sin/samba-mirror
1
0
Fork 0
mirror of https://github.com/samba-team/samba.git synced 2025-01-22 22:04:08 +03:00
Code
samba-mirror/source4/setup/provision.zone

Ignoring revisions in .git-blame-ignore-revs. Click here to bypass and see the normal blame view.

51 lines
1.8 KiB
Dns
Raw Normal View History

r18933: Add helpful emacs marker (This used to be commit 5fd53ea6a3a6d7638a9f542f46623a19143ff81d)
2006-09-26 22:14:15 +00:00
; -*- zone -*-
r10190: Do some very basic input checking when provisioning. (This used to be commit 87f25fe49caa78422582337c5208a331ef5b8c15)
2005-09-12 23:52:25 +00:00
; generated by provision.pl
r6697: fix from Sven (wAmpIre) Velt metze (This used to be commit db2f5619f8114b6454cc2541d80129e1ca5fa1a9)
2005-05-10 08:50:58 +00:00
$ORIGIN ${DNSDOMAIN}.
r2873: create a DNS zone file for a BIND name server metze (This used to be commit 1e8c43133116881fb7ecf6358c1a91e0e3ea2222)
2004-10-09 10:11:26 +00:00
$TTL 1W
s4-provision: fixed the authority response for our SOA record some clients rely on this being the hostname, not the domain Autobuild-User: Andrew Tridgell <tridge@samba.org> Autobuild-Date: Tue Sep 28 06:39:19 UTC 2010 on sn-devel-104
2010-09-27 22:53:06 -07:00
@ IN SOA ${HOSTNAME} hostmaster (
r8315: fixed the generation of the serial number in the dns zone file (bind9 doesn't like it being too long) (This used to be commit fc93ade9cdfe97bdcd2383fa256877580707181c)
2005-07-11 05:45:42 +00:00
${DATESTRING} ; serial
r2873: create a DNS zone file for a BIND name server metze (This used to be commit 1e8c43133116881fb7ecf6358c1a91e0e3ea2222)
2004-10-09 10:11:26 +00:00
2D ; refresh
4H ; retry
6W ; expiry
1W ) ; minimum
r2879: the domain name should be resolved to the ip addresses of all dc's sort entries by service metze (This used to be commit 0f6d0b53eb3135e476e768e2283c9364e87b3204)
2004-10-09 22:02:26 +00:00
IN NS ${HOSTNAME}
provision: Add support for IPv6 (bz #4593). (This used to be commit 8585a3c77d5dfe97bca3f08716fc06ac2819f578)
2008-04-01 19:51:24 -05:00
${HOSTIP6_BASE_LINE}
Fix blackbox tests on IPv6-only hosts.
2008-10-20 10:18:02 +02:00
${HOSTIP_BASE_LINE}
r2879: the domain name should be resolved to the ip addresses of all dc's sort entries by service metze (This used to be commit 0f6d0b53eb3135e476e768e2283c9364e87b3204)
2004-10-09 22:02:26 +00:00
;
provision: Add support for IPv6 (bz #4593). (This used to be commit 8585a3c77d5dfe97bca3f08716fc06ac2819f578)
2008-04-01 19:51:24 -05:00
${HOSTIP6_HOST_LINE}
Fix blackbox tests on IPv6-only hosts.
2008-10-20 10:18:02 +02:00
${HOSTIP_HOST_LINE}
s4:provision: Make gc._msdcs DNS entries A/AAAA records When adding an additional DC as a GC server, the new DC attempts to register its own gc._msdcs records. If the existing gc._msdcs record is a CNAME, BIND fails the update with the message "attempt to add non-CNAME alongside CNAME ignored", and the new DC is not registered as a GC server. The A & AAAA record types for gc._msdcs have been verified against the DNS server of a W2K8 DC.
2010-06-13 10:48:31 -05:00
${GC_MSDCS_IP_LINE}
${GC_MSDCS_IP6_LINE}
s4/provision: add the nTDSDSA GUID based DNS entries and SPNs The DNS entries and SPNs are needed for samba<->samba DRS replication. This patch adds them for a standalone DC configure. A separate patch will add them for the vampire configure
2009-09-11 13:39:31 +10:00
${NTDSGUID}._msdcs IN CNAME ${HOSTNAME}
r2879: the domain name should be resolved to the ip addresses of all dc's sort entries by service metze (This used to be commit 0f6d0b53eb3135e476e768e2283c9364e87b3204)
2004-10-09 22:02:26 +00:00
;
; global catalog servers
s4-provision: revert _gc_tcp priority thanks to id10ts for spotting this. I was a victim of emacs zone mode, which increaed it with each edit.
2009-09-11 23:13:39 +10:00
_gc._tcp IN SRV 0 100 3268 ${HOSTNAME}
Improve DNS and Group poicy configurations. - fixes bug #4813 (simplify DNS setup) - This reworks the named.conf to be a fully fledged include - This also moves the documentation into named.txt - improves bug #4900 (Group policy support in Samba) - by creating an empty GPT.INI - fixes bug #5582 (DNS: Enhanced zone file) - This is now closer to the zone file AD creates committed by Andrew Bartlett (This used to be commit 74d684f6b329d7dd573cdc55e16bb8e629474b02)
