Unexplainable Problem with Upgrade 8.2.3-REL to 9.1.2

[Kevin Darcy]

Are you a slave for aps.anl.gov? BIND 8 used to "mix glue" between parent
and child zones, on zone transfers. My guess is that the delegations from
aps.anl.gov to ser.aps.anl.gov are wrong, but you never noticed it before
because there was enough glue from the child zone for your nameserver(s)
to use. BIND 9, on the other hand, enforces strict zone-cut separation,
so immediately after the upgrade you were seeing the "raw", incorrect
delegation information in the zone transfer. Now you've covered up that
problem by making yourself authoritative for the child zone. But the
delegations should be fixed.

BTW, if this is the externally-visible ser.aps.anl.gov you're talking
about, it definitely has delegation problems. nsx.lbl.gov is answering
non-authoritatively for ser.aps.anl.gov and ns2.es.net returns NXDOMAIN!


- Kevin

Barry Finkel wrote:

> We saw a strange problem with BIND.  We have had no problems
> resolving names in the domain
>
>      ser.aps.anl.gov
>
> until last night.  This morning I called the hostmaster of the
>
>      aps.anl.gov
>
> domain, and he told me that the
>
>      ser.aps.anl.gov
>
> domain has always been in its own zone file.  The only change made
> yesterday at that DNS server was to upgrade from 8.2.3-REL to 9.1.2;
> the claim is that there were no zone data files updated.  I cannot
> see how the BIND upgrade could have caused this problem.  Does anyone
> (who is more familiar with BIND 8 than I) have any comments?
>
> I solved the problem by adding
>
>      ser.aps.anl.gov
>
> as a new zone on my BIND 8.2.3-REL slaves.
> ----------------------------------------------------------------------
> Barry S. Finkel
> Electronics and Computing Technologies Division
> Argonne National Laboratory          Phone:    +1 (630) 252-7277
> 9700 South Cass Avenue               Facsimile:+1 (630) 252-9689
> Building 221, Room B236              Internet: BSFinkel at anl.gov
> Argonne, IL   60439-4844             IBMMAIL:  I1004994