We have a very mixed network, with most clients being Debian Lenny, the rest Windows XP/Vista/7. The network itself is split into two segments (for technical reasons) called "corporate" and "engineering". On the "corporate" side all clients get their IP addresses from a Windows DHCP server and the dynamic updates into the Windows DNS work just fine. On the "engineering" side, clients get their IP addresses from a linux machine running the standard ISC DHCP server. Although this server is configured to do dynamic DNS updates, they actually don't work. Anybody got any advice on how to fix this?

Please note: dynamic updates from the clients directly into the DNS would work, but are not an option for us. So this is strictly on how make this work from an ISC DHCP server to a Windows DNS server.

  • Have you looked at the DNS server logs for information? – Jim B Mar 19 '10 at 16:34
  • Yes, and there is absolutely nothing in it. No warnings, no errors, nothing at all. – wolfgangsz Mar 22 '10 at 10:10

Personally, I would try running Wireshark to capture the traffic between the ISC DHPC server and your Windows DNS servers. The logging for Microsoft DNS is certainly not perfect, so this would be helpful.

That being said, are you restrict updates in DNS to "secure" updates (meaning authenticated connections only)? If so, my guess is that the ISC server cannot authenticate against the Windows DNS infrastructure and the updates are failing. I would try turning unsecured updates in that case assuming this is a private/trusted network.

  • 1
    Yes, this is a private network. I haven't checked yet, but I believe the default is for all domains in Windows DNS to only allow secure updates, so I would suspect that this is the case here (this was all set up yonks ago before my time and without any documentation) – wolfgangsz Mar 24 '10 at 10:12

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.