BIND8.2.2 - Slave servers don't update NS records

[Joseph S D Yao]

On Thu, Dec 07, 2000 at 08:41:29AM +0300, Aleksey Varzhel wrote:
> >On Wed, Dec 06, 2000 at 03:51:44PM +0300, Aleksey Varzhel wrote: > 
> >199901130 ; ... > Of course I updated serial number in the 
> >nnamed.inetcafe.ru
> >
> >Well, there goes my theory. I felt for sure that that serial number hadn't 
> >been updated since 13 Jan 1999. ;-]
> 
> I have tried to change the serial number to more appropriate ( like 
> 200012061 ) but it did not help. BTW my understanding is that it doesn't 
> matter what number you use as serial. The most important that this number 
> MUST be different from the previous one ( I just incremented it ). Am I 
> right ?
> Though 6 Dec 2000 looks more natural :).

Quite right.  It looks like someone started with the YYYYMMDDN
(year/month/day/N) convention, though, and you might as well keep it
up.  It's let me find mistakes I made when changing zones at too late
at night.

> >What are the serial numbers in the SOA records as read from the master and 
> >the slaves?
> 
> On the master I ran nslookup and typed "ls -d inetcafe.ru". It returned 
> exactly containment of my zone file including the serial of course. 
> Unfortunately I have no access on slave servers ( I mean physical access, I 
> can not start nslookup from there ).

nslookup
server slave.machine
ls -d inetcafe.ru

OR

dig axfr inetcafe.ru @slave.machine

> >From the slave, can you resolve the name "www.jaba.inetcafe.ru"? If not, 
> >what is the error message? Also, can you resolve it from the slave using 
> >the master as your name server?
> 
> Again I used "nslookup". Setup one of slave servers as default and asked 
> about "www.jaba.inetcafe.ru". Reply was like this:
> <ip address> can't resolve "www.jaba.inetcafe.ru": unspecified error
> It is not much information, is it ?
> I am sorry, could you advise me how to "resolve it from the slave using the 
> master as your name server", please.

You would have to log in on the slave and do the same thing, and you
have just now told me that you do not have that access.

You need to get with the slaves' owners and work this problem with
them.

> Here is another development of this issue. Yesterday I found that slave 
> servers suddenly saw my subdomains. So probably they do update on a daily 
> basis and have some restriction on update on NOTIFY message. Is it possible 
> ?

Yes.

> And the question is still alive:-
> Is it possible to make slave servers see an updated zone immediately ???

Work with the owners to get better communication.

-- 
Joe Yao				jsdy at cospo.osis.gov - Joseph S. D. Yao
COSPO/OSIS Computer Support					EMT-B
-----------------------------------------------------------------------
This message is not an official statement of COSPO policies.