LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Server
User Name
Password
Linux - Server This forum is for the discussion of Linux Software used in a server related context.

Notices

Reply
 
Search this Thread
Old 09-23-2010, 01:17 PM   #1
jfmorales
LQ Newbie
 
Registered: Mar 2009
Posts: 11

Rep: Reputation: 0
Question Register on Windows DNS Without Joining Active Directory Domain


Can a Linux system use Samba to register on a Windows DNS without joining the Windows Active Directory domain?

If so, does this require the Windows DNS server to allow nonsecure dynamic updates? Or is there some way to pass credentials with the DNS registration even though the Linux client is not in an Active Directory domain?

Thanks in advance for any advice.
 
Old 09-23-2010, 02:11 PM   #2
jamrock
Member
 
Registered: Jan 2003
Location: Kingston, Jamaica
Posts: 444

Rep: Reputation: 41
It is a good security practice to allow only secure dynamic updates on Windows domains. This means that the DNS server only accepts updates from machines that are members of the domain.

Accepting updates from machines that are not members of the domain is a big security risk. An administrative password is required to join a machine to a domain. This provides some level of control to ensure that only safe machines are updating DNS.

Is your Samba machine a server? Would it be okay to use a fixed address for it?

Last edited by jamrock; 09-23-2010 at 02:15 PM.
 
1 members found this post helpful.
Old 09-23-2010, 03:02 PM   #3
jfmorales
LQ Newbie
 
Registered: Mar 2009
Posts: 11

Original Poster
Rep: Reputation: 0
jamrock, Thanks for your reply.
>> It is a good security practice to allow only secure dynamic updates on Windows domains.

That makes sense. Is it possible for a Linux Samba client to register securely in Windows DNS without joining the Active Directory domain? I'm not sure how the credentials would be supplied or evaluated in that case.

>> Is your Samba machine a server? Would it be okay to use a fixed address for it?

We're talking about Linux systems that are running just a Samba client and need to register in Windows DNS.

Thanks, Joseph
 
Old 09-23-2010, 08:07 PM   #4
jamrock
Member
 
Registered: Jan 2003
Location: Kingston, Jamaica
Posts: 444

Rep: Reputation: 41
I don't think it is even possible for Windows clients to do secure dynamic updates without being a part of the Windows domain.

I have never tried doing dynamic updates of Windows DNS with a Samba client.

Take a look at this document
http://technet.microsoft.com/en-us/l...8WS.10%29.aspx
Quote:
Secure dynamic update restricts DNS zone updates to only those computers that are authenticated and joined to the Active Directory domain where the DNS sever is located, and to the specific security settings defined in the ACLs for the DNS zone.

Last edited by jamrock; 09-23-2010 at 08:27 PM.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Replace windows Domain controller( Active directory , DNS, DHCP) with Linux box mid_nightslover Linux - Enterprise 1 03-26-2010 10:19 AM
Error joining Fedora 7 to Active Directory Domain OdinnBurkni Linux - Networking 3 07-06-2007 03:50 AM
Joining An Active Directory Domain Crashed_Again Linux - Networking 1 09-22-2006 09:58 AM
Windows XP joining Samba 3 domain looks for LDAP in DNS dlublink Linux - Networking 3 08-10-2005 06:52 PM
Joining a Linux workstation to a Active Directory Domain Terrence Hinds Linux - Networking 3 10-21-2004 05:45 AM


All times are GMT -5. The time now is 02:01 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration