LatticeLattice

Not generally available. Product and docs are public. Sales are closed.

Docs / AD DDNS

GSS-TSIG to Active Directory.

The ack path never waits on DNS. AD updates run on the worker after the lease is written.

Lattice uses GSS-TSIG against AD-integrated zones. Starter and above include dns.ad_gsstsig. Community does not.

Console

  1. DNS servers → adapter ad_gsstsig. Host is a DC. Principal e.g. DNS/[email protected]. keytab_ref is file:/etc/lattice/lattice.keytab — never paste the keytab into the UI.
  2. Subnet: DDNS on, adapter ad_gsstsig, forward and reverse zones.
  3. Worker: LATTICE_GSS_TSIG_MODE=subprocess. nsupdate on PATH. Clocks vs DCs < 5 minutes.

Lattice does not talk LDAP. Updates are RFC 2136 with Kerberos. Failures retry in the outbox; Ack already happened.

What you need

  • A keytab or equivalent for the Lattice service account
  • Zone names that match the DHCP domains you serve
  • Network path from lattice-worker to a DC

Failure to update DNS does not roll back the lease. Operators see the DNS job status in the control plane.