Solved

Howto Delegate Windows Server 2008 DNS to Linux BIND setup

Posted on 2012-04-04
3
1,550 Views
Last Modified: 2012-04-06
Looking for a good walkthrough;

A. What I have: Windows Server 2008 R2 Active Directory with integrated DNS and Linux distro's with BIND installed and functioning (Lab Environment).

B. What I'm looking to achieve: Want to delegate DNS duties from Windows to a Linux/Unix/*nix platform. I really just want to understand the process better by actually going through the process. I'm stuck somewhere and I just can't seem to get it. I'm open to any Linux distro from any type of guide or video (Even in other languages) as long as it demonstrates the steps.
0
Comment
Question by:bindnera
3 Comments
 
LVL 21

Expert Comment

by:Papertrip
Comment Utility
Where are you stuck?  What have you done so far?
0
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 300 total points
Comment Utility
You want to migrate from Windows DNS to Linux DNS?

http://myitpath.blogspot.com/2011/10/migrating-windows-dns-to-linux-bind.html

But if you are using AD I would recommend you use Windows DNS
0
 
LVL 1

Author Comment

by:bindnera
Comment Utility
@dariusg

Thank you. This was definately a step in the right direction; however, no one else has posted a solution so I'm going to award you the points.

For those who use this post in the future; the above guide was really useful, but not entirely complete. You can move all of the DNS zones from Windows to a *nix BIND DNS server, but you will run into one problem. Microsoft allows "_" (ex, _msdcs.eaxmple.com) in their zone names. Linux (specifically CentOS 6.2 on BIND 9) will not. There is a setting to be placed in the options section of named.conf file that will force BIND to allow this.

/etc/named.conf
options {
               check-names master ignore;
               ........
               ........
};

On the windows server running AD, you have to modify each DNS zone by allowing Zone Transfers and adding a secondary nameserver. (Both are tabs available in the properties of each zone)

Again, thank you to @dariusg for your help. This wasn't exactly what I was looking for, but it sure was a step in the right direction and I appreciate the assistance.
0

Featured Post

Top 6 Sources for Identifying Threat Actor TTPs

Understanding your enemy is essential. These six sources will help you identify the most popular threat actor tactics, techniques, and procedures (TTPs).

Join & Write a Comment

The purpose of this article is to demonstrate how we can upgrade Python from version 2.7.6 to Python 2.7.10 on the Linux Mint operating system. I am using an Oracle Virtual Box where I have installed Linux Mint operating system version 17.2. Once yo…
Disabling the Directory Sync Service Account in Office 365 will stop directory synchronization from working.
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles from a Windows Server 2008 domain controller to a Windows Server 2012 domain controlle…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

743 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

13 Experts available now in Live!

Get 1:1 Help Now