DNS Zone Transfer Fail

I recently (over Christmas) upgraded from UCS 5.0-1 to 5.0-2 errata528.

I’ve just found out that DNS Zone Transfers stopped working. There are no errors when starting bind, but all transfer requests get denied.

I checked the registry and transfers are set to any. I also looked in /etc/bind/named.conf.samba4 and transfers are set to any in there.

root@dc1:/etc/bind# grep -R transfer *
named.conf.proxy:	allow-transfer { any; };
named.conf.samba4:	allow-transfer { any; };

Any idea why bind is denying a zone transfer?