Is this possible

Jonathan de Boyne Pollard J.deBoynePollard at Tesco.NET
Mon Mar 22 03:26:10 UTC 2004


BF> You could have the W2k3 zones AD-integrated, so each W2k3
BF> DNS Server would be a "master", but then you run into
BF> serial number problems as documented in MS article 282826.

JdeBP> This is, of course, a red herring.  Since the serial number 
JdeBP> is irrelevant when one is using Active Directory database
JdeBP> replication, there are no problems with it to run in to.

KD> The problem is not *between* the W2K3 servers of the AD-integrated
KD> zone, it's with any other boxes you may have which use plain old
KD> AXFR/IXFR to slave the zone. 

This is the merely same red herring in disguise.  Mixing and matching
different database replication mechanisms (for a given subset of the DNS
database) within a single set of peer content DNS servers should not be done
unless one is _very_ careful and knows _exactly_ what one is doing.  The
contents of the "SOA" resource record should be treated as private to each
particular replication mechanism, and one must not expect different DNS
database replication mechanisms to use all of the fields in the same way, or
in a way that is compatible with one another, or even to use them at all.

KD> Are you are advocating wholesale replacement of *all*
KD> existing slaves with W2K3 boxes?  

You didn't read the original post right the first time, and you clearly still
haven't comprehended it.  Hint: There _aren't any_ "existing slaves", and his
proposed second DNS server will be Microsoft's DNS server too.

KD> Do you hold stock in Microsoft Corporation?

Make up your mind.


More information about the bind-users mailing list