| Author | Messages | |
cwhitmore
Posts:21
 | | 04/27/2008 4:08 PM |
| I have all of my servers in one location provding DNS to my remote offices via VPN connection. I'd like to setup local secondary or cache DNS servers in three of those remote offices, but I don't want to buy a full version of Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another freeware DNS server), as a secondary DNS that works with Active Directory?
Carlton.
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| listmail
Posts:463
 | | 04/27/2008 4:28 PM |
| I know of no reason why it wouldn't work on XP but if you do that and you serve more than 10 other machines I think it could possibly be a Windows license violation. I am not positive, I would ping Microsoft or your lawyer if you truly care. Microsoft isn't into the idea of people using Windows Client OSes as servers. That is why file sharing is also limited to 10 max connections.
You could also look at say throwing freebsd and bind on some machine as well and you will know you aren't in violation. FreeBSD is very lightweight, wouldn't require much of a machine to do. You could also run it as a virtual machine on one of your XP boxes... That also shouldn't be a license violation. Say get this VMWare virtual appliance - http://www.vmware.com/appliances/directory/63 and then install BIND and configure it.
Oh yeah... If you use DHCP, don't forget to set your "DNS Server" with a fixed IP. A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Carlton L. Whitmore Sent: Sunday, April 27, 2008 4:03 PM To: Activedir@Mail.Activedir.Org Subject: [ActiveDir] [OT] BIND as Secondary DNS?
I have all of my servers in one location provding DNS to my remote offices via VPN connection. I'd like to setup local secondary or cache DNS servers in three of those remote offices, but I don't want to buy a full version of Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another freeware DNS server), as a secondary DNS that works with Active Directory?
Carlton.
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| bdesmond
Posts:374
 | | 04/27/2008 4:38 PM |
| Just curious what is the point of running DNS in the field if everything else is central?
--brian
On Sun, Apr 27, 2008 at 4:02 PM, Carlton L. Whitmore < cwhitmore@advocacyinc.org> wrote:
> I have all of my servers in one location provding DNS to my remote offices > via VPN connection. I'd like to setup local secondary or cache DNS servers > in three of those remote offices, but I don't want to buy a full version of > Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another > freeware DNS server), as a secondary DNS that works with Active Directory? > > Carlton. > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ma/default.aspx >
-- Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
| | | |
| cwhitmore
Posts:21
 | | 04/27/2008 4:38 PM |
| I would like to provide a backup to our existing servers and offload some of the queries for a faster response.
________________________________
From: ActiveDir-owner@mail.activedir.org on behalf of Brian Desmond Sent: Sun 4/27/2008 3:33 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
Just curious what is the point of running DNS in the field if everything else is central?
--brian
On Sun, Apr 27, 2008 at 4:02 PM, Carlton L. Whitmore <cwhitmore@advocacyinc.org> wrote:
I have all of my servers in one location provding DNS to my remote offices via VPN connection. I'd like to setup local secondary or cache DNS servers in three of those remote offices, but I don't want to buy a full version of Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another freeware DNS server), as a secondary DNS that works with Active Directory?
Carlton.
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
-- Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
| | | |
| cwhitmore
Posts:21
 | | 04/27/2008 4:49 PM |
| Not necessarily, but I would like it to function as a backup DNS in the event our WAN link does go down.
________________________________
From: ActiveDir-owner@mail.activedir.org on behalf of Brian Desmond Sent: Sun 4/27/2008 3:41 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
Do the clients still have to go over the WAN to get to whatever they're resolving?
--brian
On Sun, Apr 27, 2008 at 4:36 PM, Carlton L. Whitmore <cwhitmore@advocacyinc.org> wrote:
I would like to provide a backup to our existing servers and offload some of the queries for a faster response.
________________________________
From: ActiveDir-owner@mail.activedir.org on behalf of Brian Desmond Sent: Sun 4/27/2008 3:33 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
Just curious what is the point of running DNS in the field if everything else is central?
--brian
On Sun, Apr 27, 2008 at 4:02 PM, Carlton L. Whitmore <cwhitmore@advocacyinc.org> wrote:
I have all of my servers in one location provding DNS to my remote offices via VPN connection. I'd like to setup local secondary or cache DNS servers in three of those remote offices, but I don't want to buy a full version of Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another freeware DNS server), as a secondary DNS that works with Active Directory?
Carlton.
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
-- Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
-- Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
| | | |
| AFidel
Posts:71
 | | 04/28/2008 9:41 AM |
| Well, it would depend on the number of workstations at the remote site. With SP2 MS limited the total number of incoming connections in the TCP stack to some small number (10?). This affects P2P apps so I would assume a DNS server handling more than a small handful of DNS clients would quickly grind to a halt and cause problems with the other clients as MS boxes tend to get very cranky if they have any sort of DNS hiccups.
Thanks, Andrew
"joe" <listmail@joeware.net> Sent by: ActiveDir-owner@mail.activedir.org 04/27/2008 04:28 PM Please respond to ActiveDir@mail.activedir.org
To <ActiveDir@mail.activedir.org> cc
Subject RE: [ActiveDir] [OT] BIND as Secondary DNS?
I know of no reason why it wouldn't work on XP but if you do that and you serve more than 10 other machines I think it could possibly be a Windows license violation. I am not positive, I would ping Microsoft or your lawyer if you truly care. Microsoft isn't into the idea of people using Windows Client OSes as servers. That is why file sharing is also limited to 10 max connections.
