Authority for subdomains
The Tanster
The.Tanster at gmail.com
Thu Apr 7 20:20:12 UTC 2005
Barry Margolin <barmar at alum.mit.edu> wrote:
> In article <d31mb9$2e3h$1 at sf1.isc.org>, The.Tanster at gmail.com (The
> Tanster) wrote:
>
> > Barry Margolin <barmar at alum.mit.edu> wrote:
> >
> > > In article <d2scfm$2nr3$1 at sf1.isc.org>, The.Tanster at gmail.com (The
> > > Tanster) wrote:
> > >
> > > > Barry Margolin <barmar at alum.mit.edu> wrote:
> > > >
> > > > > In article <d2s32c$1gvc$1 at sf1.isc.org>, The.Tanster at gmail.com (The
> > > > > Tanster) wrote:
> > > > >
> > > > > > How can one set up a Master DNS server for a subdomain that one
> > > > > > is running on a private network to be authoritative for that
> > > > > > subdomain only (i.e. have a nslookup or dig query return an
> > > > > > "authoritative" instead of a "non-authoritative" answer when
> > > > > > looking up a host only within that subdomain)? Can it be done
> > > > > > in the named.conf through some keyword? I've looked through the
> > > > > > O'Reilly DNS & BIND book by Cricket Liu et al and I can't find
> > > > > > any information on this. Thanks in advance.
> > > > >
> > > > > zone "sub.domain.com" { type master; file "subdomain.db"; };
> > > > >
> > > > > and then put the subdomain data in subdomain.db.
> > > >
> > > > Unfortunately, I've already done that but both nslookup and dig
> > > > *STILL* continue to give me a "non-authoritative" answer.
> > >
> > > Then you've probably got a syntax error in the zone file. Check your
> > > syslog for the error message, which includes the line number that it
> > > failed on. Or use named-checkzone.
> >
> > I doubt it mainly because named is still running (it barfs and dies if
> > there's a syntax error on my system) and there's nothing in syslog or
> > any other logs that I can see. I've seen the error messages and line
> > numbers in syslog whenever I make a typo in named.conf, etc, and named
> > spits up, so I know what you're referring to.
>
> Non-authoritative happens when named.conf is correct but there's a syntax
> error in the db file. That doesn't normally cause named to die.
Okay. I will scour the db files, both forward and reverse again.
Thanks. And try to figure out whether the "logging" options will add
more data to my syslog files.
>
> >
> > What is "named-checkzone"? I don't have this utility on my system (I'm
> > running a DEC Tru64 version 5.0 system).
>
> It's included with BIND 9. If your OS vendor doesn't provide it, you
> should download the BIND 9 distribution and compile it yourself.
Ah! Okay. I have an earlier BIND version. I'll upgrade. Thanks
again.
More information about the bind-users
mailing list