Prev: KERNEL - Thermal, fan, processor and other modules built-in
Next: Getting updates into Fedora: best procedure?
From: Nico Kadel-Garcia on 16 Dec 2009 05:45
Some time back, I growsed here about the difficulty keeping a static
Linux server's DNS information alive in a Windows Active Directory
server that had DNS expiration turned off. There turn out to be two
1) Use dynamic DNS on the Linux client. This will keep refreshing the
DNS information, and on RHEL is done by setting up a '/etc/dhclient-
eth0.conf' file with the relevant information. This particularly
requires dynamic DNS to *not* require authentication on the Active
Directory server to set DNS information, so it requires either passive
cooperation by the Active Directory manager, or their being security
careless enough not to require authentication. But this is not an
uncommon setup, and it works.
2) Assign a subdomain for the Linux hostname that has only the Linux
hostname's A record, any relevant subdomains, and possibly NS records,
in it. Set *that* subdomain to be static.
For example, for mymachine.domain, assign a subdomain on Active
Directory for the name 'linuxhost.domain' that has NS records pointing
to the Active Directory servers, and an A record for linuxhost.domain,
and if you want a CNAME or A record for 'www.linuxhost.domain'. This
solution is more of a pain in the neck for the Active Directory
server, but it's very stable. And in environments where there are only
a few critical Linux servers and hundreds or thousands of Windows
desktops for whom expiring DNS is so useful, it's workable.
Mind you, I personally think that expiring DNS was a bad idea from the
start and should never have been permitted, but it has its uses for
laptops that hop from domain to domain.
From: Wanna-Be Sys Admin on 27 Dec 2009 06:33
Nico Kadel-Garcia wrote:
> Some time back, I growsed here about the difficulty keeping a static
> Linux server's DNS information alive in a Windows Active Directory
So, was this really a Linux issue/question?
Not really a wanna-be, but I don't know everything.