DDNS & Authority

[Anthony Ryan Mattke]

When doing a NS Update using tsig keys the master domain server reports
NOTAUTH, when in fact it is the primary server both with internic and
software wise aswell. The zone loads w/o errors (minus warnings about
expire and refresh values)

Feb  1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA expire value is
less than refresh + 10 * retry (300 < (60 + 10 * 200))
Feb  1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA expire value is
less than 7 days (300)
Feb  1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA refresh value is
less than 2 * retry (60 < 200 * 2)
Feb  1 12:22:44 ims1 named[24724]: master zone "iphere.com" (IN) loaded
(serial 1010102)


Does anyone have any suggestions about why the server would report no
authority ?

 __ 
~/ony
    o            Accept people for what they are -- completely unacceptable.
       o     
  o__O_/     
     |          9:32am  up 61 days,  3:06,  6 users,  load average: 0.62, 0.28,
    < \

btw, Here is the -d output

atoi:/var/log# nsupdate -d -k /etc/named/tsig:iphere.     
> update add test.iphere.com. 333 in a 208.34.3.5
> 
;; res_findzonecut: START dname='test.iphere.com.' class=IN, zsize=1025,
naddrs=3
;; res_findzonecut: get the soa, and see if it has enough glue
;; res_nmkquery(QUERY, test.iphere.com., IN, SOA)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20125
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      test.iphere.com, type = SOA, class = IN

;; Querying server (# 1) address = 192.168.0.1
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20125
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUERY SECTION:
;;      test.iphere.com, type = SOA, class = IN

;; AUTHORITY SECTION:
iphere.com.             3m20s IN SOA    ims1.imagestream-is.com.
tonhe.imagestream-is.com. (
                                        1010103         ; serial
                                        1M              ; refresh
                                        3m20s           ; retry
                                        5M              ; expiry
                                        3m20s )         ; minimum


;; res_findzonecut: get the ns rrset and see if it has enough glue
;; res_nmkquery(QUERY, iphere.com, IN, NS)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20126
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;;      iphere.com, type = NS, class = IN

;; Querying server (# 1) address = 192.168.0.1
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20126
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2
;; QUERY SECTION:
;;      iphere.com, type = NS, class = IN

;; ANSWER SECTION:
iphere.com.             5M IN NS        ims1.imagestream-is.com.
iphere.com.             5M IN NS        ims2.imagestream-is.com.

;; ADDITIONAL SECTION:
ims1.imagestream-is.com.  1d13h16m4s IN A  205.159.243.5
ims2.imagestream-is.com.  5h51m49s IN A  192.168.100.1

;; res_findzonecut: get the missing glue and see if it's finally enough
;; res_findzonecut: add_addrs: 1
;; res_findzonecut: add_addrs: 1
;; res_findzonecut: satisfy(ims1.imagestream-is.com): 2
;; res_findzonecut: FINISH n=2 (OK)
;; res_nupdate: res_mkupdate -> 49
;; res_send()
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 20127
;; flags:; ZONE: 1, PREREQUISITE: 0, UPDATE: 1, ADDITIONAL: 1
;;      iphere.com, type = SOA, class = IN
test.iphere.com.        5m33s IN A      208.34.3.5
iphere.                 0S ANY TSIG     HMAC-MD5.SIG-ALG.REG.INT. 0
;; Querying server (# 1) address = 205.159.243.5
;; got answer:
;; ->>HEADER<<- opcode: UPDATE, status: NOTAUTH, id: 20127
;; flags: qr ra; ZONE: 1, PREREQUISITE: 0, UPDATE: 0, ADDITIONAL: 1
;;      iphere.com, type = SOA, class = IN
iphere.                 0S ANY TSIG     HMAC-MD5.SIG-ALG.REG.INT. 18
;; res_nupdate: