Win2k DNS getting Bind updates

[Guest]

Can a Windows 2000 AD DNS server get updates from a Bind 9 unix box ?

 

[Jonathan de Boyne Pollard]

I> Can a Windows 2000 AD DNS server get updates from a Bind 9 unix box ?

Yes.

 

[Steve Duff [MVP]]

Zone transfers (both axfr and ixfr) from BIND 9 to Win2K
standard secondaries work just fine for the most part.

Secure transfers using native DNS capabilities is
not possible though as the two systems use differing
mechanisms for encryption and authentication,
and AD-integration is of course, not a choice.

Steve Duff, MCSE
Ergodic Systems, Inc.

 

[Kenneth Porter]

Zone transfers (both axfr and ixfr) from BIND 9 to Win2K
standard secondaries work just fine for the most part.

It should also be pointed out that nsupdate can be used to send updates
(not transfers) from a *nix box to Win2k. nsupdate is in the utilities part
of BIND, but it doesn't require that the DNS server be running. It's
typically used by *nix DHCP clients to register with DNS.

Secure transfers using native DNS capabilities is
not possible though as the two systems use differing
mechanisms for encryption and authentication

This also applies to nsupdate.

BTW, there's a NT port of BIND, so you can use nsupdate from the port to
send unauthenticated updates to a Win2k server "by hand", and you can use
it to send authenticated updates to a BIND server.