How to get AD flag

Alan Clegg alan at
Sat Aug 3 04:20:44 UTC 2013

On Aug 2, 2013, at 9:19 PM, Alan Clegg <alan at> wrote:

> On Aug 2, 2013, at 11:35 AM, David Newman <dnewman at> wrote:
>> That looks OK, but the forwarder might still be broken (i.e., it might
>> strip replies).
> If this were the case and the resolver is correctly configured with a root anchor then all attempted validation (from the root down) would result in SERVFAIL.
> I'm going with "misconfigured resolver" for 1000.

Or, on a second (third?) reading of the original problem, very possibly a missing DS record in the parent of the zone in question, but we don't really know enough at this point.

Alan Clegg | +1-919-355-8851 | alan at

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <>

More information about the bind-users mailing list