Home / server / Questions / 456352
In Process
Jaredk
Asked: 2012-12-09 07:18:08 +0800 CST

Letting users make their own dns changes? Any software available to manage this tricky situation?

  • 772

I currently waste a lot of time making dns changes for my organization. DDNS of course helps for workstations, but we still have a few thousand unique servers with still more applications needing cname records that DHCP/DDNS alone will not support, so someone needs to make updates, but I'd like to see sysadmins make their own dns updates for their machines.

I'm currently working on extending our asset database to support this functionality, but I hold out hope that there are COTS solutions available.

domain-name-system

2 Answers

  1. You didn't mention what DNS server is in use and you didn't mention whether or not this was in a Windows AD domain, but if this is in relation to Windows DNS, I've used the following to grant limited access to our DNS zones:

    http://www.quest.com/activeroles-server/dnsm.aspx

    • 3

  2. In past organizations, we've kept our zone files in version control, and allowed the sysadmin team(s) to edit, commit, and push their changes directly to the central git repo and post-commit hooks took care of sanity checking the syntax of the new commit, deploying to the production name servers, and kicking bind to pull in the new configs.

    In our case, anyone could have edited any dns record, but fortunately we had enough trust among the staff that people wouldn't touch records that weren't theirs.

    If you need more separation than that, you can keep different zones in different repos, with different permissions.

    • 2