HELP! DDNS Updates

[Kevin Darcy]

Comments interspersed below.

Daws, Phil wrote:

> Hi ...
>
> I am trying to do dynamic update but it wont work ... Here is the debug
> message I get, any ideas???
>
> ;; res_findzonecut: START dname='pdaws.eaeurope.com.' class=IN, zsize=1025,
> naddrs=3
> ;; res_findzonecut: get the soa, and see if it has enough glue
> ;; res_findzonecut: get the ns rrset and see if it has enough glue
> ;; res_findzonecut: get the missing glue and see if it's finally enough
> ;; res_findzonecut: add_addrs: 1
> ;; res_findzonecut: satisfy(eapub-dns.eaeurope.com): 1
> ;; res_findzonecut: FINISH n=1 (OK)
> ;; res_findzonecut: START dname='pdaws.eaeurope.com.' class=IN, zsize=1025,
> naddrs=3
> ;; res_findzonecut: get the soa, and see if it has enough glue
> ;; res_findzonecut: get the ns rrset and see if it has enough glue
> ;; res_findzonecut: get the missing glue and see if it's finally enough
> ;; res_findzonecut: add_addrs: 1
> ;; res_findzonecut: satisfy(eapub-dns.eaeurope.com): 1
> ;; res_findzonecut: FINISH n=1 (OK)
> ;; res_nupdate: res_mkupdate -> 64
> > > > ;; res_nmkquery(QUERY, pdaws.eaeurope.com., IN, SOA)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63410
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      pdaws.eaeurope.com, type = SOA, class = IN
>
> ;; Querying server (# 1) address = 10.21.46.100
> server rejected query:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63410
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      pdaws.eaeurope.com, type = SOA, class = IN
>
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63410
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      pdaws.eaeurope.com, type = SOA, class = IN
>
> ;; res_nmkquery(QUERY, eaeurope.com., IN, SOA)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63411
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      eaeurope.com, type = SOA, class = IN
>
> ;; Querying server (# 1) address = 10.21.46.100
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63411
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      eaeurope.com, type = SOA, class = IN
>
> ;; ANSWER SECTION:
> eaeurope.com.           1D IN SOA       eapub-dns.eaeurope.com.
> dns.eaeurope.com. (
>                                         2000081501      ; serial
>                                         3H              ; refresh
>                                         1H              ; retry
>                                         1W              ; expiry
>                                         1D )            ; minimum
>
> ;; res_nmkquery(QUERY, eaeurope.com, IN, NS)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63412
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      eaeurope.com, type = NS, class = IN
>
> ;; Querying server (# 1) address = 10.21.46.100
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63412
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
> ;; QUERY SECTION:
> ;;      eaeurope.com, type = NS, class = IN
>
> ;; ANSWER SECTION:
> eaeurope.com.           1D IN NS        eapub-dns.eaeurope.com.
>
> ;; ADDITIONAL SECTION:
> eapub-dns.eaeurope.com.  1D IN A  10.21.46.100
>
> ;; res_nmkquery(QUERY, pdaws.eaeurope.com., IN, SOA)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63413
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      pdaws.eaeurope.com, type = SOA, class = IN
>
> ;; Querying server (# 1) address = 10.21.46.100
> server rejected query:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63413
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      pdaws.eaeurope.com, type = SOA, class = IN

Why is 10.21.46.100 returning SERVFAIL for an SOA query of
"pdaws.eaeurope.com"? Assuming it's the master, it should be returning
NXDOMAIN or NOERROR. This is probably the root cause of the problem.

> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 63413
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      pdaws.eaeurope.com, type = SOA, class = IN
>
> ;; res_nmkquery(QUERY, eaeurope.com., IN, SOA)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63414
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      eaeurope.com, type = SOA, class = IN
>
> ;; Querying server (# 1) address = 10.21.46.100
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63414
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      eaeurope.com, type = SOA, class = IN
>
> ;; ANSWER SECTION:
> eaeurope.com.           1D IN SOA       eapub-dns.eaeurope.com.
> dns.eaeurope.com. (
>                                         2000081501      ; serial
>                                         3H              ; refresh
>                                         1H              ; retry
>                                         1W              ; expiry
>                                         1D )            ; minimum
>
> ;; res_nmkquery(QUERY, eaeurope.com, IN, NS)
> ;; res_send()
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63415
> ;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
> ;; QUERY SECTION:
> ;;      eaeurope.com, type = NS, class = IN
>
> ;; Querying server (# 1) address = 10.21.46.100
> ;; got answer:
> ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 63415
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 1
> ;; QUERY SECTION:
> ;;      eaeurope.com, type = NS, class = IN
>
> ;; ANSWER SECTION:
> eaeurope.com.           1D IN NS        eapub-dns.eaeurope.com.
>
> ;; ADDITIONAL SECTION:
> eapub-dns.eaeurope.com.  1D IN A  10.21.46.100
>
> ;; res_send()
> ;; ->>HEADER<<- incorrect section name: quit

I think you got your command syntax a little screwed up here. There is no
"quit" command in nsupdate.

> opcode: UPDATE, status: NOERROR, id: 63416
> ;; flags:; ZONE: 1, PREREQUISITE: 1, UPDATE: 1, ADDITIONAL: 0
> ;;      eaeurope.com, type = SOA, class = IN
> pdaws.eaeurope.com.     0S NONE ANY     \#(             ; unknown RR type
> pdaws.eaeurope.com.     30M IN A        10.21.34.50
> ;; Querying server (# 1) address = 10.21.46.100
> ;; got answer:
> ;; ->>HEADER<<- opcode: UPDATE, status: NOTAUTH, id: 63416
> ;; flags: qr ra; ZONE: 0, PREREQUISITE: 0, UPDATE: 0, ADDITIONAL: 0

Ignore the "unknown RR type" messages. That's just because the resolver debug
output routines haven't yet caught up to the semantics of Dynamic
Update.
- Kevin