You could also look at say throwing freebsd and bind on some machine as well and you will know you aren't in violation. FreeBSD is very lightweight, wouldn't require much of a machine to do. You could also run it as a virtual machine on one of your XP boxes... That also shouldn't be a license violation. Say get this VMWare virtual appliance - http://www.vmware.com/appliances/directory/63 and then install BIND and configure it.
Oh yeah... If you use DHCP, don't forget to set your "DNS Server" with a fixed IP. A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Carlton L. Whitmore Sent: Sunday, April 27, 2008 4:03 PM To: Activedir@Mail.Activedir.Org Subject: [ActiveDir] [OT] BIND as Secondary DNS?
I have all of my servers in one location provding DNS to my remote offices via VPN connection. I'd like to setup local secondary or cache DNS servers in three of those remote offices, but I don't want to buy a full version of Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another freeware DNS server), as a secondary DNS that works with Active Directory?
Carlton.
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| RichardKline
Posts:10
 | | 04/28/2008 10:22 AM |
| First Nomination for Understatement of the Year award:
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe Sent: Sunday, April 27, 2008 4:28 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
...
A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| bdesmond
Posts:374
 | | 04/28/2008 10:42 AM |
| DNS lookups work primarily over UDP
--brian
On Mon, Apr 28, 2008 at 9:37 AM, <AFidel@ddrc.com> wrote:
> > Well, it would depend on the number of workstations at the remote site. > With SP2 MS limited the total number of incoming connections in the TCP > stack to some small number (10?). This affects P2P apps so I would assume a > DNS server handling more than a small handful of DNS clients would quickly > grind to a halt and cause problems with the other clients as MS boxes tend > to get very cranky if they have any sort of DNS hiccups. > > Thanks, > Andrew > > > *"joe" <listmail@joeware.net>* > Sent by: ActiveDir-owner@mail.activedir.org > > 04/27/2008 04:28 PM Please respond to > ActiveDir@mail.activedir.org > > To > <ActiveDir@mail.activedir.org> cc > Subject > RE: [ActiveDir] [OT] BIND as Secondary DNS? > > > > > I know of no reason why it wouldn't work on XP but if you do that and you > serve more than 10 other machines I think it could possibly be a Windows > license violation. I am not positive, I would ping Microsoft or your > lawyer > if you truly care. Microsoft isn't into the idea of people using Windows > Client OSes as servers. That is why file sharing is also limited to 10 max > connections. > > You could also look at say throwing freebsd and bind on some machine as > well > and you will know you aren't in violation. FreeBSD is very lightweight, > wouldn't require much of a machine to do. You could also run it as a > virtual > machine on one of your XP boxes... That also shouldn't be a license > violation. Say get this VMWare virtual appliance - > http://www.vmware.com/appliances/directory/63 and then install BIND and > configure it. > > Oh yeah... If you use DHCP, don't forget to set your "DNS Server" with a > fixed IP. A DNS server that is dynamically handed its address is NOT the > most useful device you could have on a network...  > > > joe > > > -- > O'Reilly Active Directory Third Edition - > http://www.joeware.net/win/ad3e.htm > > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Carlton L. > Whitmore > Sent: Sunday, April 27, 2008 4:03 PM > To: Activedir@Mail.Activedir.Org > Subject: [ActiveDir] [OT] BIND as Secondary DNS? > > I have all of my servers in one location provding DNS to my remote offices > via VPN connection. I'd like to setup local secondary or cache DNS servers > in three of those remote offices, but I don't want to buy a full version > of > Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another > freeware DNS server), as a secondary DNS that works with Active Directory? > > Carlton. > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ma/default.aspx > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ma/default.aspx > >
-- Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
| | | |
| listmail
Posts:463
 | | 04/28/2008 12:02 PM |
| Man glad someone caught that one... Was starting to think I lost my touch for a minute...
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Richard Kline Sent: Monday, April 28, 2008 10:20 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
First Nomination for Understatement of the Year award:
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe Sent: Sunday, April 27, 2008 4:28 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
...
A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| ken
Posts:58
 | | 04/28/2008 8:41 PM |
| Microsoft limited the number of half-open (i.e. still in negotiation) outgoing TCP connections to 10 in Windows XP SP2.
This has no effect on incoming connections AFAIK, and DNS doesn't typically use TCP anyway (it uses UDP)
So, this is irrelevant.
Cheers Ken
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of AFidel@ddrc.com Sent: Monday, 28 April 2008 11:37 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
Well, it would depend on the number of workstations at the remote site. With SP2 MS limited the total number of incoming connections in the TCP stack to some small number (10?). This affects P2P apps so I would assume a DNS server handling more than a small handful of DNS clients would quickly grind to a halt and cause problems with the other clients as MS boxes tend to get very cranky if they have any sort of DNS hiccups.
Thanks, Andrew
"joe" <listmail@joeware.net> Sent by: ActiveDir-owner@mail.activedir.org
04/27/2008 04:28 PM Please respond to ActiveDir@mail.activedir.org
To
<ActiveDir@mail.activedir.org>
cc
Subject
RE: [ActiveDir] [OT] BIND as Secondary DNS?
