Re: Unix Bind and Windows DNS coexist problem with forwarder ON


> Therefore, I setup delegation in UNIX BIND server to Windows 2003 DNS.
>UNIX BIND setup remainsd the authoritative name server and Windows 2003 DNS
>just for SRV records and all Window clients are stil pointing to UNIX BIND
>server.

>The above does not describe delegation.

>Were you to delegate then you would be delegating
>an entire zone.

>Even if you tried to delegate just the _underscore zones
>you would still need to deal with the domain-zone itself
>needing to be dynamic.

I just delegate _underscore zones in UNIX BIND and Windows DNS (like the
attached URL from my previous email). The dymanic is not working in the way
we setup but we don't really need it. Is it necessary to deal with dynamic
update? How to do it?

> Here is the problem, If i turn OFF forwarder in UNIX BIND server, Windows
> clients are able to join the new Windows 2k3 AD (by entering DNS FQDN)
> without any problem.

>Then the delegation is likely incorrect.

>Is the Windows domain using a child (DNS) zone
>of the UNIX? If not, what is the relationship.

Not using child domain. Just _underscore zones.


> But if i turn ON the forwarder in UNIX BIND server, none
> of the Windows clients are able to join the new W2K3 AD (it said cannot
find
> the SRV records etc). It looks like UNIX BIND server treat the windows
client
> request as out of zone request and forward to the external DNS servers.
> Anyone seem that before?

>If the forwarding and the delegation are done incorrectly.

>For instance (but this may not be your problem precisely):
>A DNS server cannot (easily) check two full namespaces
>(from the root down) -- if it forwarders it cannot check it's
>own root, and vice versa reliably.

>If you simplify:
>Unix fully delegated to the child DNS zone for the AD domain,
>or holding a Secondary (or stub or some other way to find it) for
>the AD domain-Zone.


If setup incorrectly. How come when i turn OFF forwarder would work (This is
what i need but we need to have Forwarder turn ON)
This must be DNS BIND just forward the SRV record request to external server.

The UNIX BIND server is like "abc.com"
Windows 2003 Server is also same "abc.com"

When i setup a test Windows XP client to try to join the new AD. I put
"abc.com" and it failed when forwarder ON.



.

Relevant Pages