How to get DNS replication working properly?

[Kai Blin]

On 2012-06-24 13:01, Andrew Bartlett wrote:

Hi Andrew,

> The reason that the secondary DC isn't enrolled in DNS is that the
> internal DNS server does not support dynamic updates (yet, Kai is still
> working on it). 

That's almost correct. The internal DNS server does not support
cryptographically signed updates yet, and thus updates are turned off by
default.

If you don't need that on your network, you can allow unsigned updates
and things should just work (tm). With all the implications of allowing
clients to mess with DNS records, of course.

Still, it's not as if dns updates didn't work at all. I wish people
would stop confusing that.

Cheers,
Kai

-- 
Kai Blin
Worldforge developer http://www.worldforge.org/
Wine developer http://wiki.winehq.org/KaiBlin
Samba team member http://www.samba.org/samba/team/