Is there someway this can be cleaned up, or clarified? Alternately, am I making much ado about nothing?
Like AviD says,
dns-domain seems redundant;
dns seems fine.
Like Luc says, I don't think we need both
active-directory. We could have
windows-domain be a synonym for
active-directory, I suppose, but that seems unnecessary.