Re: ISC Bind in Active Directory

2012-11-02 Thread Carsten Strotmann
Hello Phil, Phil Mayers p.may...@imperial.ac.uk writes: On 10/24/2012 10:17 PM, Carsten Strotmann wrote: my experience is that it is safe to place clients in either a DNS domain with the same name as the AD domain, or in a subdomain of the AD domain. What does place mean, exactly?

Re: ISC Bind in Active Directory

2012-10-27 Thread Chuck Anderson
I don't disagree that broadcast netbios probably should be disabled (though it's not at our site, for historical reasons, and I'm not sure I'm willing to take on the monumental task of disabling it). WINS is slightly different, and the main reason to disable it is that it hides

Re: ISC Bind in Active Directory

2012-10-27 Thread Phil Mayers
On 10/27/2012 04:28 PM, Chuck Anderson wrote: I don't disagree that broadcast netbios probably should be disabled (though it's not at our site, for historical reasons, and I'm not sure I'm willing to take on the monumental task of disabling it). WINS is slightly different, and the main reason

Re: ISC Bind in Active Directory

2012-10-26 Thread Phil Mayers
On 10/25/2012 08:44 PM, Kevin Darcy wrote: On 10/24/2012 6:02 PM, Phil Mayers wrote: Hell, if you've got WINS running and broadcast netbios, I think it's still possible to log in with *no* working DNS at all. At the risk of getting *totally* off-topic, no-one who cares about security or

Re: ISC Bind in Active Directory

2012-10-24 Thread Kevin Darcy
On 10/24/2012 9:50 AM, Nicholas F Miller wrote: On Oct 24, 2012, at 7:12 AM, Matus UHLAR - fantomas wrote: We use Bind for all DNS including DDNS for our AD. We use GSS-TSIG to control what record types and machines can make dynamic updates to our AD zone. We use ISC's DHCP but don't allow it

Re: ISC Bind in Active Directory

2012-10-24 Thread Chris Buxton
On Oct 24, 2012, at 6:50 AM, Nicholas F Miller wrote: Scavenging is a concern but we didn't have much choice. Our AD is only one of many subdomains and our DHCP spans all of them. If we used DHCP for DDNS records we wouldn't be guaranteed unique names. By limiting DDNS to just the AD we are

Re: ISC Bind in Active Directory

2012-10-24 Thread Phil Mayers
On 24/10/12 16:54, Kevin Darcy wrote: Why do you feel the need to register clients in your AD domain at all? We register our clients outside of the AD domain via the DHCP server; Our experience is that this can cause (minor) problems. The basic issue is that, if you have an AD realm:

Re: ISC Bind in Active Directory

2012-10-24 Thread Carsten Strotmann
Hello Aaron, Aaron Thompson athomp...@berklee.edu writes: I have little experience in the AD arena for DNS/DHCP. Without being a too loaded question, with your experience is it possible or common to have a very knowledgeable understanding of the performance and health of an AD system

Re: ISC Bind in Active Directory

2012-10-24 Thread Carsten Strotmann
Hello Phil, Phil Mayers p.may...@imperial.ac.uk writes: Our experience is that this can cause (minor) problems. The basic issue is that, if you have an AD realm: EXAMPLE.COM ...and a machine: foo ...then windows tries very hard to stick its fingers in its ears, shout la la I am not

Re: ISC Bind in Active Directory

2012-10-24 Thread Phil Mayers
On 10/24/2012 10:17 PM, Carsten Strotmann wrote: my experience is that it is safe to place clients in either a DNS domain with the same name as the AD domain, or in a subdomain of the AD domain. What does place mean, exactly? Bear in mind that, unfortunately, Microsoft chose to embed DNS

Re: ISC Bind in Active Directory

2012-10-22 Thread Aaron Thompson
and the input on the survey! Survey Request: Active Directory with ISC Bind and DHCPD http://www.surveymonkey.com/s/2VYNKW Aaron - Aaron Thompson Network Architect for IT Operations Berklee College of Music 1140 Boylston Street, MS-186-NETT Boston, MA 02215-3693 www.berklee.edu 617.747.8656

Re: ISC Bind in Active Directory

2012-10-22 Thread Aaron Thompson
Michael, much appreciation for the feed back from our west coast Berkeley! You wouldn't know or have a copy of that Gartner paper would you?? Best, Aaron - Aaron Thompson Network Architect for IT Operations Berklee College of Music 1140 Boylston Street, MS-186-NETT Boston, MA

