<div style="font-family:Arial, Helvetica, sans-serif; font-size:12px; color:#00000"></div>
<div style="font-family:Arial, Helvetica, sans-serif; font-size:12px; color:#00000"></div>
Dear Greg,<br>
Dear Mark,<br>
<br>
Once more thank you for your replies. Please see highlighted words below.<br>
<br>
I confirm that <span style="color:rgb(51, 51, 51); font-family:sans-serif,arial,verdana,trebuchet ms; font-size:medium">172.16.0.254 is the dns authoritative server.</span><br>
<br>
'pc1' means 'a generic computer on a local area network'. It could be a web server, a file server, a mail server. For a small structure with fixed ip addresses only, it could be a user's pc. On pc1 there is a fresh install of ubuntu 22.04 with only a few network settings (dhcp, dns, gateway). I created it only to test various network settings (dynamic dns, fixed ip address, dhcp provided ip address, ...). <br>
<br>
For this specific question about authoritative server, pc1 has a fixed ip address. Ubuntu's networkd-resolved local dns caching and stub is disabled, (Cache=no, DNSStubListener=no).<span style="color:rgb(51, 51, 51); font-family:sans-serif,arial,verdana,trebuchet ms; font-size:initial; white-space:pre"> For this specific question, I have only two computers, one authoritative non-recursive dns server and a generic computer named pc1. </span><br>
<br>
<br>
Please have a look at the highlighted text below to understand my question :<br>
<br>
<span style="color:rgb(51, 51, 51); font-family:sans-serif,arial,verdana,trebuchet ms; font-size:medium">Command </span><span style="display:inline-block; font-size:22px"><span style="background-color:rgb(255, 215, 0); color:rgb(255, 0, 0); font-family:sans-serif,arial,verdana,trebuchet ms">dig pc1.reseau1.lan <strong>ns</strong></span></span>
<div style="color: rgb(201, 209, 217); background-color: rgb(23, 34, 55); font-family: Menlo, "Victor Mono", "Source Code Pro", "Noto Sans Mono", "Dank Mono", Monoid, "Cascadia Code", Consolas, "Inconsolata SemiExpanded", Ø, "Victor Mono", Hack, "Mplus 1m", "Courier New", "Ubuntu Mono", Consolas, "Courier New", monospace; font-size: 14px; line-height: 19px; white-space: pre;">
<div>;; Got answer:</div>
<div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 56002</div>
<div>;; flags: qr aa rd; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 1</div>
</div>
<br>
<span style="color:#0000FF"><u><span style="font-size:22px">AUTHORITY: 1 : this is ok.</span></u></span><br>
<br>
<br>
Command <span style="display:inline-block; font-size:22px"><span style="background-color:rgb(255, 215, 0); color:rgb(255, 0, 0); font-family:sans-serif,arial,verdana,trebuchet ms">dig pc1.reseau1.lan </span></span>
<div style="color: rgb(201, 209, 217); background-color: rgb(23, 34, 55); font-family: Menlo, "Victor Mono", "Source Code Pro", "Noto Sans Mono", "Dank Mono", Monoid, "Cascadia Code", Consolas, "Inconsolata SemiExpanded", Ø, "Victor Mono", Hack, "Mplus 1m", "Courier New", "Ubuntu Mono", Consolas, "Courier New", monospace; font-size: 14px; line-height: 19px; white-space: pre;">
<div>;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57670</div>
<div>;; flags: qr aa rd; QUERY: 1, ANSWER: 1, <span style="color:#FF0000"><span style="background-color:#FFD700">AUTHORITY: 0</span></span>, ADDITIONAL: 1</div>
</div>
<br>
<strong><span style="color:#008000"><u><span style="display:inline-block; font-size:22px"><span style="display:inline-block">Why AUTHORITY: 0 and not <span style="font-family:sans-serif,arial,verdana,trebuchet ms">AUTHORITY: 1 ???</span></span></span></u></span></strong><br>
<div class="gl_quote" style="margin-top: 20px; padding-top: 5px;">De : "Greg Choules" <gregchoules+bindusers@googlemail.com><br>
A : pub.diemer29@laposte.net,bind-users@lists.isc.org<br>
Envoyé: lundi 15 Janvier 2024 18:27<br>
Objet : Re: Question about authoritative server and AA Authoritative Answer<br>
<div class="gl_quoted">
<div dir="ltr">Hi again and thanks for that.
