BIND integration with windows DNS

2010-07-26 Thread Arnoud Tijssen
I`m facing kind of a challenge. At the moment we have BIND and windows DNS within our corporate network. I would like to get rid of windows DNS and switch completely over to BIND, but since DNS is so intertwined with AD this is not an option since it probably introduces more problems then it so

Re: Multiple masters expected behavior?

2010-07-26 Thread Barry Margolin
In article , "Laws, Peter C." wrote: > Understood, but what I'm asking about is that the slave does not appear to be > losing contact with the first-listed master. In fact, from the logs, it > appears to be flipping back and forth (though not round-robinning). Multiple masters is not about

Re: ignoring forwarder zone statements..

2010-07-26 Thread Pete Vickers
>>> Hi list, I have a BIND9 server in a non public internet connected network. Most of the \ functionality is working correctly but I have a specific problem. The server 'resides' in a 3rd level zone ( e.g. my-ns-server.level3.level2.level1. \ ) for whic

Re: ignoring forwarder zone statements..

2010-07-26 Thread Kevin Darcy
On 7/26/2010 2:27 PM, Pete Vickers wrote: On 7/26/2010 1:46 PM, Pete Vickers wrote: Hi list, I have a BIND9 server in a non public internet connected network. Most of the \ functionality is working correctly but I have a specific problem. The server 'resides' in a 3rd level zone ( e.g. m

Re: Migrating to a New Cryptographic Suite

2010-07-26 Thread Hauke Lampe
- Original message - > At present, i > use the algorithm RSASHA-1 for DNSKEY, but i want migrate the RSASHA-1 to > RSASHA-256, when i resigning the zone,it failed. so i wonder if  DNSSEC > supporting migrating RSASHA-1  to RSASHA-256 smoothly? Yes, it does. Smoothness depends on the tim

Re: Re: ignoring forwarder zone statements..

2010-07-26 Thread Pete Vickers
> On 7/26/2010 1:46 PM, Pete Vickers wrote: > > Hi list, > > > > I have a BIND9 server in a non public internet connected network. Most of > > the \ > > functionality is working correctly but I have a specific problem. > > The server 'resides' in a 3rd level zone ( e.g. > > my-ns-server.level3.

Re: ignoring forwarder zone statements..

2010-07-26 Thread Kevin Darcy
On 7/26/2010 1:46 PM, Pete Vickers wrote: Hi list, I have a BIND9 server in a non public internet connected network. Most of the functionality is working correctly but I have a specific problem. The server 'resides' in a 3rd level zone ( e.g. my-ns-server.level3.level2.level1. ) for which it

ignoring forwarder zone statements..

2010-07-26 Thread Pete Vickers
Hi list, I have a BIND9 server in a non public internet connected network. Most of the functionality is working correctly but I have a specific problem. The server 'resides' in a 3rd level zone ( e.g. my-ns-server.level3.level2.level1. ) for which it is SOA & NS, in addition it is slave for th

Re: DNS update from Linux to Windows DNS Server

2010-07-26 Thread Cory Coager
In tcpdump I see: Standard query response, Refused On 07/26/2010 12:16 PM, Phil Mayers wrote: On 26/07/10 16:56, Cory Coager wrote: > 'nsupdate -g' responds with 'dns_request_getresponse: FORMERR' Sorry then. I don't know. Personally I can't make nsupdate work at all with GSSAPI; I get: dns_t

Re: DNS update from Linux to Windows DNS Server

2010-07-26 Thread Phil Mayers
On 26/07/10 16:56, Cory Coager wrote: 'nsupdate -g' responds with 'dns_request_getresponse: FORMERR' Sorry then. I don't know. Personally I can't make nsupdate work at all with GSSAPI; I get: dns_tkey_buildgssquery failed: ran out of space ...before it even tries to talk to the network. I h

Re: DNS update from Linux to Windows DNS Server

2010-07-26 Thread Cory Coager
'nsupdate -g' responds with 'dns_request_getresponse: FORMERR' On 07/26/2010 11:40 AM, Phil Mayers wrote: On 26/07/10 16:32, Cory Coager wrote: I'm not sure if this is the right place to ask this but I am trying to execute a DNS update using the nsupdate utility to update an A record from a Lin

Re: DNS update from Linux to Windows DNS Server

2010-07-26 Thread Phil Mayers
On 26/07/10 16:32, Cory Coager wrote: I'm not sure if this is the right place to ask this but I am trying to execute a DNS update using the nsupdate utility to update an A record from a Linux server to a Windows 2008 R2 DNS server. Sending the request using 'nsupdate -o' responds with 'response

DNS update from Linux to Windows DNS Server

2010-07-26 Thread Cory Coager
I'm not sure if this is the right place to ask this but I am trying to execute a DNS update using the nsupdate utility to update an A record from a Linux server to a Windows 2008 R2 DNS server. Sending the request using 'nsupdate -o' responds with 'response to GSS-TSIG query was unsuccessful'.

Migrating to a New Cryptographic Suite

2010-07-26 Thread xu dong
Hi, I am running a test about the DNSSEC on my name servers. At present, i use the algorithm RSASHA-1 for DNSKEY, but i want migrate the RSASHA-1 to RSASHA-256, when i resigning the zone,it failed. so i wonder if DNSSEC supporting migrating RSASHA-1 to RSASHA-256 smoothly? ___

Re: USADOTGOV.NET Root Problems?

2010-07-26 Thread Merton Campbell Crockett
On Jul 26, 2010, at 12:36 AM, Warren Kumari wrote: > > On Jul 26, 2010, at 12:34 AM, Kevin Oberman wrote: > >>> From: Warren Kumari >>> Date: Sun, 25 Jul 2010 11:22:46 +0200 >>> Sender: bind-users-bounces+oberman=es@lists.isc.org >>> >>> >>> On Jul 25, 2010, at 4:33 AM, Danny Mayer wrote

Re: USADOTGOV.NET Root Problems?

2010-07-26 Thread Merton Campbell Crockett
On Jul 25, 2010, at 3:34 PM, Kevin Oberman wrote: >> From: Warren Kumari >> Date: Sun, 25 Jul 2010 11:22:46 +0200 >> Sender: bind-users-bounces+oberman=es@lists.isc.org >> >> >> On Jul 25, 2010, at 4:33 AM, Danny Mayer wrote: >> >>> On 7/24/2010 5:10 AM, Warren Kumari wrote: On

Re: Multiple masters expected behavior?

2010-07-26 Thread Niobos
On 2010-07-23 22:52, Peter Laws wrote: > I would have expected that it would only ask the second-listed master if > the first didn't answer ... but I didn't write the code (and haven't > read it either! And how would your slave ever pick up an update on "second-listed master" that (for whatever re

Re: USADOTGOV.NET Root Problems?

2010-07-26 Thread Warren Kumari
On Jul 26, 2010, at 12:34 AM, Kevin Oberman wrote: >> From: Warren Kumari >> Date: Sun, 25 Jul 2010 11:22:46 +0200 >> Sender: bind-users-bounces+oberman=es@lists.isc.org >> >> >> On Jul 25, 2010, at 4:33 AM, Danny Mayer wrote: >> >>> On 7/24/2010 5:10 AM, Warren Kumari wrote: O