subzone delegation but SOA not authoritative?

Mark.Andrews at nominum.com Mark.Andrews at nominum.com
Sun Feb 25 23:56:49 UTC 2001


	Given you obviously have two versions of the zone (note
	the different serial numbers) it not suprising that there
	is confusion.

	It looks like you are getting back an answer from the server
	win2k.mycompany.com that indicates that it is not yet
	configured as a server for win2k.mycompany.com.

	Also when debugging a DNS problem it really helps to make
	non-recursive queries and manually follow the referals and
	cnames.  It also helps to use real names and IP addresses
	especially if the servers are on the internet as it allows
	others to interrogate the servers involved.

	Mark

> 
> Hello all
> 
> I checked all the archieves but could not find any answer to this
> 
> In my parent zone file mycompany.com.db I have the following entry.
> 
> 
> @       IN      SOA     ns1.research.mycompany.com.   admin.research.mycompan
> y.com.
> (
>                                 900531422       ;Serial
>                                 3600            ; Refresh every 1 hour
>                                 900             ; Retry 15 minutes
>                                 2592000         ; Expire 30 days
>                                 3600 )          ; Minimum TTL of 1 hour
> 
> ; Name Servers ( The name '@' is implied )
> ;
> 
>         IN      NS      ns1.research.mycompany.com.
> win2k       IN      NS      test2.win2k.mycompany.com.
> test2.win2k.mycompany.com.          IN      A       135.10.41.2
> 
> I have created a subzone called win2k
> 
> When I do a dig SOA on mycompany.com
> 
> I get the below output
> 
> ns1# dig soa mycompany.com
> 
> ; <<>> DiG 8.3 <<>> soa mycompany.com
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 4
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 1
> ;; QUERY SECTION:
> ;;      mycompany.com, type = SOA, class = IN
> 
> ;; ANSWER SECTION:
> mycompany.com.          1D IN SOA       ns1.research.mycompany.com.
> admin.research.mycompany.com. (
>                                         900531422       ; serial
>                                         1H              ; refresh
>                                         15M             ; retry
>                                         4w2d            ; expiry
>                                         1H )            ; minimum
> 
> 
> ;; AUTHORITY SECTION:
> mycompany.com.          1D IN NS        ns1.research.mycompany.com.
> 
> ;; ADDITIONAL SECTION:
> ns1.research.mycompany.com.  1D IN A  135.10.40.26
> 
> ;; Total query time: 1 msec
> ;; FROM: ns1 to SERVER: default -- 135.10.40.26
> ;; WHEN: Sat Feb 24 15:11:31 2001
> ;; MSG SIZE  sent: 31  rcvd: 119
> 
> 
> But when I do a dig soa on win2k.mycompany.com
> 
> ns1# dig soa win2k.mycompany.com
> 
> ; <<>> DiG 8.3 <<>> soa win2k.mycompany.com
> ;; res options: init recurs defnam dnsrch
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 4
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      win2k.mycompany.com, type = SOA, class = IN
> 
> ;; AUTHORITY SECTION:
> mycompany.com.          1D IN SOA       dns01-bb.abc.com. admin.abc.com. (
>                                         133             ; serial
>                                         6H              ; refresh
>                                         1H              ; retry
>                                         1W              ; expiry
>                                         1D )            ; minimum
> 
> 
> ;; Total query time: 14 msec
> ;; FROM: ns1 to SERVER: default -- 135.10.40.26
> ;; WHEN: Sat Feb 24 15:17:51 2001
> ;; MSG SIZE  sent: 41  rcvd: 121
> 
> The question is why isn't win2k.mycompany.com giving me the same dig output a
> s
> mycompany.com
> 
> Another thing is when I do a dig on a nonexisting subzone for example
> dig soa anysubzone.mycompany.com I get the same SOA as mycompany.com
> 
> Also how can I make win2k.mycompany.com give the same results as mycompany.co
> m
> 
> Thanks
> --fazall
> 
> 
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at nominum.com


More information about the bind-users mailing list