[3480]: conn=31 op=0 BIND dn="" method=128 Sep 23 11:14:33 linuxserver slapd[3480]: conn=31 op=0 RESULT tag=97 err=0 text= Sep 23 11:14:33 linuxserver slapd[3480]: conn=31 op=1 SRCH base="dc=test,dc=com" scope=2 deref=0 filter="(&(objectClass=posixAccount)(uid=$user))" Sep 23 11:14:33 linuxserver slapd[3480]: conn=31 op=1 SRCH attr=uid userPassword uidNumber gidNumber cn homeDirectory loginShell gecos description objectClass Sep 23 11:14:33 linuxserver slapd[3480]: <= bdb_equality_candidates: (uid) index_param failed (18) Sep 23 11:14:33 linuxserver slapd[3480]: conn=31 op=1 SEARCH RESULT tag=101 err=0 nentries=0 text= Sep 23 11:14:33 linuxserver slapd[3480]: conn=31 fd=17 closed Sep 23 11:14:33 linuxserver named[3474]: client 192.168.1.1#32773: query: client1.thedomain IN SOA Sep 23 11:14:33 linuxserver named[3474]: client 192.168.1.1#32773: query: thedomain IN NS Sep 23 11:14:33 linuxserver named[3474]: client 192.168.1.1#32773: query: locahost.thedomain IN A Sep 23 11:14:33 linuxserver named[3474]: client 192.168.1.1#32773: query: client1.thedomain IN SOA Sep 23 11:14:33 linuxserver named[3474]: client 192.168.1.1#32773: query: thedomain IN NS Sep 23 11:14:33 linuxserver named[3474]: client 192.168.1.1#32773: query: locahost.thedomain IN A Sep 23 11:14:33 linuxserver dhcpd: if client1.thedomain IN A rrset doesn't exist add client1.thedomain 86400 IN A 192.168.1.9: not a zone. Sep 23 11:14:33 linuxserver dhcpd: Wrote 3 leases to leases file. Sep 23 11:14:33 linuxserver dhcpd: DHCPREQUEST for 192.168.1.9 (192.168.1.1) from 00:50:04:37:0b:ce (client1) via eth1 Sep 23 11:14:33 linuxserver dhcpd: DHCPACK on 192.168.1.9 to 00:50:04:37:0b:ce (client1) via eth1 |
/etc/dhcpd.conf
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
| option ntp-servers 192.168.1.1;
option netbios-dd-server 192.168.1.1;
option netbios-node-type 8;
option domain-name "thedomain";
option domain-name-servers 192.168.1.1;
option time-servers 192.168.1.1;
option netbios-name-servers 192.168.1.1;
ddns-updates on;
ddns-domainname "thedomain";
ddns-update-style ad-hoc;
allow unknown-clients;
default-lease-time 14400;
subnet 192.168.1.0 netmask 255.255.255.0 {
option subnet-mask 255.255.255.0;
range dynamic-bootp 192.168.1.2 192.168.1.10;
allow unknown-clients;
default-lease-time 432000;
max-lease-time 172800;
} |
/etc/named.conf
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
| acl mynet {
any;
};
options {
# The directory statement defines the name server's working directory
directory "/var/lib/named";
dump-file "/var/log/named_dump.db";
statistics-file "/var/log/named.stats";
forward first;
listen-on-v6 { any; };
notify no;
auth-nxdomain yes;
listen-on { mynet; };
include "/etc/named.d/forwarders.conf";
};
# To configure named's logging remove the leading '#' characters of the
# following examples.
logging {
# Log queries to a file limited to a size of 100 MB.
channel query_logging {
file "/var/log/named_querylog"
versions 3 size 100M;
print-time yes; // timestamp log entries
};
category queries {
query_logging;
};
# Or log this kind alternatively to syslog.
channel syslog_queries {
syslog user;
severity info;
};
category queries { syslog_queries; };
# Log general name server errors to syslog.
channel syslog_errors {
syslog user;
severity error;
};
category default { syslog_errors; };
};
zone "." in {
type hint;
file "root.hint";
};
zone "localhost" in {
type master;
file "localhost.zone";
#allow-update { any; };
};
zone "0.0.127.in-addr.arpa" in {
type master;
file "127.0.0.zone";
#allow-update { any; };
};
zone "thedomain" in {
file "master/thedomain";
type master;
#updates toestaan
allow-update { mynet; };
};
include "/etc/named.conf.include"; |
/etc/samba/smb.conf
code:
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
| [global]
workgroup = thedomain
printing = cups
printcap name = cups
printcap cache time = 750
cups options = raw
printer admin = @ntadmin, root, administrator
username map = /etc/samba/smbusers
map to guest = Bad User
log file = /var/log/samba/%m.log
include = /etc/samba/dhcp.conf
logon path = \\%L\profiles\.msprofile
logon script = logon.bat
logon home = \\%L\%U\.9xprofile
logon drive = Z:
#samba server is ook de tijd server
time server = yes
ldap admin dn = cn=admin,dc=test,dc=com
ldap suffix = dc=test,dc=com
security = user
encrypt passwords = yes
passdb backend = ldapsam:ldap://127.0.0.1
add machine script = /sbin/yast /usr/share/YaST2/data/add_machine.ycp %m$
add user script = /usr/local/sbin/smbldap-useradd -m "%u"
ldap delete dn = yes
#delete user script = /usr/local/sbin/smbldap-userdel "%u"
add group script = /usr/local/sbin/smbldap-groupadd -p "%g"
#delete group script = /usr/local/sbin/smbldap-groupdel "%g"
add user to group script = /usr/local/sbin/smbldap-groupmod -m "%u" "%g"
delete user from group script = /usr/local/sbin/smbldap-groupmod -x "%u" "%g"
set primary group script = /usr/local/sbin/smbldap-usermod -g "%g" "%u"
wins support = yes
domain logons = yes
domain master = yes
ldap idmap suffix = ou=Idmap
ldap machine suffix = ou=Computers
local master = yes
netbios name = linuxserver
os level = 65
preferred master = yes
idmap backend = ldap:ldap://127.0.0.1
ldap group suffix = ou=group
ldap user suffix = ou=people
[homes]
comment = Home Directories
valid users = %S
browseable = no
read only = no
inherit acls = yes
[netlogon]
comment = Initalisatie scripts
path = /etc/samba/netlogon
browseable = no
locking = no
share modes = no
[profiles]
comment = Network Profiles Service
path = %H
read only = no
store dos attributes = yes
create mask = 0600
directory mask = 0700
[users]
comment = All users
path = /home
read only = no
inherit acls = yes
veto files = /aquota.user/groups/shares/
[groups]
comment = All groups
path = /home/groups
read only = no
inherit acls = yes
[pdf]
comment = PDF creator
path = /var/tmp
printable = yes
print command = /usr/bin/smbprngenpdf -J '%J' -c %c -s %s -u '%u' -z %z
create mask = 0600
[printers]
comment = All Printers
path = /var/tmp
printable = yes
create mask = 0600
browseable = no
[print$]
comment = Printer Drivers
path = /var/lib/samba/drivers
write list = @ntadmin root
force group = ntadmin
create mask = 0664
directory mask = 0775
[public]
comment = algemene directory
path = /home/public
read only = no
create mask = 0777
directory mask = 0700 |
[ Voor 33% gewijzigd door blax op 23-09-2005 12:53 . Reden: samba config toegevoegd ]