Re: Unix Bind and Windows DNS coexist problem with forwarder ON

Mugen wrote:
>> You can do this by just delegating the _subdomains, but you have to
>> create the LDAP IP address record for the domain name that must
>> resolve to the IP address of the domain controller so client can
>> access the DFS share at \\abc.com\SYSVOL you will also need to
>> create an A record for the Domain controller's name. Just to add,
>> abc.com MUST resolve to the IP address of the domain controller
>> only, not a web server. If the record points to a web server your
>> domain members will be looking to the web server for their Group
>> Policy Objects.
>
> Can you tell me where/how to create LDAP IP address record for the
> domain name that resolve IP of DC? Create in Windows or UNIX Bind? I
> created an A record for the DC in UNIX bind already.
>
> This is what i have created in Unix BIND server
>
> _TCP IN NS hostname.domain.com
> _UDP IN NS hostname.domain.com
> _MSDCS IN NS hostname.domain.com
> _SITES IN NS hostname.domain.com
> ForestDNSZones IN NS hostname.domain.com
> DomainDNSZones IN NS hostname.domain.com
>
> 192.168.1.1 hostname.domain.com # Windows 2K3 Domain
> Controller
>
> For Windows DNS setup. I follow this MS KB link in option 4 below
>
> http://support.microsoft.com/kb/q255913/

If you read step 5, you will note that there are two "A" records that must
exist, one for abc.com and one for gc._msdcs.abc.com. The
gc._msdcs.reskit.com "A" record should exist in the windows DNS through the
delegation. But the one for the domain name will have to exist in the BIND
zone.


--?
Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================


.

Relevant Pages

  • Re: I hate IIS - "Server Application Unavailable" error message
    ... You can get it running on a domain controller by altering this account. ... Buy a web server. ... configure the <processModel> section of the Machine.config file to use ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Preparing Network Connections... forever
    ... Remeber both domains need to resolve each other, so make sure that both servers can reach eachother zone and that the new tree can resove the _msdcs domain. ... Active Directory was unable to establish a connection with the global catalog. ... Make sure a global catalog is available in the forest, and is reachable from this domain controller. ...
    (microsoft.public.windows.server.active_directory)
  • serious problem running asp.net and framework on domain controller
    ... I have a web server which is also the domain controller. ... And at some stage, with the permissions gone, the same problem ... In the ASP.NET application I use user impersonization, ...
    (microsoft.public.dotnet.framework.aspnet)
  • Re: Difference in authentication between using IP address and DNS name
    ... The host name may resolve to a different address. ... The other thing that could be happening is if the web server uses HTTP ... The web server at the time of the request examines the requested ...
    (microsoft.public.security)
  • RE: Windows Server 2003 and slow login
    ... >Yes, the Domain Controller should point to itself only, ... >forwarders to resolve externally. ... >connection in dns is checked in the TCP/IP advanced ... >net start netlogon ...
    (microsoft.public.windows.server.networking)