subzone delegation but SOA not authoritative?
Mark.Andrews at nominum.com
Mark.Andrews at nominum.com
Sun Feb 25 23:56:49 UTC 2001
Given you obviously have two versions of the zone (note
the different serial numbers) it not suprising that there
is confusion.
It looks like you are getting back an answer from the server
win2k.mycompany.com that indicates that it is not yet
configured as a server for win2k.mycompany.com.
Also when debugging a DNS problem it really helps to make
non-recursive queries and manually follow the referals and
cnames. It also helps to use real names and IP addresses
especially if the servers are on the internet as it allows
others to interrogate the servers involved.
Mark
>
> Hello all
>
> I checked all the archieves but could not find any answer to this
>
> In my parent zone file mycompany.com.db I have the following entry.
>
>
> @ IN SOA ns1.research.mycompany.com. admin.research.mycompan
> y.com.
> (
> 900531422 ;Serial
> 3600 ; Refresh every 1 hour
> 900 ; Retry 15 minutes
> 2592000 ; Expire 30 days
> 3600 ) ; Minimum TTL of 1 hour
>
> ; Name Servers ( The name '@' is implied )
> ;
>
> IN NS ns1.research.mycompany.com.
> win2k IN NS test2.win2k.mycompany.com.
> test2.win2k.mycompany.com. IN A 135.10.41.2
>
> I have created a subzone called win2k
>
> When I do a dig SOA on mycompany.com
>
> I get the below output
>
> ns1# dig soa mycompany.com
>
> ; <<>> DiG 8.3 <<>> soa mycompany.com
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
> ;; QUERY SECTION:
> ;; mycompany.com, type = SOA, class = IN
>
> ;; ANSWER SECTION:
> mycompany.com. 1D IN SOA ns1.research.mycompany.com.
> admin.research.mycompany.com. (
> 900531422 ; serial
> 1H ; refresh
> 15M ; retry
> 4w2d ; expiry
> 1H ) ; minimum
>
>
> ;; AUTHORITY SECTION:
> mycompany.com. 1D IN NS ns1.research.mycompany.com.
>
> ;; ADDITIONAL SECTION:
> ns1.research.mycompany.com. 1D IN A 135.10.40.26
>
> ;; Total query time: 1 msec
> ;; FROM: ns1 to SERVER: default -- 135.10.40.26
> ;; WHEN: Sat Feb 24 15:11:31 2001
> ;; MSG SIZE sent: 31 rcvd: 119
>
>
> But when I do a dig soa on win2k.mycompany.com
>
> ns1# dig soa win2k.mycompany.com
>
> ; <<>> DiG 8.3 <<>> soa win2k.mycompany.com
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;; win2k.mycompany.com, type = SOA, class = IN
>
> ;; AUTHORITY SECTION:
> mycompany.com. 1D IN SOA dns01-bb.abc.com. admin.abc.com. (
> 133 ; serial
> 6H ; refresh
> 1H ; retry
> 1W ; expiry
> 1D ) ; minimum
>
>
> ;; Total query time: 14 msec
> ;; FROM: ns1 to SERVER: default -- 135.10.40.26
> ;; WHEN: Sat Feb 24 15:17:51 2001
> ;; MSG SIZE sent: 41 rcvd: 121
>
> The question is why isn't win2k.mycompany.com giving me the same dig output a
> s
> mycompany.com
>
> Another thing is when I do a dig on a nonexisting subzone for example
> dig soa anysubzone.mycompany.com I get the same SOA as mycompany.com
>
> Also how can I make win2k.mycompany.com give the same results as mycompany.co
> m
>
> Thanks
> --fazall
>
>
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at nominum.com
More information about the bind-users
mailing list