[SLE] DNS problems
Hi List, I'm trying to configure my BIND 8 DNS server to be a secondary server. When I look at the whois-info, it tells me that my nameserver isn't authoritative for that domain. What can be wrong, or what should I do to allow my server to be an authoritative secondary-nameserver? TIA, Rogier -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
Hi Rogier This error usually indicates that the primary DNS does not recognise your DNS as a secondary. The primary DNS must list you as a secondary like this: IN NS yourserver.yourdomain.au. Note the dot/period at the end of the domain The way to check is do an nslookup on the primary like this (my domain is brevsville.com.au/210.9.112.210): nslookup - 210.9.112.210 (ensure you have the same spaces) set type=any (don't put any spaces in here) brevsiville.com.au This yields: Non-authoritative answer: brevsville.com.au nameserver = raymond.brevsville.com.au brevsville.com.au nameserver = server1.ycn.com.au brevsville.com.au preference = 1, mail exchanger = raymond.brevsville.com. au brevsville.com.au origin = raymond.brevsville.com.au mail addr = admin.brevsville.com.au serial = 540 refresh = 10800 (3H) retry = 3600 (1H) expire = 604800 (1W) minimum ttl = 86400 (1D) Authoritative answers can be found from: brevsville.com.au nameserver = raymond.brevsville.com.au brevsville.com.au nameserver = server1.ycn.com.au raymond.brevsville.com.au internet address = 210.9.112.210 server1.ycn.com.au internet address = 210.9.112.212 Showing server1.ycn.com.au as my secondary. Try this on your primary. If you are not listed as a secondary in this lookup, there is your problem. Talk to the admin in the primary about adding your secondary. Their address is in the SOA record as above admin.brevsville.com.au hth Chris On Fri, 14 Jul 2000 16:32:38 +0200, Rogier Maas wrote:
Hi List,
I'm trying to configure my BIND 8 DNS server to be a secondary server. When I look at the whois-info, it tells me that my nameserver isn't authoritative for that domain.
What canbe wrong, or what should I do to allow my server to be an authoritative secondary-nameserver?
TIA, Rogier
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
Hi, Did you update the NIC record for you domain by adding your nameserver to the list of nameservers? If you already did that, then you need to provide more info about this. How did you configure it as a secondary? What makes you think WHOIS is not listing your server as secondary? May be a relevent snippet of named.conf and WHOIS output would be useful too. Nadeem
On Fri, 14 Jul 2000 16:32:38 +0200, Rogier Maas wrote:
Hi List,
I'm trying to configure my BIND 8 DNS server to be a secondary server. When I look at the whois-info, it tells me that my nameserver isn't authoritative for that domain.
What canbe wrong, or what should I do to allow my server to be an authoritative secondary-nameserver?
TIA, Rogier
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
We have now added a secondary nameserver, and moved "guldennet.nl" to the third position. This is the config: Domain: flevoland.to (but the same issue is going on for chello.to) Whois-info taken from Tonga (www.tonic.to/whois?flevoland.to) Domain: flevoland.to Created on: Sun Mar 26 03:59:46 2000 Last edited on: Sat Jul 15 10:03:36 2000 Primary host add: 212.187.54.51 Primary host name: c18754051.telekabel.chello.nl Secondary host add: 212.187.52.226 Secondary host name: c18752226.telekabel.chello.nl Results from checking SOA records for listed servers: c18754051.telekabel.chello.nl has serial number 2000071421 guldennet.nl is not authoritative for flevoland.to END As you can see, my nameserver (c18752226.telekabel.chello.nl) is not even listed. Instead, the third nameserver (guldennet.nl) is listed, but claims not to be authoritative for this domain. on c18752226.telekabel.chello.nl, UDP and TCP ports 53 are open. Should I open more ports? (under 1024) Here is the named.conf: // generated by setupnamed options { directory "/var/named"; pid-file "/var/named/slave/named.pid"; check-names master fail; check-names slave warn; check-names response ignore; forward first; forwarders { 212.142.28.66; }; auth-nxdomain yes; multiple-cnames yes; }; /* * If there is a firewall between you and nameservers you want * to talk to, you might need to uncomment the query-source * directive below. Previous versions of BIND always asked * questions using port 53, but BIND 8.1 uses an unprivileged * port by default. */ // query-source address * port 53; zone "." { type hint; file "root.hint"; }; zone "flevoland.to" { type slave; file "/var/named/flevoland.to.hosts"; masters { 212.187.54.51; }; }; zone "chello.to" { type slave; file "/var/named/chello.to.hosts"; masters { 212.187.54.51; }; }; I don't have the zonefile for the primary server, since this is a windoze NT-server I don't have access to. Any help would be very appreciated! Rogier Maas Nadeem Hasan wrote:
Hi,
Did you update the NIC record for you domain by adding your nameserver to the list of nameservers?
