Need help - AD failing to register with BIND 9.2.3 DDNS server

[Kevin Darcy]

I'm a little confused by that output. Does "IP Address(es)" refer to the 
destination of the Dynamic Update, or to the address(es) which 
chgdcinet1 is trying to write into the DNS database?

In any case, "Sent update to server : <?>" suggests to me that the DC 
can't figure out where to send the update, which in turn might be caused 
by the fact that the name of the master for diamondcluster.net is set to 
the root name "ritchie". The fact that W2K3 is reporting "DNS server 
contacted refused the update request" may be either because a) that's 
the more common cause of a Dynamic Update failure and the error message 
is trying to be helpful by pointing the way to a resolution (at the 
expense of muddying the waters in more obscure cases), or b) the Dynamic 
Update code may default to something like 0.0.0.0 or 127.0.0.1 if it 
can't resolve the name of the zone master, and the nameserver listening 
there is, of course, refusing update requests.

                                                                         
                                                   - Kevin

TZ wrote:

>Trying to set up a W2k3 AD sevrer to work with a BIND 9.2.3 DNS server
>- but getting the following error message on the AD server
>
>
>The system failed to register host (A) resource records (RRs) for
>network adapter
>with settings:
>
>   Adapter Name : {}
>   Host Name : chgdcinet1
>   Primary Domain Suffix : diamondcluster.net
>   DNS server list :
>     	10.1.1.30
>   Sent update to server : <?>
>   IP Address(es) :
>     10.1.1.20
>
> The reason the system could not register these RRs was because the
>DNS server contacted refused the update request. The reasons for this
>might be (a) you are not allowed to update the specified DNS domain
>name, or (b) because the DNS server authoritative for this name does
>not support the DNS dynamic update protocol.
>
> 
>Not seeing anything logged on the unix server - or being denied - so
>at a loss
>
>My named.conf file is as follows
>
>
>#named.conf
>options {
>
>	directory "/var/named";
>#    query-source address * port 53; 
>
>	notify yes;
>	pid-file "/tmp/named.pid";
>};
>
>logging {
>        channel default_file {
>                file "/var/adm/named" versions 9 size 20m;
>                print-time yes;
>                print-category yes;
>        };
>        channel bitbucket {
>		null;
>        };
>
>        category default { default_file; default_syslog;
>default_debug; };
>        category lame-servers { bitbucket; };
>
>};
>
>
>
>
>zone "." {
>	type hint;
>	file "root.cache";
>};
>
>zone "0.0.127.in-addr.arpa" {
>	type master;
>	file "master/127.0.0";
>	notify no;
>	allow-query {
>		trusted;
>	};
>};
>
>
>
>zone "1.1.10.in-addr.arpa" {
>	type master;
>	file "master/db.10.1.1";
>	notify no;
>};
>
>zone "_msdcs.diamondcluster.net" {
>	type master;
>	file "/var/named/_msdcs.diamondcluster.net.hosts";
>	allow-update {
>		10.1.1.0/24;
>		};
>	check-names ignore;
>	};
>
>zone "_tcp.diamondcluster.net" {
>	type master;
>	file "/var/named/_tcp.diamondcluster.net.hosts";
>	allow-update {
>		10.1.1.0/24;
>		};
>	check-names ignore;
>	};
>
>zone "_udp.diamondcluster.net" {
>	type master;
>	file "/var/named/_udp.diamondcluster.net.hosts";
>	allow-update {
>		10.1.1.0/24;
>		};
>	check-names ignore;
>	};
>
>zone "_sites.diamondcluster.net" {
>	type master;
>	file "/var/named/_sites.diamondcluster.net.hosts";
>	allow-update {
>		10.1.1.0/24;
>		};
>	check-names ignore;
>	};
>
>zone "DomainDnsZones.diamondcluster.net" {
>	type master;
>	file "/var/named/DomainDnsZones.diamondcluster.net.hosts";
>	allow-update {
>		10.1.1.0/24;
>		};
>	check-names ignore;
>	};
>
>zone "ForestDnsZones.diamondcluster.net" {
>	type master;
>	file "/var/named/ForestDnsZones.diamondcluster.net.hosts";
>	allow-update {
>		10.1.1.0/24;
>		};
>	check-names ignore;
>	};
>
>zone "diamondcluster.net" {
>	type master;
>	file "/var/named/diamondcluster.net.hosts";
>	allow-update {
>		10.1.1.0/24;
>		};
>	check-names ignore;
>	};
>
>and a sample zone file
>
>$ttl 38400
>diamondcluster.net.	IN	SOA	ritchie. hostmaster.diamondcluster.com. (
>			1092919564
>			10800
>			3600
>			604800
>			38400 )
>diamondcluster.net.	IN	NS	ritchie.
>
>
>Not sure whatis wrong - would appreciate any help as I see no errors
>or any logs of sorts in the named or messages file or even syslog.
>
>Tariq Zawahir
>
>
>
>
>  
>