Nsupdate questions

Anthony Ryan Mattke tonhe at ims1.imagestream-is.com
Tue Dec 5 15:12:46 UTC 2000



I have a couple questions about nsupdate.. 

1. Do i have to be root on a machine to do an nsupdate ?  
	- if i do, is there a way to authenticate instead ?
2. When run nsupdate -d and try to add the host test.iphere.com
it fails.. here is the output.. 

I'm runnig this as root on the machine that is the primary DNS server for
the domain. (iphere.com) Its a redhat box running bind 8.2.2-P3.

[root on firbolg]
[/etc/named#] nsupdate -d 
> update add test.iphere.com. 333 a 192.168.0.99
> 
;; res_findzonecut: START dname='test.iphere.com.' class=IN, zsize=1025,
naddrs=3
;; res_findzonecut: get the soa, and see if it has enough glue
;; res_nmkquery(QUERY, test.iphere.com., IN, SOA)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19160
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      test.iphere.com, type = SOA, class = IN

;; Querying server (# 1) address = 63.86.29.164
server rejected query:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 19160
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      test.iphere.com, type = SOA, class = IN

;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 19160
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      test.iphere.com, type = SOA, class = IN

;; res_nmkquery(QUERY, iphere.com., IN, SOA)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19161
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      iphere.com, type = SOA, class = IN

;; Querying server (# 1) address = 63.86.29.164
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19161
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      iphere.com, type = SOA, class = IN

;; ANSWER SECTION:
iphere.com.             3m20s IN SOA    ns1.iphere.com.
tonhe.imagestream-is.com. (
                                        1               ; serial
                                        1M              ; refresh
                                        3m20s           ; retry
                                        5M              ; expiry
                                        3m20s )         ; minimum


;; res_findzonecut: get the ns rrset and see if it has enough glue
;; res_nmkquery(QUERY, iphere.com, IN, NS)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19162
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      iphere.com, type = NS, class = IN

;; Querying server (# 1) address = 63.86.29.164
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19162
;; flags: qr rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 1
;; QUERY SECTION:
;;      iphere.com, type = NS, class = IN

;; ANSWER SECTION:
iphere.com.             3m20s IN NS     hal.bravegnuworld.com.
iphere.com.             3m20s IN NS     ims1.imagestream-is.com.

;; ADDITIONAL SECTION:
ims1.imagestream-is.com.  1d23h59m20s IN A  205.159.243.5

;; res_findzonecut: get the missing glue and see if it's finally enough
;; res_nmkquery(QUERY, hal.bravegnuworld.com, IN, A)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19163
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      hal.bravegnuworld.com, type = A, class = IN

;; Querying server (# 1) address = 63.86.29.164
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 19163
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 2, ADDITIONAL: 2
;; QUERY SECTION:
;;      hal.bravegnuworld.com, type = A, class = IN

;; ANSWER SECTION:
hal.bravegnuworld.com.  5S IN CNAME     firbolg.bravegnuworld.com.
firbolg.bravegnuworld.com.  5S IN A  63.86.29.164

;; AUTHORITY SECTION:
bravegnuworld.com.      5S IN NS        firbolg.bravegnuworld.com.
bravegnuworld.com.      5S IN NS        ims1.imagestream-is.com.

;; ADDITIONAL SECTION:
firbolg.bravegnuworld.com.  5S IN A  63.86.29.164
ims1.imagestream-is.com.  1d23h59m20s IN A  205.159.243.5

;; res_findzonecut: get_glue: do_query('hal.bravegnuworld.com', IN')
failed
;; res_findzonecut: FINISH n=-1 (No such device)
;; res_nupdate: res_findzonecut failed (-1)
> 

Here is that zones section of the named conf.

zone "iphere.com"{
        type master;
        file "iphere.db";
        allow-update { 127.0.0.1; } ;
};

and here is the db file.. 
; Authoritative data for iphere.com
;
@               IN      SOA     ns1.iphere.com. tonhe.imagestream-is.com.
(
                                1       ; Serial
                                60      ; Refresh 1 Minute
                                200     ; Retry 3.3 Minutes
                                300     ; Expire 10 Minutes
                                200)    ; Minimum 3.3 Minutes
                IN      NS              hal.bravegnuworld.com.  
                IN      NS              ims1.imagestream-is.com.
;
; our domain
@               IN      A       205.159.243.140
                IN      MX      10 mail.iphere.com.
                IN      HINFO   PC Linux 


atoi.iphere.com.        IN      A       205.159.243.140
mail.iphere.com.        IN      A       205.159.243.5

www             IN      CNAME   atoi
ftp             IN      CNAME   atoi
admin           IN      CNAME   atoi

;
; Local Intranet Entries... 
;
printsrv        IN      A       192.168.0.2
screwdriver     IN      A       192.168.0.5
www             IN      A       192.168.0.5
screwy5         IN      A       192.168.0.38
albatros        IN      A       192.168.0.55
lola            IN      A       192.168.0.88
shite           IN      A       192.168.0.128
fido            IN      A       192.168.0.142

;
; Misc other hosts/aliases
;
spaceball1.iphere.com.          IN      A       128.211.207.102
ns1.iphere.com.                 IN      A       63.86.29.164
ims1.iphere.com                 IN      A       205.259.243.5
crisco.iphere.com               IN      A       205.259.243.241


Thanks in advance.. 
 __
~/ony


#include".sig"

Anthony Ryan Mattke
- Imagestream Internet Solutions
- http://www.imagestream-is.com/
- tony at imagestream-is.com
- 1.800.813.5123





More information about the bind-users mailing list