international domain registration issues/dns related

[Barry Margolin]

In article <a2ppk6$d4c at pub3.rc.vix.com>,  <sid_shapiro at bio-rad.com> wrote:
>I would agree - getting help from my agent seems a good place to start. However,
>what I've gotten in the past was exactly this, for example:
>
>"For the primary, the following error was given:
>        No Authoritive NS records were returned from this NameServer."
>
>I believe I (verisign) told them that the primary ns for the domain should be
>ns1.mis.bio-rad.com. If I dig @ns1.mis.bio-rad.com bio-rad.co.nz ns
>I get 
>;; ANSWER SECTION:
>bio-rad.co.nz.          1D IN NS        sol.earthlink.net.
>bio-rad.co.nz.          1D IN NS        luna.earthlink.net.
>bio-rad.co.nz.          1D IN NS        ns2.noc.netcom.net.
>bio-rad.co.nz.          1D IN NS        ns1.mis.bio-rad.com.
>bio-rad.co.nz.          1D IN NS        ns1.noc.netcom.net. 
>
>Which looks to me as though I'm returning authoritative information. So if I
>think I am, and they think I'm not, there is a disconnect. It could easily be in
>my mind and I'm doing stuff wrongly, in which case I'd love to hear what it is.
>But if I'm not doing it wrongly, how do I converse with them unless I can
>"duplicate their results"?

I don't know why it's working for you.  When I query your server, I get a
non-authoritative answer, shown below.  Maybe you have split DNS
configured, and you're accessing an internal server with the same name as
the public server.

BTW, don't forget to use the "+norec" option when querying the server.
Authoritative servers are not supposed to use recursion or forwarding to
get the information, and when caching servers query your server they do so
with the Recursion Desired flag turned off.  So you need to use this option
to emulate how your servers will normally be queried.

% dig bio-rad.co.nz ns @ns1.mis.bio-rad.com +norec

; <<>> DiG 8.3 <<>> bio-rad.co.nz ns @ns1.mis.bio-rad.com +norec 
; (1 server found)
;; res options: init defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 34136
;; flags: qr ra; QUERY: 1, ANSWER: 5, AUTHORITY: 0, ADDITIONAL: 5
;; QUERY SECTION:
;;	bio-rad.co.nz, type = NS, class = IN

;; ANSWER SECTION:
bio-rad.co.nz.		1h2m43s IN NS	luna.earthlink.net.
bio-rad.co.nz.		1h2m43s IN NS	ns2.noc.netcom.net.
bio-rad.co.nz.		0S IN NS	ns1.mis.bio-rad.com.
bio-rad.co.nz.		1h2m43s IN NS	ns1.noc.netcom.net.
bio-rad.co.nz.		1h2m43s IN NS	sol.earthlink.net.

;; ADDITIONAL SECTION:
luna.earthlink.net.	21m48s IN A	207.69.188.193
ns2.noc.netcom.net.	20h36m18s IN A	199.183.9.2
ns1.mis.bio-rad.com.	0S IN A		198.211.153.71
ns1.noc.netcom.net.	1d9h27m24s IN A  204.31.1.1
sol.earthlink.net.	21m48s IN A	207.69.188.192

;; Total query time: 157 msec
;; FROM: tools.genuity.com to SERVER: ns1.mis.bio-rad.com  198.211.153.60
;; WHEN: Thu Jan 24 15:40:12 2002
;; MSG SIZE  sent: 31  rcvd: 241

-- 
Barry Margolin, barmar at genuity.net
Genuity, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.