Solution at After update to 5.0-2 DNS server won't allow zone transfer - #7 by sgvfr and Bug 55047 – axfr denied with Samba/AD when allowed in bind9 config