I would like to get an advice how to fix the following situation.
My current infrastructure has 30+ linux boxes and 5 windows servers. I use bind dns master+2xslave with a non dynamic zone setup.
linux boxes are managed with an orcestration tool and login is done using ssh keys. Windows machines are in workgroup because we have only 5 of them and an AD was not needed.
Now the situation has changed and in a while there will be a massive addon for the windows servers, and im tinkering how to implement a Active directory for management and user authentication.
i came out with the following idea, but maybe someone can give me a better solution.
My current bind zone name is "example.local" and i need to keep it on the linux box.
I thought to install AD with an dns zone name "win.example.local" and configure the dns forwarder for "example.local" to my bind, and add a forward zone on the bind server to forward request for "win.example.local" to the windows box.
The other idea was to install AD as "example.local" manually add the records from existing bind to it and reconfigure the clients to use it as a new dns server.
thanks!