[Samba] Dynamic DNS tips? (Samba 4.8.x + Bind9_DLZ)

[Nico Kadel-Garcia]

On Tue, Jan 1, 2019 at 10:08 AM Rowland Penny via samba
<samba at lists.samba.org> wrote:
>
> On Tue, 1 Jan 2019 09:50:45 -0500
> Nico Kadel-Garcia <nkadel at gmail.com> wrote:
>
> > > If you want your clients to update their own records, then let them,
> > > but be aware that any Unix clients will not even try.
> >
> > Well, they can try. It takes some configuration and thought to do so
> > reliably and securely.
>
> Just how do you configure the dhcp client software to upgrade the dns
> records in AD ?
>
> Rowland

I can't discuss the most recent time I dealt with this. The time
before *that*, I walked my way through Red Hat's notes at
https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/7/html/windows_integration_guide/sssd-dyndns
.Doing it through sssd is... well it's overkill. The time before
*that*, I got the AD administrator to allow "non-secure DNS updates"
that were compatible with the RHEL 5 systems I was dealing with. That
wasn't ideal, but I was having enough difficulty negotiating
configurations with the AD administrators that I could only achieve so
much.