DDNS & Authority
Lists User
lists at server1.tiggee.com
Mon Feb 5 15:04:31 UTC 2001
You use the zone option? You need to set that.
example....
zone "test.com" {
type master;
file "db.test.com";
allow-update { any; };
};
On Mon, 5 Feb 2001, Anthony Ryan Mattke wrote:
>
>
> When doing a NS Update using tsig keys the master domain server reports
> NOTAUTH, when in fact it is the primary server both with internic and
> software wise aswell. The zone loads w/o errors (minus warnings about
> expire and refresh values)
>
> Feb 1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA expire value is
> less than refresh + 10 * retry (300 < (60 + 10 * 200))
> Feb 1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA expire value is
> less than 7 days (300)
> Feb 1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA refresh value is
> less than 2 * retry (60 < 200 * 2)
> Feb 1 12:22:44 ims1 named[24724]: master zone "iphere.com" (IN) loaded
> (serial 1010102)
>
>
> Does anyone have any suggestions about why the server would report no
> authority ?
>
> __
> ~/ony
> o Accept people for what they are -- completely unacceptable.
> o
> o__O_/
> | 9:32am up 61 days, 3:06, 6 users, load average: 0.62, 0.28,
> < \
>
> btw, Here is the -d output
>
> atoi:/var/log# nsupdate -d -k /etc/named/tsig:iphere.
> > update add test.iphere.com. 333 in a 208.34.3.5
> >
> ;; res_findzonecut: START dname='test.iphere.com.' class=IN, zsize=1025,
> naddrs=3
> ;; res_findzonecut: get the soa, and see if it has enough glue
> ;; res_nmkquery(QUERY, test.iphere.com., IN, SOA)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20125
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;; test.iphere.com, type = SOA, class = IN
>
> ;; Querying server (# 1) address = 192.168.0.1
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20125
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;; test.iphere.com, type = SOA, class = IN
>
> ;; AUTHORITY SECTION:
> iphere.com. 3m20s IN SOA ims1.imagestream-is.com.
> tonhe.imagestream-is.com. (
> 1010103 ; serial
> 1M ; refresh
> 3m20s ; retry
> 5M ; expiry
> 3m20s ) ; minimum
>
>
> ;; res_findzonecut: get the ns rrset and see if it has enough glue
> ;; res_nmkquery(QUERY, iphere.com, IN, NS)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20126
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;; iphere.com, type = NS, class = IN
>
> ;; Querying server (# 1) address = 192.168.0.1
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20126
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2
> ;; QUERY SECTION:
> ;; iphere.com, type = NS, class = IN
>
> ;; ANSWER SECTION:
> iphere.com. 5M IN NS ims1.imagestream-is.com.
> iphere.com. 5M IN NS ims2.imagestream-is.com.
>
> ;; ADDITIONAL SECTION:
> ims1.imagestream-is.com. 1d13h16m4s IN A 205.159.243.5
> ims2.imagestream-is.com. 5h51m49s IN A 192.168.100.1
>
> ;; res_findzonecut: get the missing glue and see if it's finally enough
> ;; res_findzonecut: add_addrs: 1
> ;; res_findzonecut: add_addrs: 1
> ;; res_findzonecut: satisfy(ims1.imagestream-is.com): 2
> ;; res_findzonecut: FINISH n=2 (OK)
> ;; res_nupdate: res_mkupdate -> 49
> ;; res_send()
> ;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 20127
> ;; flags:; ZONE: 1, PREREQUISITE: 0, UPDATE: 1, ADDITIONAL: 1
> ;; iphere.com, type = SOA, class = IN
> test.iphere.com. 5m33s IN A 208.34.3.5
> iphere. 0S ANY TSIG HMAC-MD5.SIG-ALG.REG.INT. 0
> ;; Querying server (# 1) address = 205.159.243.5
> ;; got answer:
> ;; ->>HEADER<<- opcode: UPDATE, status: NOTAUTH, id: 20127
> ;; flags: qr ra; ZONE: 1, PREREQUISITE: 0, UPDATE: 0, ADDITIONAL: 1
> ;; iphere.com, type = SOA, class = IN
> iphere. 0S ANY TSIG HMAC-MD5.SIG-ALG.REG.INT. 18
> ;; res_nupdate:
>
>
>
More information about the bind-users
mailing list