<div>I'm still not exactly clear on the setup. I think the auth server is 172.16.0.254 (I don't know what pc1 is).</div>
<div>But anyway, looking at your results I see the AA bit for everything. It appears that these queries both went directly to the auth server because recursion is disabled and it told you so.</div>
<div> </div>
<div>======</div>
<div> </div>
<div># pc1@pc1:~<br>
dig pc1.reseau1.lan<br>
```<br>
<br>
```txt<br>
; <<>> DiG 9.18.18-0ubuntu0.22.04.1-Ubuntu <<>> pc1.reseau1.lan<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57670<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1<br>
;; WARNING: recursion requested but not available</div>
<div> </div>
<div># ns1@ns1:~<br>
<span style="color:#FF0000"><span style="background-color:#FFD700">dig pc1.reseau1.lan</span></span><br>
```<br>
<br>
```txt<br>
; <<>> DiG 9.18.18-0ubuntu0.22.04.1-Ubuntu <<>> pc1.reseau1.lan<br>
;; global options: +cmd<br>
;; Got answer:<br>
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 2379<br>
;; flags: qr aa rd; QUERY: 1, ANSWER: 1, <span style="color:#FFD700"><span style="background-color:#FF0000">AUTHORITY: 0</span></span>, ADDITIONAL: 1<br>
;; WARNING: recursion requested but not available</div>
<div> </div>
<div>======</div>
<div> </div>
<div>So unless I'm missing something I don't see your problem.</div>
<div>Cheers, Greg</div>
</div>
<div class="gmail_quote">
<div class="gmail_attr" dir="ltr">On Mon, 15 Jan 2024 at 15:24, <<a href="mailto:pub.diemer29@laposte.net">pub.diemer29@laposte.net</a>> wrote:</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div style="font-family:Arial,Helvetica,sans-serif;font-size:12px">Dear Greg, <br>
<br>
Thank you for your reply.<br>
<br>
<br>
Please find attached the markdown file with all the commands and text from the terminal.<br>
<br>
In /etc/resolv.conf I had "127.0.0.53" so I disabled the DNSStubListener from systemd-resolved. I have netplan and networkd.<br>
<br>
<br>
Kind Regards,<br>
<br>
Michel Diemer.<br>
<br>
</div>
<div style="margin-top:20px;padding-top:5px">De : "Greg Choules"<br>
A : <a href="mailto:pub.diemer29@laposte.net" target="_blank">pub.diemer29@laposte.net</a>,<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
Envoyé: dimanche 14 Janvier 2024 23:28<br>
Objet : Re: Question about authoritative server and AA Authoritative Answer<br>
<div>
<div dir="ltr">Hi Michel.
