<div dir="ltr">Hi Michel.<div>Please can you send the following information:</div><div>- name and IP address of the authoritative server</div><div>- the full contents of the zone file for "reseau1.lan"</div><div>- name and IP address of the other server - what does this server do?</div><div>- What is the machine "pc1", on which you are running the digs?</div><div>- the file "/etc/resolv.conf" on "pc1"</div><div><br></div><div>Please also re-send the digs with full output.</div><div>When you send information, please send it as text, not screenshots.</div><div><br></div><div>Thanks, Greg</div></div><br><div class="gmail_quote"><div dir="ltr" class="gmail_attr">On Sun, 14 Jan 2024 at 22:04, Michel Diemer via bind-users <<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a>> wrote:<br></div><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex"><div><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">Ders bind users,</span></font><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">I have already asked a similar question which was more about DNS in general , this one is very specific about the AA bit.<br>
<br>
Today's question is : <span style="font-family:arial,helvetica,sans-serif"><span style="display:inline-block"><strong>« <span style="display:inline-block"><span style="display:inline-block"><span style="display:inline-block"><span style="display:inline-block">"dig pc1.reseau1.lan ns"</span></span></span></span></strong></span></span></span></font><span style="font-family:arial,helvetica,sans-serif"><span style="display:inline-block;font-size:12px"><strong><span style="display:inline-block"><span style="display:inline-block"><span style="display:inline-block"><span style="display:inline-block"><strong style="font-family:arial,helvetica,sans-serif;font-size:12px"><span style="display:inline-block"> show AUTHORITY: 1 and "</span></strong><strong style="font-family:arial,helvetica,sans-serif"><span style="display:inline-block">dig pc1.reseau1.lan" shows AUTHORITY: 0. Which setting or knowledge am I missing</span></strong></span></span></span><strong style="font-family:arial,helvetica,sans-serif;font-size:12px"><span style="display:inline-block"> ? If possible, how to get AA answers for QNAME queries ? »</span></strong></span></strong></span></span><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">I have set up two virtual machines on a virtual local network using Oracle VirtualBox. One machine is a DNS authoritative-only server. </span></font><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">The zone is named "reseau1.lan" and defined only in bind9 zone files. If I really have to, I will name it "reseau1.home.arpa" according to RFC 8375. (I chose .lan inspired by RFC 6762 appendix G). The IP address of the DNS server is 172.16.0.254 and the IP address of pc1 is 172.16.0.21.</span></font><br>
<br>
<br>
<span style="display:inline-block;font-family:arial,helvetica,sans-serif;font-size:14px"><span style="display:inline-block"><strong><span style="font-family:"courier new",courier,monospace">dig soa reseau1.lan</span></strong></span></span><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"> : </span></font><span style="color:rgb(0,128,0);font-family:arial,helvetica,sans-serif;font-size:12px">the AA bit is set</span><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">, which is what I am looking for</span></font><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"><img id="m_-9028234178804050480loadimage5400853000000119" src="cid:ii_18d0a091b77758165cf1"><span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span></span></font><span style="font-family:arial,helvetica,sans-serif;font-size:12px;text-decoration:none">͏ </span><br>
<br>
<strong style="font-family:arial,helvetica,sans-serif;font-size:12px"><span style="font-family:"courier new",courier,monospace"><span style="display:inline-block;font-size:14px"> dig pc1.reseau1.lan ns</span></span></strong><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"> : </span></font><span style="color:rgb(0,128,0);font-family:arial,helvetica,sans-serif;font-size:12px"> the AA bit is set</span><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"><img id="m_-9028234178804050480loadimage6206303000000119" src="cid:ii_18d0a091b77474de2ec2"><span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span>͏ </span></font><br>
<br>
<strong style="font-family:arial,helvetica,sans-serif;font-size:12px;text-decoration-line:none"><span style="display:inline-block;font-size:14px"><span style="font-family:"courier new",courier,monospace">dig pc1.reseau1.lan</span></span></strong><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"> : </span></font><span style="display:inline-block"><u><strong style="color:rgb(255,140,0);font-family:arial,helvetica,sans-serif;font-size:16px;text-decoration-line:none">the AA bit is not set. Why ? Which setting or knowledge am I missing ?</strong></u></span><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"><img id="m_-9028234178804050480loadimage8504625" src="cid:ii_18d0a091b772f5090593"><br>
<br>
Below my "named.conf.options" file<br>
<br>
<img id="m_-9028234178804050480loadimage13119901000000238" src="cid:ii_18d0a091b7772a095dd4"><span style="text-decoration:none">͏ </span><br>
<br>
<br>
<span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span></span></font><span style="font-family:arial,helvetica,sans-serif;font-size:12px;text-decoration:none">͏ </span></div>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</blockquote></div>