Hello,

I have been trying for a couple of days to get Bind to function as a site-specific DNS in our AD-DNS domiain.
We have multiple sites, and want to be able to write "ping kickstart" and get respons from the local kickstart-server. This is almost imposible in windows, so the windows-admins handed the job to me.
I still want to use AD as the main DNS, and use bind to define a couple of site-specific entries.

The sites have different ip-ranges, so I have been able to use "view" and get a different zone-file on different sub-networks.
The problem is that, as soon as i start using my bind-server, i am not able to ping anything that is not in my zone-file.
Have used many hours on google the last days without any luck.
Hope you guys can help me


Best regards,
Sindre
Norway

I don't believe you can do it this way without running a separate domain or a subdomain of the AD namespace, but the AD guys would need to add forwarders or delegate the subdomain to you in either case. The clients would need to specify kickstart.<some_domain>.<tld> or kickstart.<subdomain>.<ad> depending on which way you decide to go unless you add the new domain into the search list for every client which is a simple change (I'm assuming the AD guys manage DHCP as well?)

I have been able to use my Bind DNS-server and forward every request, by using "type stub". "type forward" will ofcourse do the same thing.
But then it ignores every entry in my zone-file.

I'm not sure that's the correct use of stub zones, I don't believe you're supposed to add entries to it as it operates like a slave but only transfers NS, SOA and glue records.

I don't think that is the correct use of Stub either, but it worked a bit better than Master.

So you don't think i will be able to use Bind as a "man in the middle"?

Probably not .. usually it's either authoritative for a domain or not - not a bit of both. I could be wrong but I've never seen bind do this, if you have some python skills you could possibly modify http://code.activestate.com/recipes/...ke-dns-server/ to do what you want, but it wouldn't really be a production quality solution. I'd suggest you go with one of the 2 options in my first response.