'dig -t any ...' question : *ANSWER* & *GLUE* credibility discrepancies

Ladislav Vobr lvobr at ies.etisalat.ae
Mon Jun 14 07:04:34 UTC 2004


Jim Reid wrote:
 >>>>>>"Ladislav" == Ladislav Vobr <lvobr at ies.etisalat.ae> writes:
 >
 >
 >     Ladislav> It does, jim, and I have to say it, your reply is
 >     Ladislav> incorrect, bind 8.3.4 and 9.3.0beta4 and 9.2.3 all of
 >     Ladislav> these are reluctant to provide the answers to recursive
 >     Ladislav> client if it cached with credibility *glue*.
 >
 > If that's the case, please explain why my BIND9.3 server is perfectly
 > happy to return the glue it got for fake1.ladislav.name.ae after it
 > had cached a referral for ladislav.name.ae. That was clearly shown in
 > my earlier posting.

Let me ask you one thing, are you sure about the credibility tag the 
data got cached on your caching 9.3 server? Do you know exactly the 
rules, when it is cached under which tag? And how each different bind 
treats the same non-authoritative data in it's own way? And how each 
caching server treats each credibility level when it comes to answer rd 
clients?

I feel strange discussing things on the @isc.org mailing list, while 
nobody from ISC, who sure knows these things, doesn't bother to reply 
and say, yes there is a relation, and these are the rules 1,2,3...

It is simple once it is published, but till that time people live in dark.

Do you thing commercial support will explain this, or will just admit it 
that there is some relation. We don't have issue paying for it, we are 
already sponsoring isc hosting and operation of the f-root server in 
next room, but is there any sample how does this commercial support 
look, how deep does it go, and where the discussion stops? Does it 
answer such a questions?

I can try go to the source code and spend nights and nights reading it, 
but I just feel I can be more useful doing other things, maybe I am wrong.

P.S. the explanation is in my previous post, it is simple you cached it 
from 8.3.4 thus it has *answer* credibility, but I got it from 9.2.3 or 
8.4.1 or 9.3.0beta4 thus the credibility for the same thing was *glue* 
and as per the unknown rule this is not provided to rd clients.

I know I have a million questions, and perhaps it looks like I am not 
friend of isc, but I am, just want to understand things. Today, all 
administrators look like 'not really aware', when somebody ask them, how 
come it is in the cache, but bind doesn't answer with it:-( shouldn't it 
answer from cache? simple question, but not simple answer....

Ladislav




More information about the bind-users mailing list