I know of no reason why it wouldn't work on XP but if you do that and you serve more than 10 other machines I think it could possibly be a Windows license violation. I am not positive, I would ping Microsoft or your lawyer if you truly care. Microsoft isn't into the idea of people using Windows Client OSes as servers. That is why file sharing is also limited to 10 max connections.
You could also look at say throwing freebsd and bind on some machine as well and you will know you aren't in violation. FreeBSD is very lightweight, wouldn't require much of a machine to do. You could also run it as a virtual machine on one of your XP boxes... That also shouldn't be a license violation. Say get this VMWare virtual appliance - http://www.vmware.com/appliances/directory/63 and then install BIND and configure it.
Oh yeah... If you use DHCP, don't forget to set your "DNS Server" with a fixed IP. A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Carlton L. Whitmore Sent: Sunday, April 27, 2008 4:03 PM To: Activedir@Mail.Activedir.Org Subject: [ActiveDir] [OT] BIND as Secondary DNS?
I have all of my servers in one location provding DNS to my remote offices via VPN connection. I'd like to setup local secondary or cache DNS servers in three of those remote offices, but I don't want to buy a full version of Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another freeware DNS server), as a secondary DNS that works with Active Directory?
Carlton.
| | | |
| TG
Posts:86
 | | 04/28/2008 10:47 PM |
| It uses udp until you have 10-12 DCs, after that it switches to TCP. So you can get cought with that limitation.
----- Original Message ----- From: "Ken Schaefer" [Ken@adOpenStatic.com] Sent: 04/28/2008 07:37 PM To: "ActiveDir@mail.activedir.org" <ActiveDir@mail.activedir.org> Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
Microsoft limited the number of half-open (i.e. still in negotiation) outgoing TCP connections to 10 in Windows XP SP2.
This has no effect on incoming connections AFAIK, and DNS doesn't typically use TCP anyway (it uses UDP)
So, this is irrelevant.
Cheers Ken
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of AFidel@ddrc.com Sent: Monday, 28 April 2008 11:37 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
Well, it would depend on the number of workstations at the remote site. With SP2 MS limited the total number of incoming connections in the TCP stack to some small number (10?). This affects P2P apps so I would assume a DNS server handling more than a small handful of DNS clients would quickly grind to a halt and cause problems with the other clients as MS boxes tend to get very cranky if they have any sort of DNS hiccups.
Thanks, Andrew
"joe" <listmail@joeware.net> Sent by: ActiveDir-owner@mail.activedir.org
04/27/2008 04:28 PM Please respond to ActiveDir@mail.activedir.org
To
<ActiveDir@mail.activedir.org>
cc
Subject
RE: [ActiveDir] [OT] BIND as Secondary DNS?
I know of no reason why it wouldn't work on XP but if you do that and you serve more than 10 other machines I think it could possibly be a Windows license violation. I am not positive, I would ping Microsoft or your lawyer if you truly care. Microsoft isn't into the idea of people using Windows Client OSes as servers. That is why file sharing is also limited to 10 max connections.
You could also look at say throwing freebsd and bind on some machine as well and you will know you aren't in violation. FreeBSD is very lightweight, wouldn't require much of a machine to do. You could also run it as a virtual machine on one of your XP boxes... That also shouldn't be a license violation. Say get this VMWare virtual appliance - http://www.vmware.com/appliances/directory/63 and then install BIND and configure it.
Oh yeah... If you use DHCP, don't forget to set your "DNS Server" with a fixed IP. A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Carlton L. Whitmore Sent: Sunday, April 27, 2008 4:03 PM To: Activedir@Mail.Activedir.Org Subject: [ActiveDir] [OT] BIND as Secondary DNS?
I have all of my servers in one location provding DNS to my remote offices via VPN connection. I'd like to setup local secondary or cache DNS servers in three of those remote offices, but I don't want to buy a full version of Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another freeware DNS server), as a secondary DNS that works with Active Directory?
Carlton.
The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
| | | |
| ken
Posts:58
 | | 04/28/2008 10:52 PM |
| If we’re talking about running a 3rd party DNS server (BIND) on Windows XP, then what does the number of DCs have to do with it?
And if the limit applies only to half-open outgoing TCP connections, then this shouldn’t be an issue with a BIND server anyway should it? There’s no limit on incoming connections that I’m aware of.
But happy to be corrected if I’m misunderstanding the situation.
Thanks
Cheers Ken
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Tony Gordon Sent: Tuesday, 29 April 2008 12:43 PM To: ActiveDir Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
It uses udp until you have 10-12 DCs, after that it switches to TCP. So you can get cought with that limitation.
________________________________
----- Original Message ----- From: "Ken Schaefer" [Ken@adOpenStatic.com] Sent: 04/28/2008 07:37 PM To: "ActiveDir@mail.activedir.org" <ActiveDir@mail.activedir.org> Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
Microsoft limited the number of half-open (i.e. still in negotiation) outgoing TCP connections to 10 in Windows XP SP2.
This has no effect on incoming connections AFAIK, and DNS doesn’t typically use TCP anyway (it uses UDP)
So, this is irrelevant.
