How to get AD flag
Alan Clegg
alan at clegg.com
Sat Aug 3 04:20:44 UTC 2013
On Aug 2, 2013, at 9:19 PM, Alan Clegg <alan at clegg.com> wrote:
>
> On Aug 2, 2013, at 11:35 AM, David Newman <dnewman at networktest.com> wrote:
>
>> That looks OK, but the forwarder might still be broken (i.e., it might
>> strip replies).
>
> If this were the case and the resolver is correctly configured with a root anchor then all attempted validation (from the root down) would result in SERVFAIL.
>
> I'm going with "misconfigured resolver" for 1000.
Or, on a second (third?) reading of the original problem, very possibly a missing DS record in the parent of the zone in question, but we don't really know enough at this point.
AlanC
--
Alan Clegg | +1-919-355-8851 | alan at clegg.com
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 495 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20130802/10963acc/attachment.bin>
More information about the bind-users
mailing list