<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">You should think of DNS hosting, DNS
resolution and DHCP, as separate services that can either be put
together on a single platform, or run on separate platforms in
various combinations, interoperating with each other. Another
important factor is whether your AD domain is colocated with a
bunch of other non-AD stuff, or whether it's a separate namespace
(either a descendant of your main domain, or some namespace
entirely).<br>
<br>
In our case, our AD folks insist on AD-integrated zones, but on
the other hand, they're in completely different namespaces. So
it's a fairly simple matter of delegating from and (for reasons of
performance and resiliency) replicating that data into our
BIND-based infrastructure. We handle the DNS resolution and DHCP,
and all of the clients can resolve the AD names from us, even
though we're not the primary master for any of the zones. YMMV.
One of the drawbacks of this approach is that Domain Controllers
and certain other types of AD-related servers need to be added
twice -- once into the AD-integrated zone for AD infrastructure
purposes, and then again into a more generic zone, so that the
proper forward/reverse mappings are created and kept in sync.
Ideally, AD would generate outbound Dynamic Updates for the
maintenance of reverse records for their resources, if they don't
happen to control the relevant reverse zone(s), but good luck with
that -- it's not in Microsoft's own best economic interests to
foster interoperability with non-Microsoft DNS server
implementations...<br>
<br>
- Kevin<br>
<br>
On 10/18/2012 2:03 PM, Aaron Thompson wrote:<br>
</div>
<blockquote
cite="mid:FA42724F-31BE-4EDA-9844-E7E90BC4FC93@berklee.edu"
type="cite">
<meta http-equiv="Content-Type" content="text/html;
charset=ISO-8859-1">
Hi All,<br>
<br>
I'm hopping to get some feedback from people who use ISC Bind and
DHCPD in Active Directory environments.<br>
<br>
Currently we use Bind/DHCPD for dynamic DNS and DHCP. It's been a
pretty stable service, redundant and we are polling statistics
with Cacti. There is concern by Management of using a somewhat
non standard approach for Active Directory SRV records being
handled by ISC services and not AD.<br>
<br>
The options we are looking at is migrating to AD for DNS and DHCP
services or to have Bind/DHCPD handle SRV records for AD.<br>
<br>
Some technical info on our our BIND environment.<br>
<br>
Some Client Identifiers<br>
300 DHCP Pools<br>
Dynamic DNS<br>
Cacti Graphs - Reporting<br>
Syslog via Splunk<br>
<br>
Overall it's been a very stable design for the last 5+ years.<br>
<br>
If you have any relevant feed back I would appreciate it. I'm
looking for information on experience with Active Directory
integration with ISC or if anyone has had problems/stability
issues with AD doing DNS/DHCP or AD working with ISC.<br>
<br>
Thanks in advance.<br>
<br>
Here's a brief <a moz-do-not-send="true"
href="http://www.surveymonkey.com/s/2VYNKWR">survey</a> for
Schools that have ISC running in an AD environment.<br>
<br>
<a moz-do-not-send="true"
href="http://www.surveymonkey.com/s/2VYNKWR">http://www.surveymonkey.com/s/2VYNKWR</a><br>
<br>
-<br>
Aaron Thompson<br>
Network Architect for IT Operations<br>
<br>
Berklee College of Music <br>
1140 Boylston Street, MS-186-NETT<br>
Boston, MA 02215-3693<br>
<br>
<a class="moz-txt-link-abbreviated" href="http://www.berklee.edu">www.berklee.edu</a><br>
617.747.8656<br>
<br>
<div>
<span class="Apple-style-span" style="border-collapse: separate;
color: rgb(0, 0, 0); font-family: Helvetica; font-style:
normal; font-variant: normal; font-weight: normal;
letter-spacing: normal; line-height: normal; orphans: 2;
text-align: -webkit-auto; text-indent: 0px; text-transform:
none; white-space: normal; widows: 2; word-spacing: 0px;
-webkit-border-horizontal-spacing: 0px;
-webkit-border-vertical-spacing: 0px;
-webkit-text-decorations-in-effect: none;
-webkit-text-size-adjust: auto; -webkit-text-stroke-width:
0px; font-size: medium; ">-<br>
Aaron Thompson<br>
Network Architect for IT Operations<br>
<br>
Berklee College of Music <br>
1140 Boylston Street, MS-186-NETT<br>
Boston, MA 02215-3693<br>
<br>
<a class="moz-txt-link-abbreviated" href="http://www.berklee.edu">www.berklee.edu</a><br>
617.747.8656</span>
</div>
<br>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Please visit <a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list
bind-users mailing list
<a class="moz-txt-link-abbreviated" href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>
<a class="moz-txt-link-freetext" href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></pre>
</blockquote>
<br>
<br>
</body>
</html>