Cheers Ken
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of AFidel@ddrc.com Sent: Monday, 28 April 2008 11:37 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
Well, it would depend on the number of workstations at the remote site. With SP2 MS limited the total number of incoming connections in the TCP stack to some small number (10?). This affects P2P apps so I would assume a DNS server handling more than a small handful of DNS clients would quickly grind to a halt and cause problems with the other clients as MS boxes tend to get very cranky if they have any sort of DNS hiccups.
Thanks, Andrew "joe" <listmail@joeware.net> Sent by: ActiveDir-owner@mail.activedir.org
04/27/2008 04:28 PM Please respond to ActiveDir@mail.activedir.org
To
<ActiveDir@mail.activedir.org>
cc
Subject
RE: [ActiveDir] [OT] BIND as Secondary DNS?
I know of no reason why it wouldn't work on XP but if you do that and you serve more than 10 other machines I think it could possibly be a Windows license violation. I am not positive, I would ping Microsoft or your lawyer if you truly care. Microsoft isn't into the idea of people using Windows Client OSes as servers. That is why file sharing is also limited to 10 max connections.
You could also look at say throwing freebsd and bind on some machine as well and you will know you aren't in violation. FreeBSD is very lightweight, wouldn't require much of a machine to do. You could also run it as a virtual machine on one of your XP boxes... That also shouldn't be a license violation. Say get this VMWare virtual appliance - http://www.vmware.com/appliances/directory/63 and then install BIND and configure it.
Oh yeah... If you use DHCP, don't forget to set your "DNS Server" with a fixed IP. A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Carlton L. Whitmore Sent: Sunday, April 27, 2008 4:03 PM To: Activedir@Mail.Activedir.Org Subject: [ActiveDir] [OT] BIND as Secondary DNS?
I have all of my servers in one location provding DNS to my remote offices via VPN connection. I'd like to setup local secondary or cache DNS servers in three of those remote offices, but I don't want to buy a full version of Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another freeware DNS server), as a secondary DNS that works with Active Directory?
Carlton. ________________________________ The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
| | | |
| bdesmond
Posts:374
 | | 04/28/2008 10:57 PM |
| The number of DCs has nothing to do with it. The transition is based on packet length. You're seeing this depending on the length of the DC names getting you somewhere around that transition point at 10-12 boxes.
--brian
On Mon, Apr 28, 2008 at 10:42 PM, Tony Gordon <Tony.Gordon@hewitt.com> wrote:
> It uses udp until you have 10-12 DCs, after that it switches to TCP. So > you can get cought with that limitation. > ------------------------------ > > ----- Original Message ----- > * From: *"Ken Schaefer" [Ken@adOpenStatic.com] > * Sent: *04/28/2008 07:37 PM > * To: *"ActiveDir@mail.activedir.org" <ActiveDir@mail.activedir.org> > * Subject: *RE: [ActiveDir] [OT] BIND as Secondary DNS? > > Microsoft limited the number of half-open (i.e. still in negotiation) > outgoing TCP connections to 10 in Windows XP SP2. > > > > This has no effect on incoming connections AFAIK, and DNS doesn't > typically use TCP anyway (it uses UDP) > > > > So, this is irrelevant. > > > > Cheers > > Ken > > > > *From:* ActiveDir-owner@mail.activedir.org [mailto: > ActiveDir-owner@mail.activedir.org] *On Behalf Of *AFidel@ddrc.com > *Sent:* Monday, 28 April 2008 11:37 PM > *To:* ActiveDir@mail.activedir.org > *Subject:* RE: [ActiveDir] [OT] BIND as Secondary DNS? > > > > > Well, it would depend on the number of workstations at the remote site. > With SP2 MS limited the total number of incoming connections in the TCP > stack to some small number (10?). This affects P2P apps so I would assume a > DNS server handling more than a small handful of DNS clients would quickly > grind to a halt and cause problems with the other clients as MS boxes tend > to get very cranky if they have any sort of DNS hiccups. > > Thanks, > Andrew > > *"joe" <listmail@joeware.net>* > Sent by: ActiveDir-owner@mail.activedir.org > > 04/27/2008 04:28 PM > > Please respond to > ActiveDir@mail.activedir.org > > To > > <ActiveDir@mail.activedir.org> > > cc > > Subject > > RE: [ActiveDir] [OT] BIND as Secondary DNS? > > > > > > > I know of no reason why it wouldn't work on XP but if you do that and you > serve more than 10 other machines I think it could possibly be a Windows > license violation. I am not positive, I would ping Microsoft or your > lawyer > if you truly care. Microsoft isn't into the idea of people using Windows > Client OSes as servers. That is why file sharing is also limited to 10 max > connections. > > You could also look at say throwing freebsd and bind on some machine as > well > and you will know you aren't in violation. FreeBSD is very lightweight, > wouldn't require much of a machine to do. You could also run it as a > virtual > machine on one of your XP boxes... That also shouldn't be a license > violation. Say get this VMWare virtual appliance - > http://www.vmware.com/appliances/directory/63 and then install BIND and > configure it. > > Oh yeah... If you use DHCP, don't forget to set your "DNS Server" with a > fixed IP. A DNS server that is dynamically handed its address is NOT the > most useful device you could have on a network...  > > > joe > > > -- > O'Reilly Active Directory Third Edition - > http://www.joeware.net/win/ad3e.htm > > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Carlton L. > Whitmore > Sent: Sunday, April 27, 2008 4:03 PM > To: Activedir@Mail.Activedir.Org > Subject: [ActiveDir] [OT] BIND as Secondary DNS? > > I have all of my servers in one location provding DNS to my remote offices > via VPN connection. I'd like to setup local secondary or cache DNS servers > in three of those remote offices, but I don't want to buy a full version > of > Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another > freeware DNS server), as a secondary DNS that works with Active Directory? > > Carlton. > > ------------------------------ > The information contained in this e-mail and any accompanying documents > may contain information that is confidential or otherwise protected from > disclosure. If you are not the intended recipient of this message, or if > this message has been addressed to you in error, please immediately alert > the sender by reply e-mail and then delete this message, including any > attachments. Any dissemination, distribution or other use of the contents of > this message by anyone other than the intended recipient is strictly > prohibited. All messages sent to and from this e-mail address may be > monitored as permitted by applicable law and regulations to ensure > compliance with our internal policies and to protect our business. E-mails > are not secure and cannot be guaranteed to be error free as they can be > intercepted, amended, lost or destroyed, or contain viruses. You are deemed > to have accepted these risks if you communicate with us by e-mail. > >
-- Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
| | | |
| TG
Posts:86
 | | 04/29/2008 7:42 AM |
| Correct, I was just trying to save myself some typing on the phone.
