Bind8 Dynamic DNS How-To?

Kevin Darcy kcd at daimlerchrysler.com
Mon Jun 12 22:15:10 UTC 2000


I didn't say Win2K Dynamic Update to BIND was impossible, only that it was
weakly-authenticated (by IP address) and therefore dangerous.


- Kevin

Luis Camacho wrote:

> Kevin wrote
> Prepare to be disappointed. From what I gather, there is no way for
> Win2K to make strongly-authenticated Dynamic Updates to BIND
>
> Kevin, I hope you don't feel like I'm stepping on you, but you can correct
> if I'm wrong.  The following web site explains the benefit of the latest and
> greatest bind and it says that Interoperability with MS-Win2K has been
> improved. So, While I haven't tried it yet, I would say that You are right
> but new heights are being reached to make them work together.  It also
> mentions that Bind now has Support for Windows/NT (thanks to BayNetworks).
>
> Just a little info:
>
> http://www.isc.org/products/BIND/docs/bind8.2_highlights.html
> *   Interoperability with MS-Win2K has been improved.
> *   Support for Windows/NT (thanks to BayNetworks).
>
> Luis
>
> -----Original Message-----
> From: kcd at daimlerchrysler.com [mailto:kcd at daimlerchrysler.com]
> Sent: Monday, June 12, 2000 5:30 PM
> To: bind-users at isc.org
> Subject: Re: Bind8 Dynamic DNS How-To?
>
> Jeff Newton wrote:
>
> > I've been using Bind 8.2.2 for a while now but I'd like to start
> > implementing the dynamic DNS features for our many DHCP Windoze
> > machines.  Plus with Win2K fast approaching.....
>
> Prepare to be disappointed. From what I gather, there is no way for
> Win2K to make strongly-authenticated Dynamic Updates to BIND, and
> without proper authentication, not only is there the obvious security
> risk, but there's really nothing to stop the Win2K boxes from stomping
> on each other's records (since the server can't really tell one client
> from another). Of course, Microsoft has this problem "solved", as long
> as you use *their* servers for DNS instead of BIND. Yippee.
>
> - Kevin






More information about the bind-users mailing list