Sv: Re: BIND forward to Windows DNS

[Mark Andrews]

> Hello,
> 
> I'm no BIND expert as you noticed. 
> Is there some documentation on how to create a proper delegation? The "ad.com
> pany.com" domain does not need to be kept private so no need for views.
> 
> Rutger

 
RFC 1034
4.2.2. Administrative considerations

	[snip]

As the last installation step, the delegation NS RRs and glue RRs
necessary to make the delegation effective should be added to the parent
zone.  The administrators of both zones should insure that the NS and
glue RRs which mark both sides of the cut are consistent and remain so.

	You *copy* the NS RRset from the child zone to the parent.
	You *copy* any glue address (A/AAAA) records for the nameservers
	to the parent zone.

	Mark

> >>> Chris Thompson <cet1 at hermes.cam.ac.uk> 07-11-09 21:27 >>>
> On Nov 9 2007, Rutger Blom wrote:
> 
> >Hello,
> >
> >We have a BIND server which is authoritative for zone "company.com". After s
> ome
> >years we implemented Microsoft AD with its own DNS server in its own
> >zone "ad.company.com". The Microsoft server is authoritative for
> >"ad.company.com"
> >
> >Now we want clients that have the BIND server as their configured DNS
> >server to be able to resolve hosts in the "ad.company.com" zone. I
> >thought this was done by configuring a forward zone "ad.company.com" on the 
> BIND
> >server, alternatively use the "forwarders" option. However, neither of these
>  methods seem to work.
> >
> >Is there something I am missing here?
> 
> Type forward won't work for a sub-zone of something you are already
> authoritative for. I take it that you have not created a proper delegation
> for "ad.company.com" from "company.com", nominating the Microsoft server
> (really just one?), or you wouldn't have the problem in the first place.
> So why not? If it's because the "ad.company.com" zone is meant to be private,
> consider using views in BIND.
> 
> -- 
> Chris Thompson
> Email: cet1 at cam.ac.uk
> 
> 
> 
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org