Ken, after responce size exceeds udp dns packet size limit (512 bites, iirc) dns switches to tcp protocol. It usually happens on quering srv records. So if there is a limit of ten outgoing tcp connections that could be a nasty issue to troubleshoot when some of your clients are getting responces and some are not fepending on timing. The likelihood of that happenning, of cource, depends on the number of clients.
----- Original Message ----- From: "Brian Desmond" [brian@briandesmond.com] Sent: 04/28/2008 09:53 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
The number of DCs has nothing to do with it. The transition is based on packet length. You're seeing this depending on the length of the DC names getting you somewhere around that transition point at 10-12 boxes.
--brian
On Mon, Apr 28, 2008 at 10:42 PM, Tony Gordon <Tony.Gordon@hewitt.com> wrote:
> It uses udp until you have 10-12 DCs, after that it switches to TCP. So > you can get cought with that limitation. > ------------------------------ > > ----- Original Message ----- > * From: *"Ken Schaefer" [Ken@adOpenStatic.com] > * Sent: *04/28/2008 07:37 PM > * To: *"ActiveDir@mail.activedir.org" <ActiveDir@mail.activedir.org> > * Subject: *RE: [ActiveDir] [OT] BIND as Secondary DNS? > > Microsoft limited the number of half-open (i.e. still in negotiation) > outgoing TCP connections to 10 in Windows XP SP2. > > > > This has no effect on incoming connections AFAIK, and DNS doesn't > typically use TCP anyway (it uses UDP) > > > > So, this is irrelevant. > > > > Cheers > > Ken > > > > *From:* ActiveDir-owner@mail.activedir.org [mailto: > ActiveDir-owner@mail.activedir.org] *On Behalf Of *AFidel@ddrc.com > *Sent:* Monday, 28 April 2008 11:37 PM > *To:* ActiveDir@mail.activedir.org > *Subject:* RE: [ActiveDir] [OT] BIND as Secondary DNS? > > > > > Well, it would depend on the number of workstations at the remote site. > With SP2 MS limited the total number of incoming connections in the TCP > stack to some small number (10?). This affects P2P apps so I would assume a > DNS server handling more than a small handful of DNS clients would quickly > grind to a halt and cause problems with the other clients as MS boxes tend > to get very cranky if they have any sort of DNS hiccups. > > Thanks, > Andrew > > *"joe" <listmail@joeware.net>* > Sent by: ActiveDir-owner@mail.activedir.org > > 04/27/2008 04:28 PM > > Please respond to > ActiveDir@mail.activedir.org > > To > > <ActiveDir@mail.activedir.org> > > cc > > Subject > > RE: [ActiveDir] [OT] BIND as Secondary DNS? > > > > > > > I know of no reason why it wouldn't work on XP but if you do that and you > serve more than 10 other machines I think it could possibly be a Windows > license violation. I am not positive, I would ping Microsoft or your > lawyer > if you truly care. Microsoft isn't into the idea of people using Windows > Client OSes as servers. That is why file sharing is also limited to 10 max > connections. > > You could also look at say throwing freebsd and bind on some machine as > well > and you will know you aren't in violation. FreeBSD is very lightweight, > wouldn't require much of a machine to do. You could also run it as a > virtual > machine on one of your XP boxes... That also shouldn't be a license > violation. Say get this VMWare virtual appliance - > http://www.vmware.com/appliances/directory/63 and then install BIND and > configure it. > > Oh yeah... If you use DHCP, don't forget to set your "DNS Server" with a > fixed IP. A DNS server that is dynamically handed its address is NOT the > most useful device you could have on a network...  > > > joe > > > -- > O'Reilly Active Directory Third Edition - > http://www.joeware.net/win/ad3e.htm > > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Carlton L. > Whitmore > Sent: Sunday, April 27, 2008 4:03 PM > To: Activedir@Mail.Activedir.Org > Subject: [ActiveDir] [OT] BIND as Secondary DNS? > > I have all of my servers in one location provding DNS to my remote offices > via VPN connection. I'd like to setup local secondary or cache DNS servers > in three of those remote offices, but I don't want to buy a full version > of > Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another > freeware DNS server), as a secondary DNS that works with Active Directory? > > Carlton. > > ------------------------------ > The information contained in this e-mail and any accompanying documents > may contain information that is confidential or otherwise protected from > disclosure. If you are not the intended recipient of this message, or if > this message has been addressed to you in error, please immediately alert > the sender by reply e-mail and then delete this message, including any > attachments. Any dissemination, distribution or other use of the contents of > this message by anyone other than the intended recipient is strictly > prohibited. All messages sent to and from this e-mail address may be > monitored as permitted by applicable law and regulations to ensure > compliance with our internal policies and to protect our business. E-mails > are not secure and cannot be guaranteed to be error free as they can be > intercepted, amended, lost or destroyed, or contain viruses. You are deemed > to have accepted these risks if you communicate with us by e-mail. > >
-- Thanks, Brian Desmond brian@briandesmond.com
c - 312.731.3132
The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
| | | |
| ken
Posts:58
 | | 04/29/2008 7:47 AM |
| The limit of 10 connections is only for “half open” connections that are initiated by the XP box itself (i.e. the XP box has sent a SYN and is waiting for a ACK from the remote machine). It does not apply to connection initiated by some other machine to the XP box itself, nor does it apply to established connections (again, of which there are no limits).
