LinuxQuestions.org
Support LQ: Use code LQ3 and save $3 on Domain Registration
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices



Reply
 
Search this Thread
Old 08-22-2003, 04:36 PM   #1
GraemeK
Member
 
Registered: Aug 2003
Location: Essex, UK
Distribution: Windoze 2000, Fedora Core 3
Posts: 325

Rep: Reputation: 30
adding win 2000 server domain controller, bind dns


Hi,

I have a BIND dns server working fine. I also have a windows 2000 server acting as a domain controller.

When i was configuring the 2000 machine it couldnt find the domain even though i gave it the dns ip.

i went to my 2000 workstation and tried to join the new domain and failed. saying there isnt a dns server for this domain!

i must be missing an entry in my zone file to point to the 2000 server?

i've given the 2000 server a host name of p750.xxxx.com

and an entry in the zone file to say p750 IN A ip address....

if i go to ping and type the full host name it works fine.

but windows finding a domain fails???????????

any ideas?

thanks
 
Old 08-22-2003, 08:01 PM   #2
GraemeK
Member
 
Registered: Aug 2003
Location: Essex, UK
Distribution: Windoze 2000, Fedora Core 3
Posts: 325

Original Poster
Rep: Reputation: 30
is there no easy way to do this?
 
Old 08-22-2003, 09:56 PM   #3
fauxcrye
LQ Newbie
 
Registered: Aug 2003
Location: Seattle, WA
Distribution: Redhat
Posts: 3

Rep: Reputation: 0
Windows 2000 domains do a lot of stuff in their DNS records that go beyond what most people usually use. The best way to see it is simply to add the Microsoft DNS server (from the win2k disk) to your primary domain controller and then setup your bind server to act as a secondary dns server for the domain (which works very well).

If you don't want to do that ... I can give you some hints about the DNS and Windows 2000.

Basically Windows 2000 domains completely depend on DNS to find important services such as LDAP, PRIMARY DOMAIN CONTROLLER, and all that jazz.

Here is some example lines from a Windows 2000 domain ready bind file.

$ORIGIN _tcp.default-first-site-name._sites.dc._msdcs.domain.com.
_kerberos SRV 0 100 88 pdc.domain.com.
SRV 0 100 88 sdc.domain.com.
_ldap SRV 0 100 389 pdc.domain.com.
SRV 0 100 389 sdc.domain.com.
$ORIGIN dc._msdcs.domain.com.
$ORIGIN _tcp.dc._msdcs.domain.com.
_kerberos SRV 0 100 88 pdc.domain.com.
SRV 0 100 88 sdc.domain.com.
_ldap SRV 0 100 389 pdc.domain.com.
SRV 0 100 389 sdc.domain.com.

870051f0-3005-8095-bc1d-611058767aef CNAME pdc.domain.com.

And this goes on and on ... It also enters what look like SID's in some of the records for the machines.

that's the reason why I ended up just letting the Windows 2000 Server handle its own domain's DNS file which gets exported to the bind server. I think you might be able to setup it up on the Windows 2000 PDC and then convert your secondary record on your bind server to a primary and the windows server will be fine.

You might also trysetting the linux server as primary server but allowing the Windows 2000 PDC to update the zone file for the domain. This should allow it to write its services and other information to the zone.
 
Old 08-22-2003, 10:10 PM   #4
Electric_Blue
Member
 
Registered: Aug 2003
Distribution: RedHat
Posts: 35

Rep: Reputation: 15
From what I understand, this won't be fully supported in samba until version 3rc3.

They do have winbind working now, but it is difficult to set up correctly. Might hop on the samba general email list to get some more tips on this. Lots of those guys are setting this up right now.

This is good nfo though. I was unaware of the general need for DNS in win2k and plan to migrate to a samba PDC in the near future.

Thanks!
 
Old 08-23-2003, 08:05 AM   #5
GraemeK
Member
 
Registered: Aug 2003
Location: Essex, UK
Distribution: Windoze 2000, Fedora Core 3
Posts: 325

Original Poster
Rep: Reputation: 30
hi,

thanks for your advice...

i only want my dns, web, www to be on 24/7 everything else can be switched off at night if need be.

therefore i propose to create a seperate fake domain for w2k and set it as master etc etc...

then setup my real domain as master on my bind system.

my workstations will point to the w2k box for dns etc etc but my real domain will be referenced by the root servers to my bind box?

therefore i can in theory have two seperate domains running.

will this work?
 
Old 08-23-2003, 05:52 PM   #6
fauxcrye
LQ Newbie
 
Registered: Aug 2003
Location: Seattle, WA
Distribution: Redhat
Posts: 3

Rep: Reputation: 0
The "by the book" way would be just to create a subdomain of your real domain and make that the windows 2K domain.

Sure your windows machines would have ugly names like ...

machinename.win2k.domain.com but you can CNAME them some shorter names you if you want and when it comes to file sharing they will still answer to \\machinename without any problems.

Just remember to run the win2k domain in mixed mode so you can add samba machines if you want or pre-win2k machines.

In case you're wondering I had to learn all this win stuff doing a very mixed office scene. I work in radio where you end up with a huge hodge podge of machines ... a lot of them running everything from mac to dos to XP and I have thrown a whole bank of linux machines on top to usher in the stable backbone and web services for it. In my particular situation i ended up running two groups of DNS servers ... one for the private network and DMZ's and one for the public internet needs.
 
Old 08-23-2003, 06:44 PM   #7
GraemeK
Member
 
Registered: Aug 2003
Location: Essex, UK
Distribution: Windoze 2000, Fedora Core 3
Posts: 325

Original Poster
Rep: Reputation: 30
hi

thanks

i was having a nightmare today with win 2000 dns. when ending in .com (it was a fake domain) even though it was set to master...

anyway i ended up using a domain with no suffix i.e. "domain-name"

G
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Fedora Core 4 in Win 2000/03 Domain vrooom305 Fedora 3 08-18-2005 04:54 PM
Authentication of Linux machines from windows 2000 domain controller jomy Linux - Networking 1 12-05-2004 03:25 AM
Linux to get authenticated by win 2000 domain ctrl jomy Linux - Networking 1 12-01-2004 10:46 AM
SAMBA (again) using a Win-Domain-Controller Lutzer Linux - Networking 3 07-23-2002 12:28 PM
BIND DNS for Windows 2000 clients narcoterrorist Linux - Networking 1 05-07-2002 06:19 PM


All times are GMT -5. The time now is 06:56 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration