no authoritative answer from master server

Stefan Puiu stefan.puiu at gmail.com
Thu Nov 17 18:06:07 UTC 2005


AUTHORITY:3 means there are three entries in the authority section.
AUTHORITY:0 means there are none, that is, that nameserver did not provide
NS records for the nameservers of the domain you queried.
You need to look for the "aa" flag (in the "flags" list on the left below):


;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16370
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 2

^^

On 11/17/05, Fernando Soria <nandoria at gmail.com> wrote:
>
> On 11/17/05, Barry Margolin <barmar at alum.mit.edu> wrote:
> > In article <dlghpj$1f60$1 at sf1.isc.org>,
> > Fernando Soria <nandoria at gmail.com> wrote:
> >
> > > My doubt it's wen I do a query of the type ANY I forgot that... dig
> > > when no type is specified perform a lookup of the A record...
> > > like this:
> > > #dig @ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar> ANY
> dnsdigital.com.ar <http://dnsdigital.com.ar> <-- no authoritative answer
> > > #dig @ns17.zoneedit.com.ar <http://ns17.zoneedit.com.ar> ANY
> dnsdigital.com.ar <http://dnsdigital.com.ar> <-- authoritative answer
> >
> > A BIND server is either authoritative for a zone or not, it shouldn't
> > matter what record type is specified in the query. I've seen
> > type-specific differences with some non-BIND servers, but never with
> > BIND.
> >
> > Anyway, it's authoritative when I try it:
> >
> > ; <<>> DiG 9.2.2 <<>> @ns1.dnsdigital.com.ar<http://ns1.dnsdigital.com.ar>any
> dnsdigital.com.ar <http://dnsdigital.com.ar> +multi
> > ;; global options: printcmd
> > ;; Got answer:
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 18610
> > ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 2
> >
> > ;; QUESTION SECTION:
> > ;dnsdigital.com.ar. IN ANY
> >
> > ;; ANSWER SECTION:
> > dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN SOA
> ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar>.
> > soa.dnsdigital.com.ar <http://soa.dnsdigital.com.ar>. (
> > 2005102701 ; serial
> > 28800 ; refresh (8 hours)
> > 7200 ; retry (2 hours)
> > 2419200 ; expire (4 weeks)
> > 86400 ; minimum (1 day)
> > )
> > dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns17.zoneedit.com <http://ns17.zoneedit.com>.
> > dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar>.
> > dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns8.zoneedit.com <http://ns8.zoneedit.com>.
> > dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN MX 1
> mail.dnsdigital.com.ar <http://mail.dnsdigital.com.ar>.
> > dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN A 200.59.130.146<http://200.59.130.146>
> >
> > ;; ADDITIONAL SECTION:
> > ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar>. 259200 IN A
> 200.59.130.146 <http://200.59.130.146>
> > mail.dnsdigital.com.ar <http://mail.dnsdigital.com.ar>. 259200 IN A
> 200.59.130.146 <http://200.59.130.146>
> >
> > ;; Query time: 189 msec
> > ;; SERVER: 200.59.130.146#53(ns1.dnsdigital.com.ar<http://ns1.dnsdigital.com.ar>
> )
> > ;; WHEN: Thu Nov 17 01:12:12 2005
> > ;; MSG SIZE rcvd: 211
> >
> > --
> > Barry Margolin, barmar at alum.mit.edu
> > Arlington, MA
> > *** PLEASE post questions in newsgroups, not directly to me ***
> >
>
> OK it see the problem now...
> The problem is me apparently, I'm confusing the output of dig the
> "->>HEADER<<-" part there is a AUTHORITY:0 when I query
> ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar> but if I query
> ns17.zoneedit.com <http://ns17.zoneedit.com> it prints
> AUTHORITY:3 why is that?
>
> #dig @ns17.zoneedit.com <http://ns17.zoneedit.com> ANY dnsdigital.com.ar<http://dnsdigital.com.ar>
> ; <<>> DiG 9.2.2-P3 <<>> @ns17.zoneedit.com <http://ns17.zoneedit.com> ANY
> dnsdigital.com.ar <http://dnsdigital.com.ar>
> ;; global options: printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 58927
> ;; flags: qr aa rd; QUERY: 1, ANSWER: 6, AUTHORITY: 3, ADDITIONAL: 0
>
> ;; QUESTION SECTION:
> ;dnsdigital.com.ar. IN ANY
>
> ;; ANSWER SECTION:
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN A 200.59.130.146<http://200.59.130.146>
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN MX 1
> mail.dnsdigital.com.ar <http://mail.dnsdigital.com.ar>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns8.zoneedit.com <http://ns8.zoneedit.com>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns17.zoneedit.com <http://ns17.zoneedit.com>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN SOA
> ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar>.
> soa.dnsdigital.com.ar <http://soa.dnsdigital.com.ar>. 2005102701 28800
> 7200 2419200 86400
>
> ;; AUTHORITY SECTION:
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns8.zoneedit.com <http://ns8.zoneedit.com>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns17.zoneedit.com <http://ns17.zoneedit.com>.
>
> ;; Query time: 238 msec
> ;; SERVER: 209.126.159.118#53(ns17.zoneedit.com <http://ns17.zoneedit.com>
> )
> ;; WHEN: Thu Nov 17 14:28:57 2005
> ;; MSG SIZE rcvd: 221
>
> BUT
>
> # dig @ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar> ANY
> dnsdigital.com.ar <http://dnsdigital.com.ar>
>
> ; <<>> DiG 9.2.2-P3 <<>> @ns1.dnsdigital.com.ar<http://ns1.dnsdigital.com.ar>ANY
> dnsdigital.com.ar <http://dnsdigital.com.ar>
> ;; global options: printcmd
> ;; Got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 16370
> ;; flags: qr aa rd ra; QUERY: 1, ANSWER: 6, AUTHORITY: 0, ADDITIONAL: 2
>
> ;; QUESTION SECTION:
> ;dnsdigital.com.ar. IN ANY
>
> ;; ANSWER SECTION:
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN SOA
> ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar>.
> soa.dnsdigital.com.ar <http://soa.dnsdigital.com.ar>. 2005102701 28800
> 7200 2419200 86400
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns8.zoneedit.com <http://ns8.zoneedit.com>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN NS
> ns17.zoneedit.com <http://ns17.zoneedit.com>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN MX 1
> mail.dnsdigital.com.ar <http://mail.dnsdigital.com.ar>.
> dnsdigital.com.ar <http://dnsdigital.com.ar>. 259200 IN A 200.59.130.146<http://200.59.130.146>
>
> ;; ADDITIONAL SECTION:
> ns1.dnsdigital.com.ar <http://ns1.dnsdigital.com.ar>. 259200 IN A
> 200.59.130.146 <http://200.59.130.146>
> mail.dnsdigital.com.ar <http://mail.dnsdigital.com.ar>. 259200 IN A
> 200.59.130.146 <http://200.59.130.146>
>
> ;; Query time: 30 msec
> ;; SERVER: 200.59.130.146#53(ns1.dnsdigital.com.ar<http://ns1.dnsdigital.com.ar>
> )
> ;; WHEN: Thu Nov 17 14:29:04 2005
> ;; MSG SIZE rcvd: 211
>
>
> Thanks you all
> Fernando
>
> PS: in the last message endeed is "ns17.zoneedit.com<http://ns17.zoneedit.com>"
> and no't
> "ns17.zoneedit.com.ar <http://ns17.zoneedit.com.ar>"
>
>
>



More information about the bind-users mailing list