[Samba] Samba 4 DNS name Planing

[Chan Min Wai]

Well, simple
If you have a FQDN of domain.com
which is your samba4 domain e.g server1.domain.com

because of the behavious of DNS.
You will need to host the DNS in the samba server and this server need to
be resolvable by public in all case.

If you have your DNS for this domain on external which is control by
ISP/Web hosting company...
You will have an big issue...

where internet ---> domain.com will relay on Local DNS which is the Samba
server DNS. and it point to your local server.
For that you will have a confusing Internal and External DNS IP resolved...

Thank You.




On Thu, Dec 5, 2013 at 2:59 PM, <me at electronico.nc> wrote:

> Le 04/12/2013 21:26, L.P.H. van Belle a écrit :
>
>  Sure if you know what your doing with dns and domainnames, yes, i also
>> preffer your the correct domain and yes, MS also prefers that,
>> but because of misusage of the domainnames MS also uses .local
>>   As M.S. stats:
>> If you want to use a full DNS name for the internal domain other than the
>> default, it is strongly recommended that you use the .local label for the
>> extension.
>> Using an internal domain name different from your registered Internet
>> domain name is a more secure configuration.
>> Using a publicly registered Internet domain name can result in name
>> resolution issues.
>>     Much to read about it :
>>   here : http://technet.microsoft.com/en-us/library/cc708159(v=ws.
>> 10).aspx
>> must read:  dns namespace planning :  http://support.microsoft.com/
>> kb/254680/en-us
>>     but, if you want to use official certificates, yes, better u use the
>> correct domainname.
>> and when your doing that, then you know what your doing..  ;-)
>>   I myself preffer the following. ( i know how dns works, that helps. )
>>   INTERNET DNS setup.
>>   company.tld.     main internet adres, and NO ip assigned, yes lots of
>> people do that, but i dont like it.
>> www.company.tld.        points to my webserver. ( external ipnumbers )
>> mail.company.tld.        points to my mail server. ( external ipnumbers )
>> proxy.company.tld       points to my proxy ip ( external ipnumbers )
>>   location1.company.tld.   is external resolvable.  ( for use of mail
>> server1 )
>> location2.company.tld.   is external resolvable.  ( for use of mail
>> server2 )
>> location3.company.tld.   is external resolvable.  ( for use of mail
>> server3 )
>> why resolvable, because of all of the spam traps and mail rules etc etc.
>>
>> Im also into anti-spam setups so this is a must.
>>     AD and INTERNAL !! dns setup.
>> headoffice.location1.company.tld.    the AD server INTERNAL domain.
>>      =>  servername in FQDN :   samba4-1.headoffice.location1.
>> company.tld.
>>      NETBIOS NAME: HEADOFFICE
>>   mail.headoffice.company.tld.    points to the internal ipadres
>> mail.locaction1.company.tld is a CNAME to mail.headoffice.company.tld.
>> mail.locaction2.company.tld is a CNAME to mail.headoffice.company.tld.
>> etc
>>   so the big thing here is
>> hostname = samba4-1.headoffice.company.tld
>> AD = headoffice.company.tld
>> REALM = HEADOFFICE.COMPANY.TLD
>> DOMAINNAME ( NT Style )  COMPANY
>>     yes long names, but scalable to any thing and any where.
>>   but.. its just what you preffer or understand.
>>   so think about your dns setup before you are installing any thing is my
>> advice.
>>   Louis
>>
>> Van: James Cort [mailto:james.cort at bediwin.co.uk]
>> Verzonden: woensdag 4 december 2013 10:47
>> Aan: L.P.H. van Belle
>> CC: samba at lists.samba.org
>> Onderwerp: Re: [Samba] Samba 4 DNS name Planing
>>
>>
>>
>> Pretty sure use of .local is deprecated in recent versions of Windows
>> Server - ISTR it's something to do with some Windows client devices
>> requiring a certificate signed by a recognised CA, and of course none of
>> them will sign a certificate ending in .local.
>>
>> Personally, I d set up a subdomain of a registered domain - eg.
>> ad.mydomain.com - and that d be the AD domain. But I haven t checked to
>> see if that represents recommended practise so take it with all the salt
>> you think it needs.
>>
>>
>>
>>
>> James.
>>
>>
>> --
>> Eckland-Cort Ltd T/A Bediwin Information Services
>> Registered in England and Wales, no. 02598654
>> Registered office:  3 Southleigh Road, Taunton, Somerset  TA1 2XZ
>>
>>
>> Our Managed Workstation service deals with antivirus, backup and updates
>> for just £5.00/month!
>> http://www.bediwin.co.uk/services/managed-workstations
>>
>>
>>
>>
>>
>>
>>
>>
>> On 4 Dec 2013, at 08:29, L.P.H. van Belle <belle at bazuin.nl> wrote:
>>
>>
>> I suggest you always use .local if only internal use..
>>
>> see RFC 6762, which has been approved and was officially published on
>> February 20, 2013,
>> essentially reserves the use of .local as a pseudo-TLD for link-local
>> hostnames
>> that can be resolved via the Multicast DNS name resolution protocol.
>>
>> http://tools.ietf.org/html/rfc6762
>>
>>
>> Louis
>>
>>
>> -----Oorspronkelijk bericht-----
>> Van: abartlet at samba.org [mailto:samba-bounces at lists.samba.org]
>> Namens Andrew Bartlett
>> Verzonden: woensdag 4 december 2013 9:15
>> Aan: Chan Min Wai
>> CC: samba at lists.samba.org
>> Onderwerp: Re: [Samba] Samba 4 DNS name Planing
>>
>> On Tue, 2013-12-03 at 18:48 +0800, Chan Min Wai wrote:
>> Dear All,
>>
>> Can help to advise if there are any name planing for dns?
>>
>> e.g: I've a domain amtb-m.org
>>
>> should my samba4 server be
>> ad.amtb-m.org?
>>
>> OR should I create another non-reachable internal domain
>> e.g: ad.amtb-m.lan
>>
>> For them?
>>
>> What is the benefit on this or that?
>> Any documentation about that?
>>
>> Use a proper subdomain of your registered DNS domain for your new AD
>> domain.  Don't use .lan, .local, .corp as you have no idea
>> what suffixes
>> ICANN might sell off next, use the domain you already own as the base.
>>
>> Andrew Bartlett
>>
>>  Well,
> I thought I could have done a mistake ... These messages lead me the
> thought could be right ...
> I have named the Samba4 domain : FQDN (domain.com)
> What could be issues about that ?
> Thanks in advance for your lights.
> Nicolas
>
> --
> To unsubscribe from this list go to the following URL and read the
> instructions:  https://lists.samba.org/mailman/options/samba
>