samba - Mar 2012 - how to allow ISC dhcpd to add/update entries to bind9 with bind_dlz (samba4)

Hello all,

I have set up a samba4 server with bind9 and the bind_dlz module.
Everything is working as it should but now I need to allow the dhcp
server to add entries to the forwarding zone. Has anybody implemented
such a configuration ? Can this be done with the kerberos DNS dynamic
update configuration.

I want to achieve the following:

1) allow non-Windows machines (printers, ILO ...) to be added by dhcpd
2) allow Windows machines (joined to AD) to update their own entries

2 - already works with the configuration from samba wiki

Thank you for your kind help

best regards

Andreas

On 03/17/2012 10:00 AM, Andreas Oster wrote:
> Hello all,
>
> I have set up a samba4 server with bind9 and the bind_dlz module.
> Everything is working as it should but now I need to allow the dhcp
> server to add entries to the forwarding zone. Has anybody implemented
> such a configuration ? Can this be done with the kerberos DNS dynamic
> update configuration.
I had it working with flat file backend.
I think that the way dhcp and bind do their DDNS is different form the 
way windows do it's DDNS, as far as I know dlz_plugin only support the 
later one so far.
> I want to achieve the following:
>
> 1) allow non-Windows machines (printers, ILO ...) to be added by dhcpd
> 2) allow Windows machines (joined to AD) to update their own entries
>
> 2 - already works with the configuration from samba wiki
>
I put our DNS experts in direct copy maybe then can advise you better 
than I.

-- 
Matthieu Patou
Samba Team
http://samba.org

On 17/03/12 18:00, Andreas Oster wrote:
> I want to achieve the following:
>
> 1) allow non-Windows machines (printers, ILO ...) to be added by dhcpd
> 2) allow Windows machines (joined to AD) to update their own entries
>
> 2 - already works with the configuration from samba wiki
>
> Thank you for your kind help
>
> best regards
>
> Andreas
>
Hi
I'm not sure if his is what you mean but we have a lan of windows and 
linux clients under s4. Both win and Linux clients get their IP via 
dhcp. You can see the Kerberos dialogue reveal the IP when the box first 
connects. It is a different IP after each boot. So, if Linux counts as 
non windows, then yes, it works. We did nothing apart from adding the 
dlz stuff to bind.
Cheers,
Steve

Am 17.03.2012 18:00, schrieb Andreas Oster:
> Hello all,
> 
> I have set up a samba4 server with bind9 and the bind_dlz module.
> Everything is working as it should but now I need to allow the dhcp
> server to add entries to the forwarding zone. Has anybody implemented
> such a configuration ? Can this be done with the kerberos DNS dynamic
> update configuration.
> 
> I want to achieve the following:
> 
> 1) allow non-Windows machines (printers, ILO ...) to be added by dhcpd
> 2) allow Windows machines (joined to AD) to update their own entries
> 
> 2 - already works with the configuration from samba wiki
> 
> Thank you for your kind help
> 
> best regards
> 
> Andreas
> 
Hi all,

finally I got it up and running. I am using the script by Charles Tryon

http://blog.michael.kuron-germany.de/2011/02/isc-dhcpd-dynamic-dns-updates-against-secure-microsoft-dns/

best regards

Andreas