Using a DNS mangement tool with ISC's BIND

[Brad Knowles]

At 9:58 AM -0700 8/16/01, joe palano wrote:

>  We are considering using a DNS managment tool in conjunction with our
>  certified version 8.x of ISC's BIND.  In theory, this should allow the
>  ease of use and auditing of a Sybase management tool with the solid
>  performance of ISC's BIND.  However, in order to make the two function
>  together we have to do some not so standard things.  As an example:
>  We have the managed DNS server (server1).  His named.conf says he is
>  authoritative for zone x.  However, the zone file has the ISC BIND
>  server (server2) as authoritative.  On the server we want the world to
>  see as authoritative (server2), the named.conf lists zone x as a slave
>  to (server1).  This way (server2) transfers the file from (server1)
>  (anyone confused yet??).  Now, when the file for zone x arrives on
>  (server2) it lists server2 as the authortative server for the zone.
>  Which is exactly what we want.

	You are confusing whether or not a server is a "master" or a 
"slave" for a zone, with whether or not the server answers 
authoritatively for that zone.  It does not matter at all whether a 
machine is either "master" or "slave" for a particular zone -- so 
long as the zone is loaded correctly, that machine will answer 
authoritatively for it.

	If you can diagram your suggested configuration, and describe it 
again (in simpler terms), we might be able to help you figure out if 
there are any issues you should be concerned about.

-- 
Brad Knowles, <brad.knowles at skynet.be>

H4sICIFgXzsCA2RtYS1zaWcAPVHLbsMwDDvXX0H0kkvbfxiwVw8FCmzAzqqj1F4dy7CdBfn7
Kc6wmyGRFEnvvxiWQoCvqI7RSWTcfGXQNqCUAnfIU+AT8OZ/GCNjRVlH0bKpguJkxiITZqes
MxwpSucyDJzXxQEUe/ihgXqJXUXwD9ajB6NHonLmNrUSK9nacHQnH097szO74xFXqtlbT3il
wMsBz5cnfCR5cEmci0Rj9u/jqBbPeES1I4PeFBXPUIT1XDSOuutFXylzrQvGyboWstCoQZyP
dxX4dLx0eauFe1x9puhoi0Ao1omEJo+BZ6XLVNaVpWiKekxN0VK2VMpmAy+Bk7ZV4SO+p1L/
uErNRS/qH2iFU+iNOtbcmVt9N16lfF7tLv9FXNj8AiyNcOi1AQAA