Using bind 9.5.0 with Active directory

[Rob Austein]

No obvious reason why it shouldn't work with ms-subdomain.

Next step is probably a protocol trace to see what's happening on the
wire.  wireshark/tshark is pretty good for this kind of analysis.

Probably best to run named with -g while you're doing the trace and
capture the output as well (if you're not doing that already), since
there may be clues in the log that aren't obvious with your normal
logging configuration.

If possible, do the trace on the same machine that's running named, so
that timestamps in packet trace and log will match up.