2008-07-22 11:06:47 +10:00
_gc._tcp.${DEFAULTSITE}._sites IN SRV 0 100 3268 ${HOSTNAME}
s4:provision.zone - fix port of "_ldap._tcp.gc._msdcs"
2010-02-26 21:00:10 +01:00
_ldap._tcp.gc._msdcs IN SRV 0 100 3268 ${HOSTNAME}
s4-provision: fixed port number for gc ldap DNS SRV entry Pair-Programmed-With: Andrew Bartlett <abartlet@samba.org>
2010-02-26 13:27:26 +11:00
_ldap._tcp.${DEFAULTSITE}._sites.gc._msdcs IN SRV 0 100 3268 ${HOSTNAME}
r2879: the domain name should be resolved to the ip addresses of all dc's sort entries by service metze (This used to be commit 0f6d0b53eb3135e476e768e2283c9364e87b3204)
2004-10-09 22:02:26 +00:00
;
; ldap servers
r2873: create a DNS zone file for a BIND name server metze (This used to be commit 1e8c43133116881fb7ecf6358c1a91e0e3ea2222)
2004-10-09 10:11:26 +00:00
_ldap._tcp IN SRV 0 100 389 ${HOSTNAME}
_ldap._tcp.dc._msdcs IN SRV 0 100 389 ${HOSTNAME}
_ldap._tcp.pdc._msdcs IN SRV 0 100 389 ${HOSTNAME}
_ldap._tcp.${DOMAINGUID}.domains._msdcs IN SRV 0 100 389 ${HOSTNAME}
Improve DNS and Group poicy configurations. - fixes bug #4813 (simplify DNS setup) - This reworks the named.conf to be a fully fledged include - This also moves the documentation into named.txt - improves bug #4900 (Group policy support in Samba) - by creating an empty GPT.INI - fixes bug #5582 (DNS: Enhanced zone file) - This is now closer to the zone file AD creates committed by Andrew Bartlett (This used to be commit 74d684f6b329d7dd573cdc55e16bb8e629474b02)
2008-07-22 11:06:47 +10:00
_ldap._tcp.${DEFAULTSITE}._sites IN SRV 0 100 389 ${HOSTNAME}
r2873: create a DNS zone file for a BIND name server metze (This used to be commit 1e8c43133116881fb7ecf6358c1a91e0e3ea2222)
2004-10-09 10:11:26 +00:00
_ldap._tcp.${DEFAULTSITE}._sites.dc._msdcs IN SRV 0 100 389 ${HOSTNAME}
r2879: the domain name should be resolved to the ip addresses of all dc's sort entries by service metze (This used to be commit 0f6d0b53eb3135e476e768e2283c9364e87b3204)
2004-10-09 22:02:26 +00:00
;
; krb5 servers
_kerberos._tcp IN SRV 0 100 88 ${HOSTNAME}
r12536: kerberos is on port 88, not port 389 i guess this shows that MS clients ignore the port number in SRV replies (This used to be commit ce070ef50f3aca6f911f6f51688d7cd9fc17ff67)
2005-12-28 07:17:45 +00:00
_kerberos._tcp.dc._msdcs IN SRV 0 100 88 ${HOSTNAME}
Improve DNS and Group poicy configurations. - fixes bug #4813 (simplify DNS setup) - This reworks the named.conf to be a fully fledged include - This also moves the documentation into named.txt - improves bug #4900 (Group policy support in Samba) - by creating an empty GPT.INI - fixes bug #5582 (DNS: Enhanced zone file) - This is now closer to the zone file AD creates committed by Andrew Bartlett (This used to be commit 74d684f6b329d7dd573cdc55e16bb8e629474b02)
2008-07-22 11:06:47 +10:00
_kerberos._tcp.${DEFAULTSITE}._sites IN SRV 0 100 88 ${HOSTNAME}
r2873: create a DNS zone file for a BIND name server metze (This used to be commit 1e8c43133116881fb7ecf6358c1a91e0e3ea2222)
2004-10-09 10:11:26 +00:00
_kerberos._tcp.${DEFAULTSITE}._sites.dc._msdcs IN SRV 0 100 88 ${HOSTNAME}
r2879: the domain name should be resolved to the ip addresses of all dc's sort entries by service metze (This used to be commit 0f6d0b53eb3135e476e768e2283c9364e87b3204)
2004-10-09 22:02:26 +00:00
_kerberos._udp IN SRV 0 100 88 ${HOSTNAME}
r12625: More 'useful' names for the DNS zone. Andrew Bartlett (This used to be commit 660fc3ff4e26873710b35c8f52fe3a697764ec98)
2005-12-31 00:46:44 +00:00
; MIT kpasswd likes to lookup this name on password change
_kerberos-master._tcp IN SRV 0 100 88 ${HOSTNAME}
_kerberos-master._udp IN SRV 0 100 88 ${HOSTNAME}
r11208: Add DNS entries for finding the kpasswd server to the default zone. Andrew Bartlett (This used to be commit 7e01ff11fdcd70b54e30b438076bf1293638c61e)
2005-10-20 05:09:14 +00:00
;
; kpasswd
_kpasswd._tcp IN SRV 0 100 464 ${HOSTNAME}
_kpasswd._udp IN SRV 0 100 464 ${HOSTNAME}
;
; heimdal 'find realm for host' hack
_kerberos IN TXT ${REALM}
Copy Permalink