BIND Secondaries for Active Directory-Integrated Zones

Another problem related to zone transfers can crop up when running a BIND or other non-Microsoft name server as a secondary to an AD-integrated zone. The serial number in an AD-integrated zone can vary on otherwise synchronized Microsoft DNS Servers. If a BIND secondary is configured to use multiple master name servers and the first of these isn’t available, the second master may respond with a lower serial number, despite the fact that it has the same version of the zone as the previous master.

Get DNS on Windows Server 2003, 3rd Edition now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.