<div>Please can you send the following information:</div>
<div>- name and IP address of the authoritative server</div>
<div>- the full contents of the zone file for "reseau1.lan"</div>
<div>- name and IP address of the other server - what does this server do?</div>
<div>- What is the machine "pc1", on which you are running the digs?</div>
<div>- the file "/etc/resolv.conf" on "pc1"</div>
<div> </div>
<div>Please also re-send the digs with full output.</div>
<div>When you send information, please send it as text, not screenshots.</div>
<div> </div>
<div>Thanks, Greg</div>
</div>
<div class="gmail_quote">
<div class="gmail_attr" dir="ltr">On Sun, 14 Jan 2024 at 22:04, Michel Diemer via bind-users <<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a>> wrote:</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
<div><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">Ders bind users,</span></font><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">I have already asked a similar question which was more about DNS in general , this one is very specific about the AA bit.<br>
<br>
Today's question is : <span style="font-family:arial,helvetica,sans-serif"><span style="display:inline-block"><strong>« <span style="display:inline-block"><span style="display:inline-block"><span style="display:inline-block"><span style="display:inline-block">"dig pc1.reseau1.lan ns"</span></span></span></span></strong></span></span></span></font><span style="font-family:arial,helvetica,sans-serif"><span style="display:inline-block; font-size:12px"><strong><span style="display:inline-block"><span style="display:inline-block"><span style="display:inline-block"><span style="display:inline-block"><strong style="font-family:arial,helvetica,sans-serif; font-size:12px"><span style="display:inline-block"> show AUTHORITY: 1 and "</span></strong><strong style="font-family:arial,helvetica,sans-serif"><span style="display:inline-block">dig pc1.reseau1.lan" shows AUTHORITY: 0. Which setting or knowledge am I missing</span></strong></span></span></span><strong style="font-family:arial,helvetica,sans-serif; font-size:12px"><span style="display:inline-block"> ? If possible, how to get AA answers for QNAME queries ? »</span></strong></span></strong></span></span><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">I have set up two virtual machines on a virtual local network using Oracle VirtualBox. One machine is a DNS authoritative-only server. </span></font><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">The zone is named "reseau1.lan" and defined only in bind9 zone files. If I really have to, I will name it "reseau1.home.arpa" according to RFC 8375. (I chose .lan inspired by RFC 6762 appendix G). The IP address of the DNS server is 172.16.0.254 and the IP address of pc1 is 172.16.0.21.</span></font><br>
<br>
<br>
<span style="display:inline-block; font-family:arial,helvetica,sans-serif; font-size:14px"><span style="display:inline-block"><strong><span style="font-family:courier new,courier,monospace">dig soa reseau1.lan</span></strong></span></span><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"> : </span></font><span style="color:rgb(0,128,0); font-family:arial,helvetica,sans-serif; font-size:12px">the AA bit is set</span><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px">, which is what I am looking for</span></font><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"><img id="m_6633185723926485857m_-9028234178804050480loadimage5400853000000119" src="cid:ii_18d0a091b77758165cf1"><span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span></span></font><span style="font-family:arial,helvetica,sans-serif; font-size:12px; text-decoration:none">͏ </span><br>
<br>
<strong style="font-family:arial,helvetica,sans-serif; font-size:12px"><span style="font-family:courier new,courier,monospace"><span style="display:inline-block; font-size:14px"> dig pc1.reseau1.lan ns</span></span></strong><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"> : </span></font><span style="color:rgb(0,128,0); font-family:arial,helvetica,sans-serif; font-size:12px"> the AA bit is set</span><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"><img id="m_6633185723926485857m_-9028234178804050480loadimage6206303000000119" src="cid:ii_18d0a091b77474de2ec2"><span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span>͏ </span></font><br>
<br>
<strong style="font-family:arial,helvetica,sans-serif; font-size:12px; text-decoration-line:none"><span style="display:inline-block; font-size:14px"><span style="font-family:courier new,courier,monospace">dig pc1.reseau1.lan</span></span></strong><font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"> : </span></font><span style="display:inline-block"><u><strong style="color:rgb(255,140,0); font-family:arial,helvetica,sans-serif; font-size:16px; text-decoration-line:none">the AA bit is not set. Why ? Which setting or knowledge am I missing ?</strong></u></span><br>
<br>
<font face="Arial, Helvetica, sans-serif"><span style="font-size:12px"><img id="m_6633185723926485857m_-9028234178804050480loadimage8504625" src="cid:ii_18d0a091b772f5090593"><br>
<br>
Below my "named.conf.options" file<br>
<br>
<img id="m_6633185723926485857m_-9028234178804050480loadimage13119901000000238" src="cid:ii_18d0a091b7772a095dd4"><span style="text-decoration:none">͏ </span><br>
<br>
<br>
<span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span><span style="text-decoration:none">͏ </span></span></font><span style="font-family:arial,helvetica,sans-serif; font-size:12px; text-decoration:none">͏ </span></div>
--<br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/" rel="noreferrer" target="_blank">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/listinfo/bind-users</a></blockquote>
</div>
</div>
</div>
</blockquote>
</div>
</div>
</div>