How to get AD flag

[Alan Clegg]

On Aug 2, 2013, at 9:19 PM, Alan Clegg <alan at clegg.com> wrote:

> 
> On Aug 2, 2013, at 11:35 AM, David Newman <dnewman at networktest.com> wrote:
> 
>> That looks OK, but the forwarder might still be broken (i.e., it might
>> strip replies).
> 
> If this were the case and the resolver is correctly configured with a root anchor then all attempted validation (from the root down) would result in SERVFAIL.
> 
> I'm going with "misconfigured resolver" for 1000.

Or, on a second (third?) reading of the original problem, very possibly a missing DS record in the parent of the zone in question, but we don't really know enough at this point.

AlanC
-- 
Alan Clegg | +1-919-355-8851 | alan at clegg.com

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130802/10963acc/attachment.bin>