Link to home
Start Free TrialLog in
Avatar of bindnera
bindneraFlag for United States of America

asked on

Howto Delegate Windows Server 2008 DNS to Linux BIND setup

Looking for a good walkthrough;

A. What I have: Windows Server 2008 R2 Active Directory with integrated DNS and Linux distro's with BIND installed and functioning (Lab Environment).

B. What I'm looking to achieve: Want to delegate DNS duties from Windows to a Linux/Unix/*nix platform. I really just want to understand the process better by actually going through the process. I'm stuck somewhere and I just can't seem to get it. I'm open to any Linux distro from any type of guide or video (Even in other languages) as long as it demonstrates the steps.
Avatar of Papertrip
Papertrip
Flag of United States of America image

Where are you stuck?  What have you done so far?
ASKER CERTIFIED SOLUTION
Avatar of Darius Ghassem
Darius Ghassem
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of bindnera

ASKER

@dariusg

Thank you. This was definately a step in the right direction; however, no one else has posted a solution so I'm going to award you the points.

For those who use this post in the future; the above guide was really useful, but not entirely complete. You can move all of the DNS zones from Windows to a *nix BIND DNS server, but you will run into one problem. Microsoft allows "_" (ex, _msdcs.eaxmple.com) in their zone names. Linux (specifically CentOS 6.2 on BIND 9) will not. There is a setting to be placed in the options section of named.conf file that will force BIND to allow this.

/etc/named.conf
options {
               check-names master ignore;
               ........
               ........
};

On the windows server running AD, you have to modify each DNS zone by allowing Zone Transfers and adding a secondary nameserver. (Both are tabs available in the properties of each zone)

Again, thank you to @dariusg for your help. This wasn't exactly what I was looking for, but it sure was a step in the right direction and I appreciate the assistance.