Re: Getting BIND to work with an AD hosted DNS domain

2 msg	TLD Wildcard
4 msg	DNS blacklist
3 msg	ft.nai.com and bad SOA
2 msg	Slave transfer problem with same zone but diffe...
1 msg	nocando login shell

Getting BIND to work with an AD hosted DNS domain
\ Mark Drummond (16 Jun 2006)
. \ Vinny Abello (16 Jun 2006)

4 msg	Create a DNS Server
8 msg	Problems with Authoritive name server
1 msg	DNSSEC and SIG(0)
5 msg	Test named.conf?
2 msg	Enable IPv6 in BIND8.4.6 on AIX 5.2
8 msg	Expired Zone 'Recovery' Process
13 msg	Journal open failed.
3 msg	RE : Available DNS/BIND test suites
5 msg	Bind Fedora update
5 msg	dnssec-signzone => dnssec.c:136: INSIST(*key...
2 msg	timer to waiting for forwarding result
2 msg	forward and delegate
6 msg	Sometimes users get host unknown
4 msg	problem / in zonename as RFC2317 with bind9

Subject:	Re: Getting BIND to work with an AD hosted DNS domain
Group:	Bind-users
From:	Vinny Abello
Date:	16 Jun 2006

At 09:39 AM 6/16/2006, Mark Drummond wrote:
>My Sun servers were all configured to use a BIND based DNS service
>running on some of my Sun boxes. The DNS domain used is my company's
>official domain name which for arguments sake we call "myco.com".
>
>Recently the Windows folks completed a migration to AD, and with that
>they implemented an AD based DNS service. On the brilliant
>recommendation of some consultants, rather than using "myco.com" the AD
>folks set up "myco.corp".
>
>My problem is, my laptop needs to be in myco.corp to function properly
>in the AD domain (things like connecting to Exchange), but at the same
>time I still need to be able to resolve myco.com to work with my Sun
>servers.
>
>I'm sure there is probably some way to configure my workstation to
>handle this, but I would prefer a more elegant server side solution.
>
>What I would like is the following:
>
>* Manually configure my laptop to reference the DNS service on my Sun
>systems so I can resolve myco.com. (Done.)
>
>* Have the DNS service on my Sun boxes forward requests for myco.corp to
>the AD servers.
>
>* And have DNS requests for everything else forwarded to our external
>DNS servers, which are currently hosted by our service provider.
>
>I'm not completely sure how to implement this. I've been
>using/configuring BIND for many years, but never really had to do much
>more than very basic configs.
>
>Any pointers are greatly appreciated!
>
>Thanks,
>
>Mark

You're best bet for consistency is to make it so both the Windows and
Sun DNS servers are aware of the opposing domains in some way.
Typically you can just do conditional forwarding to achieve this so
requests for just that domain are forwarded to the server you know
that hosts them. Assuming these boxes are also the recursive DNS
servers your clients point to, that would enable it so either sets of
resolvers you use would enable you to resolve the opposing domain on
the other DNS servers.

Vinny Abello
Network Engineer
Server Management
vinny
(973)300-9211 x 125
(973)940-6125 (Direct)
PGP Key Fingerprint: 3BC5 9A48 FC78 03D3 82E0 E935 5325 FBCB 0100 977A

Tellurian Networks - The Ultimate Internet Connection
http://www.tellurian.com (888)TELLURIAN

"Courage is resistance to fear, mastery of fear - not absence of
fear" -- Mark Twain