Bind domain; win2k sub-domain

[Brad Knowles]

At 8:24 AM -0700 6/14/01, David Frank wrote:

>  My question is this; If they run their win2k box as a master of their
>  sub-domain and I configure my DNS server (Which is the secondary for our
>  domain) as a slave for their sub-domain, will the Solaris boxes be able to
>  look to my Unix name server for resolution when Win2k DNS fails?

	The use of Win2k or Unix machines running BIND for 
authoritative-only nameservers is totally independant of the OS uses 
to serve recursive caching nameservice.  Indeed, I recommend setting 
these services up on two completely different sets of machines, where 
feasible.

	In that case, you would simply list the IP addresses of the 
recursive/caching-only nameserver in the /etc/resolv.conf of the 
various Unix machines (and maybe configure Active Directory to use 
the same), and then you separately handle the delegation of which 
servers provide authoritative-only services for which domains.


	Still, I suspect that it's going to be a bitch to get the Solaris 
boxes somehow listed in the Win2k Active Directory/DNS.  Indeed, it 
may be totally impossible.

	This is why the recommended practice is to ensure that you never 
mix the two types of server for the same zone -- Unix boxes go in 
zones served by Unix boxes (or other machines running a traditional 
nameserver, such as BIND), and Gatesware boxes go in zones served by 
Gatesware boxes.

-- 
Brad Knowles, <brad.knowles at skynet.be>

/*        efdtt.c  Author:  Charles M. Hannum <root at ihack.net>          */
/*       Represented as 1045 digit prime number by Phil Carmody         */
/*     Prime as DNS cname chain by Roy Arends and Walter Belgers        */
/*                                                                      */
/*     Usage is:  cat title-key scrambled.vob | efdtt >clear.vob        */
/*   where title-key = "153 2 8 105 225" or other similar 5-byte key    */

dig decss.friet.org|perl -ne'if(/^x/){s/[x.]//g;print pack(H124,$_)}'