Consistent error message in named.log

[Worsham, Michael]

Is there a way to see from the primary master named server side to see
what the client is trying to update? The /var/adm/syslog/named.log
output just shows some basic NXDOMAIN information failing, so we just
want to see what subdomain or domain name it is trying to update.

We have somewhere in the range of 75 virtual firewalls so looking at
each one is really not an option.

-- Michael
 

-----Original Message-----
From: Mark_Andrews at isc.org [mailto:Mark_Andrews at isc.org] 
Sent: Thursday, June 28, 2007 11:00 PM
To: Worsham, Michael
Cc: bind-users at isc.org
Subject: Re: Consistent error message in named.log 


> Platform: HP-UX 11.00
> BIND Version: 9.2.0 for HP-UX 11.0
> We are encountering this message in our named.log file:

	This is a FAQ.

Q: I keep getting log messages like the following. Why?

   Dec 4 23:47:59 client 10.0.0.1#1355: updating zone 'example.com/IN':
update
   failed: 'RRset exists (value dependent)' prerequisite not satisfied
(NXRRSET)
   
A: DNS updates allow the update request to test to see if certain
conditions are
   met prior to proceeding with the update. The message above is saying
that
   conditions were not met and the update is not proceeding. See
doc/rfc/
   rfc2136.txt for more details on prerequisites.

Also prerequisites are processed before any acls according to RFC 2136
which
is why you see these even when updates are denied for everyone.

	Mark

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org