Re: ISC Bind in Active Directory

2012-10-22 Thread Aaron Thompson
Nicholas, Are you using AD or Bind for DNS/DHCP? I'm assuming your using AD for authentication. Thanks for the feed back and input on the survey! Survey Request: Active Directory with ISC Bind and DHCPD http://www.surveymonkey.com/s/2VYNKW - Aaron Thompson Network Architect for IT Operations

Re: ISC Bind in Active Directory

2012-10-22 Thread Aaron Thompson
Hi Carsten, Thanks for the feedback, a top notch summary! I have little experience in the AD arena for DNS/DHCP. Without being a too loaded question, with your experience is it possible or common to have a very knowledgeable understanding of the performance and health of an AD system similar

Re: ISC Bind in Active Directory

2012-10-22 Thread Nicholas F Miller
Request: Active Directory with ISC Bind and DHCPD http://www.surveymonkey.com/s/2VYNKW - Aaron Thompson Network Architect for IT Operations Berklee College of Music 1140 Boylston Street, MS-186-NETT Boston, MA 02215-3693 www.berklee.edu 617.747.8656 Twitter: @thomp318

Re: ISC Bind in Active Directory

2012-10-20 Thread Carsten Strotmann
Hello Aaron, Aaron Thompson athomp...@berklee.edu writes: I'm hopping to get some feedback from people who use ISC Bind and DHCPD in Active Directory environments. [...] If you have any relevant feed back I would appreciate it.  I'm looking for information on experience with Active

Re: ISC Bind in Active Directory

2012-10-19 Thread Barry S. Finkel
On 10/18/2012 3:17 PM, bind-users-requ...@lists.isc.org wrote: Hi All, I'm hopping to get some feedback from people who use ISC Bind and DHCPD in Active Directory environments. Currently we use Bind/DHCPD for dynamic DNS and DHCP. It's been a pretty stable service, redundant and we are

Re: ISC Bind in Active Directory

2012-10-19 Thread Nicholas F Miller
DDNS record scavenging is the only feature I'm aware of that MS DNS has that Bind doesn't . On the flip side, ISC Bind can ACL who can add certain record types to a dynamic zone using GSS-TSIG as well as supports views and ACLs for recursion. Everything else should be standard DNS.

Re: ISC Bind in Active Directory

2012-10-19 Thread Phil Mayers
Nicholas F Miller nicholas.mil...@colorado.edu wrote: DDNS record scavenging is the only feature I'm aware of that MS DNS has that Bind doesn't . On the flip side, ISC Bind can ACL who can add certain record types to a dynamic zone using GSS-TSIG as well as supports views and ACLs for recursion.

Re: ISC Bind in Active Directory

2012-10-19 Thread btb
On Oct 19, 2012, at 13.27, Phil Mayers wrote: Nicholas F Miller nicholas.mil...@colorado.edu wrote: DDNS record scavenging is the only feature I'm aware of that MS DNS has that Bind doesn't . On the flip side, ISC Bind can ACL who can add certain record types to a dynamic zone using

ISC Bind in Active Directory

2012-10-18 Thread Aaron Thompson
Hi All, I'm hopping to get some feedback from people who use ISC Bind and DHCPD in Active Directory environments. Currently we use Bind/DHCPD for dynamic DNS and DHCP. It's been a pretty stable service, redundant and we are polling statistics with Cacti. There is concern by Management of

Re: ISC Bind in Active Directory

2012-10-18 Thread Kevin Darcy
You should think of DNS hosting, DNS resolution and DHCP, as separate services that can either be put together on a single platform, or run on separate platforms in various combinations, interoperating with each other. Another important factor is whether your AD domain is colocated with a

Re: ISC Bind in Active Directory

2012-10-18 Thread Michael Sinatra
On 10/18/12 11:03 AM, Aaron Thompson wrote: Hi All, I'm hopping to get some feedback from people who use ISC Bind and DHCPD in Active Directory environments. Currently we use Bind/DHCPD for dynamic DNS and DHCP. It's been a pretty stable service, redundant and we are polling statistics

Re: ISC Bind in Active Directory

2012-10-18 Thread G.W. Haywood
Hi there, On Thu, 18 Oct 2012, bind-users-requ...@lists.isc.org wrote: ISC Bind in Active Directory (Aaron Thompson) I'm hopping Sometimes AD has that effect. :) to get some feedback from people who use ISC Bind and DHCPD in Active Directory environments. I've been working on a client's