(SAMBA_INTERNAL). BIND9_FLATFILE and BIND9_DLZ are still available,
but you'll have to add '-dns' to the 'server services' option
to disable the internal dns server.
+The default for 'allow dns updates' has changed to 'secure only'.
CHANGES SINCE beta7
=====================
lpcfg_do_global_parameter(lp_ctx, "rndc command", "/usr/sbin/rndc");
lpcfg_do_global_parameter(lp_ctx, "nsupdate command", "/usr/bin/nsupdate -g");
- lpcfg_do_global_parameter(lp_ctx, "allow dns updates", "False");
+ lpcfg_do_global_parameter(lp_ctx, "allow dns updates", "secure only");
lpcfg_do_global_parameter(lp_ctx, "dns recursive queries", "False");
lpcfg_do_global_parameter(lp_ctx, "dns forwarder", "");
my ($self, $prefix) = @_;
print "PROVISIONING DC...";
- my $extra_conf_options = "netbios aliases = localDC1-a
-allow dns updates = signed";
+ my $extra_conf_options = "netbios aliases = localDC1-a";
my $ret = $self->provision($prefix,
"domain controller",
"localdc",
"samba2003.example.com",
"2003",
"locDCpass6",
- undef, "allow dns updates = True", "", undef);
+ undef, "allow dns updates = nonsecure and secure", "", undef);
unless($self->add_wins_config("$prefix/private")) {
warn("Unable to add wins configuration");