I can see now how the number of DCs may cause an issue, because the response becomes larger when querying for SRV records, but I don’t think the connection limit issue would be a problem if XP is running the server. (The usual problem users run into is when using P2P apps that initiate a large number of outbound connections to potential peers, but many of those remote peers do not respond)
Cheers Ken
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Tony Gordon Sent: Tuesday, 29 April 2008 9:40 PM To: ActiveDir Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
Correct, I was just trying to save myself some typing on the phone.
Ken, after responce size exceeds udp dns packet size limit (512 bites, iirc) dns switches to tcp protocol. It usually happens on quering srv records. So if there is a limit of ten outgoing tcp connections that could be a nasty issue to troubleshoot when some of your clients are getting responces and some are not fepending on timing. The likelihood of that happenning, of cource, depends on the number of clients.
________________________________
----- Original Message ----- From: "Brian Desmond" [brian@briandesmond.com] Sent: 04/28/2008 09:53 PM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
The number of DCs has nothing to do with it. The transition is based on packet length. You're seeing this depending on the length of the DC names getting you somewhere around that transition point at 10-12 boxes.
--brian On Mon, Apr 28, 2008 at 10:42 PM, Tony Gordon <Tony.Gordon@hewitt.com<mailto:Tony.Gordon@hewitt.com>> wrote:
It uses udp until you have 10-12 DCs, after that it switches to TCP. So you can get cought with that limitation.
________________________________
----- Original Message ----- From: "Ken Schaefer" [Ken@adOpenStatic.com] Sent: 04/28/2008 07:37 PM To: "ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>" <ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>> Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
Microsoft limited the number of half-open (i.e. still in negotiation) outgoing TCP connections to 10 in Windows XP SP2.
This has no effect on incoming connections AFAIK, and DNS doesn't typically use TCP anyway (it uses UDP)
So, this is irrelevant.
Cheers
Ken
From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of AFidel@ddrc.com<mailto:AFidel@ddrc.com> Sent: Monday, 28 April 2008 11:37 PM To: ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org> Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
Well, it would depend on the number of workstations at the remote site. With SP2 MS limited the total number of incoming connections in the TCP stack to some small number (10?). This affects P2P apps so I would assume a DNS server handling more than a small handful of DNS clients would quickly grind to a halt and cause problems with the other clients as MS boxes tend to get very cranky if they have any sort of DNS hiccups.
Thanks, Andrew
"joe" <listmail@joeware.net<mailto:listmail@joeware.net>> Sent by: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>
04/27/2008 04:28 PM
Please respond to ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>
To
<ActiveDir@mail.activedir.org<mailto:ActiveDir@mail.activedir.org>>
cc
Subject
RE: [ActiveDir] [OT] BIND as Secondary DNS?
I know of no reason why it wouldn't work on XP but if you do that and you serve more than 10 other machines I think it could possibly be a Windows license violation. I am not positive, I would ping Microsoft or your lawyer if you truly care. Microsoft isn't into the idea of people using Windows Client OSes as servers. That is why file sharing is also limited to 10 max connections.
You could also look at say throwing freebsd and bind on some machine as well and you will know you aren't in violation. FreeBSD is very lightweight, wouldn't require much of a machine to do. You could also run it as a virtual machine on one of your XP boxes... That also shouldn't be a license violation. Say get this VMWare virtual appliance - http://www.vmware.com/appliances/directory/63 and then install BIND and configure it.
Oh yeah... If you use DHCP, don't forget to set your "DNS Server" with a fixed IP. A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
-----Original Message----- From: ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org> [mailto:ActiveDir-owner@mail.activedir.org<mailto:ActiveDir-owner@mail.activedir.org>] On Behalf Of Carlton L. Whitmore Sent: Sunday, April 27, 2008 4:03 PM To: Activedir@Mail.Activedir.Org<mailto:Activedir@Mail.Activedir.Org> Subject: [ActiveDir] [OT] BIND as Secondary DNS?
