Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have to delegate domain for AD serwers. Let say example.com and I'm using Bind(dns.bind.com) on CentOS.

I added proprer configuration to named.conf and using A,NS records delegate domain to AD servers with DNS service. After that all questions should be transfered to those AD(lets call them dc1.example.com and dc2.example.com) servers even when I'm asking my DNS BIND (or am I wrong?)

Now when I execute : dig @dns.bind.com example.com A I get nothing but when execute dig @dns.bind.com example.com A I get nice answare pointing to ip of dc1.example.com (and that is correct).

Now I'm not AD administrator, I don't even have access to that AD servers. I'm admin of dns.bind.com so maybe I don't know something...

On dns.bind.com I did something like that to delegate example.com to AD servers:

named.conf:


zone "example.com" {
       type master;
       file "example.com.hosts";
       allow-update   { none; };
       allow-transfer { aclgroup1; };
       allow-query    { any; };
       also-notify    { 192.168.1.105; 192.168.1.106; 192.168.2.10; 192.168.2.11; 192.168.3.23; }; 
   };

example.com.hosts:


$TTL 1H

@ SOA @ root (
            2013120401 ; serial number
            10M ; refresh
            30M ; retry
            10D ; expiry
            1H  ; minimum
)
                ;
                NS      dc1.example.com.
                NS      dc2.example.com.




dc1             A       10.0.1.101
dc2             A       10.0.1.102


Maybe this is wrong configuration for delegating whole domain? Before I was delegating only subdomains and not for using with AD (nobody camplained then ;) so I think that was working well).

share|improve this question
add comment

1 Answer 1

up vote 1 down vote accepted

if i understood your question correctly you would like to forward DNS requests to the AD DNS Server. For that you to not need any NS or A Record. Just forward the domain to the servers in named.conf

zone "domain.com" {
  type forward;
  forward only;
  forwarders { 10.0.1.101; 10.0.1.102; };
};
share|improve this answer
    
Yup that's the right answare. I did that and every thing works fine :) –  B14D3 Dec 6 '13 at 9:19
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.