provision: setup names.dns{forest,domain}dn