I have all of my servers in one location provding DNS to my remote offices via VPN connection. I'd like to setup local secondary or cache DNS servers in three of those remote offices, but I don't want to buy a full version of Windows 2003 to do it. Has anyone setup BIND on Windows XP (or another freeware DNS server), as a secondary DNS that works with Active Directory?
Carlton.
________________________________ The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
-- Thanks, Brian Desmond brian@briandesmond.com<mailto:brian@briandesmond.com>
c - 312.731.3132 ________________________________ The information contained in this e-mail and any accompanying documents may contain information that is confidential or otherwise protected from disclosure. If you are not the intended recipient of this message, or if this message has been addressed to you in error, please immediately alert the sender by reply e-mail and then delete this message, including any attachments. Any dissemination, distribution or other use of the contents of this message by anyone other than the intended recipient is strictly prohibited. All messages sent to and from this e-mail address may be monitored as permitted by applicable law and regulations to ensure compliance with our internal policies and to protect our business. E-mails are not secure and cannot be guaranteed to be error free as they can be intercepted, amended, lost or destroyed, or contain viruses. You are deemed to have accepted these risks if you communicate with us by e-mail.
| | | |
| dwells
Posts:39
 | | 04/29/2008 8:17 AM |
| Hehe ... and not entirely dissimilar to what happens when people ask joe .NET/Powershell questions in-person; joe: can you write a wrapper ... joe? joe? ... where'd he go?
-- Dean Wells MSEtechnology t Email: dwells@msetechnology.com http://msetechnology.com
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Richard Kline Sent: Monday, April 28, 2008 10:20 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
First Nomination for Understatement of the Year award:
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe Sent: Sunday, April 27, 2008 4:28 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
...
A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| bsonposh
Posts:171
 | | 04/29/2008 9:02 AM |
| *never stop exploring...* 
On Tue, Apr 29, 2008 at 8:50 AM, joe <listmail@joeware.net> wrote:
> Very funnyΏ].... > >  > > joe > > > Ώ] But accurate > > > -- > O'Reilly Active Directory Third Edition - > http://www.joeware.net/win/ad3e.htm > > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Dean Wells > Sent: Tuesday, April 29, 2008 8:17 AM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS? > > Hehe ... and not entirely dissimilar to what happens when people ask joe > .NET/Powershell questions in-person; joe: can you write a wrapper ... joe? > joe? ... where'd he go? > > -- > Dean Wells > MSEtechnology > t Email: dwells@msetechnology.com > http://msetechnology.com > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Richard Kline > Sent: Monday, April 28, 2008 10:20 AM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS? > > First Nomination for Understatement of the Year award: > > -----Original Message----- > From: ActiveDir-owner@mail.activedir.org > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe > Sent: Sunday, April 27, 2008 4:28 PM > To: ActiveDir@mail.activedir.org > Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS? > > ... > > A DNS server that is dynamically handed its address is NOT the most useful > device you could have on a network...  > > > joe > > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ma/default.aspx > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ma/default.aspx > > List info : http://www.activedir.org/List.aspx > List FAQ : http://www.activedir.org/ListFAQ.aspx > List archive: http://www.activedir.org/ma/default.aspx >
| | | |
| listmail
Posts:463
 | | 04/29/2008 9:12 AM |
| Absolutely, I just don't consider that exploring... If I did explore that area, it would be to work out how to write native code to interface with it.
If ya want it to so bad... you write it. 
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
Those who can.... do. Those who can't... beg.
_____
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell Sent: Tuesday, April 29, 2008 9:02 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
never stop exploring... 
On Tue, Apr 29, 2008 at 8:50 AM, joe <listmail@joeware.net> wrote:
Very funnyΏ]....

joe
Ώ] But accurate
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
-----Original Message----- From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Dean Wells Sent: Tuesday, April 29, 2008 8:17 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
Hehe ... and not entirely dissimilar to what happens when people ask joe .NET/Powershell questions in-person; joe: can you write a wrapper ... joe? joe? ... where'd he go?
-- Dean Wells MSEtechnology t Email: dwells@msetechnology.com http://msetechnology.com <http://msetechnology.com/>
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Richard Kline Sent: Monday, April 28, 2008 10:20 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
First Nomination for Understatement of the Year award:
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe Sent: Sunday, April 27, 2008 4:28 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
...
A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
| bsonposh
Posts:171
 | | 04/29/2008 9:37 AM |
| While I still think it would be cool for you to write them... I have S.DS.P now... That solves my immediate need so I can do the rest 
It may not be as fast as ADFind, but the flexibility of objects will more than make up for that time lost with my ability to process the output.
