Win2k & UNIX bind 8x

[Mark.Andrews at nominum.com]

> We have implemented a win2k Active Dir.
> I have used the proper (i believe) named.conf entry for a master of the
> subdomain...
> 
> zone "_msdcs.company.com" {
>     type master;
>     file "db.msdcs";
>     check-names ignore;
>     allow-update {any}; };
> };

	You may also want _site, _tcp, and _udp, or just add allow-update
	to the company.com zone.
> 
> I wanted to use "localnets" for allow-update, but unsure of where they get
> "predefined" at.

	By scanning the interfaces on the nameserver.

> 
> I did get updates from the new gc sometime during the night, but I mostly
> get the following error...
> 
> Sep 8 11:27:25 pebble named[2737]: unapproved update from
> [90.132.162.221].1981 for 162.132.90.in-addr.arpa (or for company.com).

	162.132.90.in-addr.arpa != _msdcs.company.com

	Add/extend "allow-update { 90.132.162/24 };" to the definition of
	162.132.90.in-addr.arpa.

> 
> anyone get this to work yet?  DNS is Solaris7 with BIND 8.1

	8.1 is ancient.  The current release in 8.2.2-P5.

	Mark
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com