Re: delegating sub domains with dynamic DNS

1 msg	Question about dig +trace
2 msg	Troubleshooting poor performing BIND
1 msg	Marshal V Langlois is out of the office.
2 msg	SOA EXPIRE and dnsdoctor
2 msg	having slave not time out
4 msg	xfrm_larval_drop required for bind over ipsec
22 msg	Wits end
3 msg	Sharing authority without creating a subdomain
2 msg	website redundancy.
3 msg	Round robin vs. order, caching, TTL of 0
3 msg	Dig +trace times out
2 msg	log message severity
4 msg	Report a bug: multi-threads of rndc-confgen can...
5 msg	Disable fallback to AXFR
4 msg	caching DNS
11 msg	Is godaddy wrong in disallowing using my domain...

delegating sub domains with dynamic DNS
\ forester404 (12 Apr 2008)
. \ Kevin Darcy (16 Apr 2008)

1 msg	DKIM Policy Statement Tags compatibility from r...
5 msg	Newbie question again
1 msg	error: bind-9.5.0-25.1.b2.fc8.src.rpm cannot be...

Subject:	Re: delegating sub domains with dynamic DNS
Group:	Bind-users
From:	Kevin Darcy
Date:	16 Apr 2008

forester404 wrote:
> Hello.
> I am new to DNS, And my questions is actually related more to the
> client side, but I couldn't find a
> more suitable group (please direct me if you know such)
> I am writing an application that uses Dynamic DNS client (dns java)
> in order to add and remove Recored on name server for a giver domain.
> adding and removing ARecords and SRVRecoreds works ok,
> but I would also like to add sub domains to the given domain
> dynamically, using Dynamic DNS. Is that at all possible ?
> My current understating is that it isn't, since one can only
> send Dynamic DNS updates to a master name server, but, in order
> for a name server to set as a master for the new sub domain, it must
> have an SOA record that defines its authority, so it seems like a
> cyclic dependency...
> Am I correct ?
> when I try to send an update to my local Bind name server,
> I receive 'not authoritative for update zone' error.
> Any ideas how to work around this ?
>
The current attitude in the standards community appears to be that zone
configuration is "too hard", "too complicated" and/or "too
security-sensitive" to be handled by Dynamic Update. Therefore the most
you can do via the Dynamic Update protocol extension is to create the
delegation records from the parent zone. The creation of the subzone's
"nucleus" (SOA and NS records) needs to be accomplished in some other
way, after which you can use Dynamic Update to populate the rest of the
subzone's contents.

Occasionally there is some talk of including zone-creation (potentially
also zone-deletion) in some sort of "provisioning" protocol, but so far
it's just talk.

- Kevin