DDNS & Authority

[Lists User]

You use the zone option?  You need to set that.

example....

zone "test.com" {
     type master;
     file "db.test.com";
     allow-update { any; };
};


On Mon, 5 Feb 2001, Anthony Ryan Mattke wrote:

> 
> 
> When doing a NS Update using tsig keys the master domain server reports
> NOTAUTH, when in fact it is the primary server both with internic and
> software wise aswell. The zone loads w/o errors (minus warnings about
> expire and refresh values)
> 
> Feb  1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA expire value is
> less than refresh + 10 * retry (300 < (60 + 10 * 200))
> Feb  1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA expire value is
> less than 7 days (300)
> Feb  1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA refresh value is
> less than 2 * retry (60 < 200 * 2)
> Feb  1 12:22:44 ims1 named[24724]: master zone "iphere.com" (IN) loaded
> (serial 1010102)
> 
> 
> Does anyone have any suggestions about why the server would report no
> authority ?
> 
>  __ 
> ~/ony
>     o            Accept people for what they are -- completely unacceptable.
>        o     
>   o__O_/     
>      |          9:32am  up 61 days,  3:06,  6 users,  load average: 0.62, 0.28,
>     < \
> 
> btw, Here is the -d output
> 
> atoi:/var/log# nsupdate -d -k /etc/named/tsig:iphere.     
> > update add test.iphere.com. 333 in a 208.34.3.5
> > 
> ;; res_findzonecut: START dname='test.iphere.com.' class=IN, zsize=1025,
> naddrs=3
> ;; res_findzonecut: get the soa, and see if it has enough glue
> ;; res_nmkquery(QUERY, test.iphere.com., IN, SOA)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20125
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      test.iphere.com, type = SOA, class = IN
> 
> ;; Querying server (# 1) address = 192.168.0.1
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20125
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      test.iphere.com, type = SOA, class = IN
> 
> ;; AUTHORITY SECTION:
> iphere.com.             3m20s IN SOA    ims1.imagestream-is.com.
> tonhe.imagestream-is.com. (
>                                         1010103         ; serial
>                                         1M              ; refresh
>                                         3m20s           ; retry
>                                         5M              ; expiry
>                                         3m20s )         ; minimum
> 
> 
> ;; res_findzonecut: get the ns rrset and see if it has enough glue
> ;; res_nmkquery(QUERY, iphere.com, IN, NS)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20126
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      iphere.com, type = NS, class = IN
> 
> ;; Querying server (# 1) address = 192.168.0.1
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20126
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2
> ;; QUERY SECTION:
> ;;      iphere.com, type = NS, class = IN
> 
> ;; ANSWER SECTION:
> iphere.com.             5M IN NS        ims1.imagestream-is.com.
> iphere.com.             5M IN NS        ims2.imagestream-is.com.
> 
> ;; ADDITIONAL SECTION:
> ims1.imagestream-is.com.  1d13h16m4s IN A  205.159.243.5
> ims2.imagestream-is.com.  5h51m49s IN A  192.168.100.1
> 
> ;; res_findzonecut: get the missing glue and see if it's finally enough
> ;; res_findzonecut: add_addrs: 1
> ;; res_findzonecut: add_addrs: 1
> ;; res_findzonecut: satisfy(ims1.imagestream-is.com): 2
> ;; res_findzonecut: FINISH n=2 (OK)
> ;; res_nupdate: res_mkupdate -> 49
> ;; res_send()
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 20127
> ;; flags:; ZONE: 1, PREREQUISITE: 0, UPDATE: 1, ADDITIONAL: 1
> ;;      iphere.com, type = SOA, class = IN
> test.iphere.com.        5m33s IN A      208.34.3.5
> iphere.                 0S ANY TSIG     HMAC-MD5.SIG-ALG.REG.INT. 0
> ;; Querying server (# 1) address = 205.159.243.5
> ;; got answer:
> ;; ->>HEADER<<- opcode: UPDATE, status: NOTAUTH, id: 20127
> ;; flags: qr ra; ZONE: 1, PREREQUISITE: 0, UPDATE: 0, ADDITIONAL: 1
> ;;      iphere.com, type = SOA, class = IN
> iphere.                 0S ANY TSIG     HMAC-MD5.SIG-ALG.REG.INT. 18
> ;; res_nupdate: 
> 
> 
>