Oups, quand tu disais conf bind je pensais que tu me réclamais la config de la zone primaire samba.dc, voici donc :
named.conf.local
root@serveur:~# cat /etc/bind/named.conf.local
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
// déclaration de l'acl "internals"
acl internals { 127.0.0.0/8; 192.168.1.0/24; };
// clé de controle pour la mise à jour dhcp dynamique
include "/etc/bind/rndc.key";
controls { inet 127.0.0.1 allow { localhost; } keys { "lapalisselan"; }; };
zone "lapalisse.lan" {
type master;
file "/etc/bind/db.lapalisse.lan";
allow-update { key "lapalisselan"; };
allow-transfer { 192.168.1.10; };
forwarders{};
notify yes;
};
zone "interdit.fr" {
type master;
file "/etc/bind/interdit.fr";
allow-transfer { 192.168.1.10; };
allow-query {none;};
};
zone "1.168.192.in-addr.arpa" {
type master;
file "/etc/bind/db.lapalisse.lan.inv";
allow-update { key "lapalisselan"; };
allow-transfer { 192.168.1.10; };
// notify yes; // pour notifier un esclave
forwarders{};
};
zone "mondomaine.fr" {
type master;
file "/etc/bind/db.mondomaine.fr";
// allow-update { key "lapalisselan"; }; // blabla
allow-transfer {
192.168.1.10;
};
forwarders{};
notify yes;
};
zone "samba.dc" {
type master;
forwarders{ 192.168.1.41; };
file "/var/lib/bind/samba.dc.hosts";
};
named.conf.options
root@serveur:~# cat /etc/bind/named.conf.options
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
// response-policy { zone "interdit.fr"; };
forward only;
forwarders {
80.67.169.12;
80.67.169.40;
31.3.135.232;
};
listen-on {
127.0.0.1;
192.168.1.2;
};
allow-transfer { 192.168.1.10; };
allow-query { any; };
allow-recursion {
any;
};
auth-nxdomain no; # conform to RFC1035
listen-on-v6 { 2001:470:1f0b:90f:d250:99ff:fe7e:fede;
::1;
};
};