Suffix searching is a client function, there is no explicit support for it in
BIND or any nameserver implementation.
The only incredibly ugly thing you could do in DNS to support shortname
resolution is set up a "fake" root zone containing the names you need to
resolve. But, you really don't want to go down that path. I consider it a
responsibility of DNS admins to push back on any unreasonable
shortname-resolution requests from their customers/end-users. There are *very*
few things left in today's technology ecosystem that *require* shortname
resolution. If it's just for _convenience_, then a management/political
decision needs to be made, weighing the efficiency/scaling needs of the
infrastructure, and the security/reliability risks of unexpected suffix
matching, against the "convenience" arguments of those asking for shortname
resolution.
DHCP supplies a single domain suffix (option 15) which Windows clients can use
for suffixing (but understand first the interactions between
Connection-specific Suffix, Primary Domain Suffix and Suffix Search List). That
should be sufficient for any residual shortname-resolution needs. Note that you
don't *have* to give the same option 15 value to everything in the same DHCP
scope. If you have a sufficiently-advanced DHCP server, you could tailor that
value according to, say, the "user class" set by the client and reported via
DHCP (see RFC 3004). It might be possible to tailor it based on other
parameters too (e.g. vendor class, RFC 3925), or combinations of parameters.
- Kevin
From: [email protected]
[mailto:[email protected]] On Behalf Of Julie Xu
Sent: Thursday, January 28, 2016 6:47 PM
To: [email protected]
Subject: RE: dns search list
Hi
As I understand that dns search option 119 is not work with MS client.
But, I do need make a dns search list to ask MS client search a dns list. Could
anyone advice me except group policy, do I have anyway to achive this point by
change something in bind?
Any comments will be appreciated
Thanks in advance
Julie
_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
from this list
bind-users mailing list
[email protected]
https://lists.isc.org/mailman/listinfo/bind-users
