Re: Enterprise DNS Architecture - AD and BIND

2016-12-14 Thread Barry S. Finkel
On 12/14/2016 Veaceslav Revutchi wrote: Since this thread is still fresh, what is the current best practice when slaving from AD? Do you pick one DC and list it as master or is it safe to list multiple? We are looking to do the same and just started the conversation with our AD team. The serial

Re: ISC Bind 9.11 and dyndb-ldap

2016-12-14 Thread Petr Mensik
Hello Kishore, It is not so simple. What was merged into BIND 9.11 is only dynamic database API, that is bind-dyndb-ldap using. That dynamic database does not store any permanent data, it is only interface other plugins can use. That means dynamic_db provided by custom patch for RHEL and Fedora

Re: Enterprise DNS Architecture - AD and BIND

2016-12-14 Thread Veaceslav Revutchi
On Wed, Dec 14, 2016 at 10:35 AM, Barry S. Finkel wrote: > On 12/14/2016 Veaceslav Revutchi wrote: > >> Since this thread is still fresh, what is the current best practice >> when slaving from AD? Do you pick one DC and list it as master or is >> it safe to list multiple? We are looking to do the

internal/external view problem

2016-12-14 Thread Per olof Ljungmark
Hi list, I am facing a problem internal/external views, I will do my best to describe it: An internal host needs to nsupdate an external view using a key, but cannot because it is part of the internal ip range, at least that is what I think. The acutal use is for Letsencrypt certs. Is there a w

Re: internal/external view problem

2016-12-14 Thread /dev/rob0
On Wed, Dec 14, 2016 at 07:52:58PM +0100, Per olof Ljungmark wrote: > I am facing a problem internal/external views, I will do my best > to describe it: > > An internal host needs to nsupdate an external view using a key, > but cannot because it is part of the internal ip range, at least > that is