To be clear... I think ADFind and ADMod awesome tools and I am very grateful for them. On Tue, Apr 29, 2008 at 9:08 AM, joe <listmail@joeware.net> wrote:
> Absolutely, I just don't consider that exploring... If I did explore that > area, it would be to work out how to write native code to interface with it. > > > If ya want it to so bad... you write it.  > > joe > > > -- > O'Reilly Active Directory Third Edition - > http://www.joeware.net/win/ad3e.htm > > Those who can.... do. > Those who can't... beg. > > > ------------------------------ > *From:* ActiveDir-owner@mail.activedir.org [mailto: > ActiveDir-owner@mail.activedir.org] *On Behalf Of *Brandon Shell > *Sent:* Tuesday, April 29, 2008 9:02 AM > *To:* ActiveDir@mail.activedir.org > *Subject:* Re: [ActiveDir] [OT] BIND as Secondary DNS? > > *never stop exploring...*  > > On Tue, Apr 29, 2008 at 8:50 AM, joe <listmail@joeware.net> wrote: > > > Very funnyΏ].... > > > >  > > > > joe > > > > > > Ώ] But accurate > > > > > > -- > > O'Reilly Active Directory Third Edition - > > http://www.joeware.net/win/ad3e.htm > > > > > > -----Original Message----- > > From: ActiveDir-owner@mail.activedir.org > > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Dean Wells > > Sent: Tuesday, April 29, 2008 8:17 AM > > To: ActiveDir@mail.activedir.org > > Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS? > > > > Hehe ... and not entirely dissimilar to what happens when people ask joe > > .NET/Powershell questions in-person; joe: can you write a wrapper ... > > joe? > > joe? ... where'd he go? > > > > -- > > Dean Wells > > MSEtechnology > > t Email: dwells@msetechnology.com > > http://msetechnology.com > > > > -----Original Message----- > > From: ActiveDir-owner@mail.activedir.org > > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Richard Kline > > Sent: Monday, April 28, 2008 10:20 AM > > To: ActiveDir@mail.activedir.org > > Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS? > > > > First Nomination for Understatement of the Year award: > > > > -----Original Message----- > > From: ActiveDir-owner@mail.activedir.org > > [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe > > Sent: Sunday, April 27, 2008 4:28 PM > > To: ActiveDir@mail.activedir.org > > Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS? > > > > ... > > > > A DNS server that is dynamically handed its address is NOT the most > > useful > > device you could have on a network...  > > > > > > joe > > > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.activedir.org/ma/default.aspx > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.activedir.org/ma/default.aspx > > > > List info : http://www.activedir.org/List.aspx > > List FAQ : http://www.activedir.org/ListFAQ.aspx > > List archive: http://www.activedir.org/ma/default.aspx > > > >
| | | |
| listmail
Posts:463
 | | 04/29/2008 9:53 AM |
| Give me an example or three of things you can do that you don't think could be done otherwise that you believe to be a function of passing info between programs (or if you prefer, call them cmdlets) that you can't do with passing text. And as we were discussing at the summit, these should not be things based on two apps not speaking the same language because no one defined a protocol for the text streaming interchang, but things that couldn't be done period even if that was defined. As you know and despite the incorrect assumption/comment made by Dushyant in the PoS session, Adfind/Mod and ds* can actually communicate with each other in great part because I allowed it and that isn't all that hard as long as people agree on a format. But give me an example of something that can't be done with that object passing that you feel can't be accomplished if the agreements/protocols aren't established.
I think we would have been better served if MSFT had defined this standard passing mechanism versus doing what was done. Something that wasn't solely reliant on .NET. The .NET requirement is a silly requirement IMO. Anyway, this wouldn't even need a whole new shell to pull off and the foundation would have built up a lot faster and be far wider and accepted now than it is. Again, IMO.
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
_____
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell Sent: Tuesday, April 29, 2008 9:34 AM To: ActiveDir@mail.activedir.org Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
While I still think it would be cool for you to write them... I have S.DS.P now... That solves my immediate need so I can do the rest 
It may not be as fast as ADFind, but the flexibility of objects will more than make up for that time lost with my ability to process the output.
To be clear... I think ADFind and ADMod awesome tools and I am very grateful for them.
On Tue, Apr 29, 2008 at 9:08 AM, joe <listmail@joeware.net> wrote:
Absolutely, I just don't consider that exploring... If I did explore that area, it would be to work out how to write native code to interface with it.
If ya want it to so bad... you write it. 
joe
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
Those who can.... do. Those who can't... beg.
_____
From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Brandon Shell Sent: Tuesday, April 29, 2008 9:02 AM
To: ActiveDir@mail.activedir.org
Subject: Re: [ActiveDir] [OT] BIND as Secondary DNS?
never stop exploring... 
On Tue, Apr 29, 2008 at 8:50 AM, joe <listmail@joeware.net> wrote:
Very funnyΏ]....

joe
Ώ] But accurate
-- O'Reilly Active Directory Third Edition - http://www.joeware.net/win/ad3e.htm
-----Original Message----- From: ActiveDir-owner@mail.activedir.org
[mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Dean Wells Sent: Tuesday, April 29, 2008 8:17 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
Hehe ... and not entirely dissimilar to what happens when people ask joe .NET/Powershell questions in-person; joe: can you write a wrapper ... joe? joe? ... where'd he go?
-- Dean Wells MSEtechnology t Email: dwells@msetechnology.com http://msetechnology.com <http://msetechnology.com/>
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of Richard Kline Sent: Monday, April 28, 2008 10:20 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
First Nomination for Understatement of the Year award:
-----Original Message----- From: ActiveDir-owner@mail.activedir.org [mailto:ActiveDir-owner@mail.activedir.org] On Behalf Of joe Sent: Sunday, April 27, 2008 4:28 PM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] [OT] BIND as Secondary DNS?
...
A DNS server that is dynamically handed its address is NOT the most useful device you could have on a network... 
joe
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.activedir.org/ma/default.aspx
| | | |
|
|