Bob, Currently only global zone communicates with DNS servers. Global zone then provides naming services to other TX zones via nscd (through Solaris door interface). I believe that the decision/design is based on the observation that all zones on a TX system form a single system image, and all TX zones should get the same, consistent naming services (via global zone).
Recently, we've heard from Sun internal and external customers who requested per TX zone NDS service. I believe that the naming service team in Sun is helping address this request. Thanks. Jarrett Robert Bailey wrote: > I have a dns server running on my global zone (admin_low), but my > local (tx / non-cipso) zones can not do a nslookup, or even ping the > global. I did not expect the ping to work, but what about a dns > lookup to an admin_low host? Is this a tnzonecfg redirect? or am I > missing something? > > > Thanks! > > Bob > _______________________________________________ > security-discuss mailing list > security-discuss at opensolaris.org
