[Samba] dns on samba, or not

[David Bear]

I still don't understand something I know is critical for a samba 4 addc to
work.

We want to run DNS from our firewall/router. This seems to be the natural
place for it. Furthermore, it's already there.

But it seems when samba 4.x is running as an ADDC, it also wants to run/be
dns.

Is there a way to keep dns running on our firewall appliance and have samba
refer to that? If so, what are the disadvantages ? Does it prevent machines
from joining the domain?

Finally, if it is not possible to allow samba to not run any dns, is there
a best practice from dns naming conventions. For example, if our dns name
is

myschool.com

all our user principals would be username at myschool.com

but if samba must run its own dns, could we have a subdomain such as

authdom.myschool.com

And if we did, would the user principal then become

username at authdom.myschool.com

?

-- 
David Bear
mobile: (602) 903-6476