If you already did that, then you need to provide more info about this. How did you configure it as a secondary? What makes you think WHOIS is not listing your server as secondary? May be a relevent snippet of named.conf and WHOIS output would be useful too.
Nadeem
On Fri, 14 Jul 2000 16:32:38 +0200, Rogier Maas wrote:
Hi List,
I'm trying to configure my BIND 8 DNS server to be a secondary server. When I look at the whois-info, it tells me that my nameserver isn't authoritative for that domain.
What canbe wrong, or what should I do to allow my server to be an authoritative secondary-nameserver?
TIA, Rogier
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
Hi rogier, Here is what I found out: #nslookup
set q=any flevoland.to
Non-authoritative answer: flevoland.to nameserver = c18754051.telekabel.chello.nl flevoland.to nameserver = guldennet.nl flevoland.to internet address = 212.187.54.51 Authoritative answers can be found from: flevoland.to nameserver = c18754051.telekabel.chello.nl flevoland.to nameserver = guldennet.nl c18754051.telekabel.chello.nl internet address = 212.187.54.51
set q=a guldennet.nl
*** ns.nadmm.com can't find guldennet.nl: Non-existent host/domain Now, as I thought earlier, your InterNIC record is not updated with the current info and is incorrect. guldennet.nl is listed as an authoritative nameserver but does not resolve to an IP address. TODO: Update your InterNIC record and either remove guldennet.nl or make sure it resolve to an IP and is running a nameserver with a zone for flevoland.nl. More comments are inline. Regards, Nadeem Rogier Maas wrote:
We have now added a secondary nameserver, and moved "guldennet.nl" to the third position. This is the config:
How did you do this? Did you just add it into the SOA of the zone?
Domain: flevoland.to (but the same issue is going on for chello.to)
Whois-info taken from Tonga (www.tonic.to/whois?flevoland.to)
Always use nslookup to find such info.
Domain: flevoland.to Created on: Sun Mar 26 03:59:46 2000 Last edited on: Sat Jul 15 10:03:36 2000 Primary host add: 212.187.54.51 Primary host name: c18754051.telekabel.chello.nl Secondary host add: 212.187.52.226 Secondary host name: c18752226.telekabel.chello.nl
Results from checking SOA records for listed servers:
c18754051.telekabel.chello.nl has serial number 2000071421 guldennet.nl is not authoritative for flevoland.to
END
As you can see, my nameserver (c18752226.telekabel.chello.nl) is not even listed. Instead, the third nameserver (guldennet.nl) is listed, but claims not to be authoritative for this domain.
This might be due to guldennet.nl being unresolved.
on c18752226.telekabel.chello.nl, UDP and TCP ports 53 are open. Should I open more ports? (under 1024)
No. This has nothing to do with ports.
Here is the named.conf:
It looks fine to me. -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
Brevsville Administrator wrote: The records show exactly what your records show. This is what's going on: Domain: flevoland.to nameserver: c18754051.telekabel.chello.nl (primary) nameserver: guldennet.nl (secondary) however, and this may be the problem, the IN-ADDR-ARPA for 195.81.35.224 is "guldennet.nl". But that hostname does not exist. My hostname is server.guldennet.nl or ns.guldennet.nl, not just "guldennet.nl". Could that be the problem? Here is the whois-info taken from the tonga-domain: www.tonic.to/whois?flevoland.to : Domain: flevoland.to Created on: Sun Mar 26 03:59:46 2000 Last edited on: Sat Jul 15 10:03:36 2000 Primary host add: 212.187.54.51 Primary host name: c18754051.telekabel.chello.nl Secondary host add: 195.81.35.224 Secondary host name: guldennet.nl Results from checking SOA records for listed servers: c18754051.telekabel.chello.nl has serial number 2000071421 guldennet.nl is not authoritative for flevoland.to END Greetings, Rogier Maas -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
btw, can anyone tell me the difference between a slave-zone and a stub-zone? Thanks Rogier -- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
Hi, A slave zone is used to declare a slave (or secondary) nameserver. Whereas a stub zone is used to make delegation of subdomains easier. It enable a nameserver to pickup changes to delegation info automatically. It is an experimental feature of BIND 4.9 and BIND 8. Nadeem Rogier Maas wrote:
btw, can anyone tell me the difference between a slave-zone and a stub-zone?
Thanks Rogier
-- To unsubscribe send e-mail to suse-linux-e-unsubscribe@suse.com For additional commands send e-mail to suse-linux-e-help@suse.com Also check the FAQ at http://www.suse.com/support/faq
participants (3)
-
admin@brevsville.com.au
-
icarus@guldennet.nl
-
nhasan@usa.net