Here comes my complicated or maybe not so complicated BIND9 question.
How do I let Windows clients to update there own A host records in BIND9?
I want to use BIND as a dns server for my windows2003 domain. For that my windows2003 server needs to be able to update the dns zone file.
now here is the windows help file i found on how to do this. Microsoft Corporation
basicly it said that this should be configured in your named.conf file.
Options {
directory "/etc/namedb"; //Working directory
};
//Zone entry for my Active Directory domain ad.mydom.com.
Zone "ad.mydom.com" IN {
type master;
file "db.ad.mydom.com";
allow-update { 4.2.2.3; dc2.; };
};
I’ll post my named.conf and my zone file at the end of the post.
now here is what i can do with my current DNS server.
I can ping the dns server and the windows2003 server by IP.
I can look up the ip of dns server in a windows client with the command “nslookup”.
I can ping the DNS server with its FQDN.
When promoting windows server2003 to domain controller it passes on the DNS diagnostic tool.
(this tool checks if the dns is corectly configured for dns updates)
Here is what I can’t do.
After the command: ipconfig /registerdns
the event viewer comes with a dns error
Event Type: Warning
Event Source: DnsApi
Event Category: None
Event ID: 11165
Date: 24-9-2008
Time: 19:13:31
User: N/A
Computer: WINSRVXXXX
Description:
The system failed to register host (A) resource records (RRs) for network adapter
with settings:
Adapter Name : {46338779-1A0A-4AF0-944D-C1A8CB00C4EF}
Host Name : winsrvxxxx
Primary Domain Suffix : pika.lan
DNS server list :
192.168.2.2
Sent update to server : 192.168.2.2
IP Address(es) :
192.168.2.7
The reason the system could not register these RRs was because the DNS server contacted refused the update request. The reasons for this might be (a) you are not allowed to update the specified DNS domain name, or (b) because the DNS server authoritative for this name does not support the DNS dynamic update protocol.
To register the DNS host (A) resource records using the specific DNS domain name and IP addresses for this adapter, contact your DNS server or network systems administrator.
For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.
Data:
0000: 2a 23 00 00 *#..
Wich means its somehow didn’t register with the dns.
Wich means I can’t ping the win2003 server by its FQDN
Here is some info on the systems.
Both are in Vmwareworkstation 6.5
The linux version is open suse 11.0 but I have Had the same problem in 10.3
static ip’s no DHCP
Here is the named.conf followed by the zone file.
## /etc/named.conf
options {
directory "/var/lib/named";
dump-file "/var/log/named_dump.db";
statistics-file "/var/log/named.stats";
listen-on-v6 { any; };
notify no;
};
zone "." in {
type hint;
file "root.hint";
};
zone "localhost" in {
type master;
file "localhost.zone";
};
zone "0.0.127.in-addr.arpa" in {
type master;
file "127.0.0.zone";
};
zone "pika.lan" in {
type master;
file "pika.zone";
allow-update { any; };
};
include "/etc/named.conf.include";
And here is the zone file.
$TTL 1W
@ IN SOA dns.pika.lan. niels.pika.lan. (
42 ; serial (d. adams)
2D ; refresh
4H ; retry
6W ; expiry
1W ) ; minimum
@ IN NS dns.pika.lan.
dns IN A 192.168.2.2
As far as I know this should allow me to to let any computer update the dns server.
There could be a mistake in the zone file if so point it out I never made those from scratch before so …
So, is there some option i am missing that would allow windows to update its own recors in the DNS?
Is this posible at all ?
As this is a test setup I don’t care about security.
I just want it to work.
And I have other means to make it secure either way.
quick recap.
Let windows clients update there own A Host information. How?
Thanks ahead,
Shikon 