Private zone and BIND search order

Barry Margolin barmar at genuity.net
Wed Nov 14 23:14:25 UTC 2001


In article <9suru4$dig at pub3.rc.vix.com>, Sly <sly at sly.com> wrote:
>It is a zone that I created for internal purpose only and is not register
>anywhere (so I don't think it can be authoritative).

A master or slave is always authoritative for the zone, unless named
detects a syntax error in the zone file.  Delegation has nothing to do with
being authoritative.

>This is the entry for that zone in named.conf:
>
>zone "oracle-server" {
> notify no;
> type master;
> file "zone/oracle-server";
>};
>
>and the oracle-server file contains non-routable ip address.

Your original message said "that one server have an extension existing on
the internet (yyy.zz)".  But the zone name in your entry above doesn't
exist on the Internet.

I think the problem you're running into is that when a user types a name
with no domain suffix, the client's resolver appends the default domain by
default.  So if a machine's default domain is "foo.com", and an application
tries to look up "oracle-server", it will first try
"oracle-server.foo.com".  If this fails it will then try "oracle-server"
with no suffix.

The fix for this is to change the client configuration so it doesn't have a
default domain search list.  But this means that when users want to access
machines in the foo.com domain, they'll have to enter the full name, they
won't be able to abbreviate.

-- 
Barry Margolin, barmar at genuity.net
Genuity, Woburn, MA
*** DON'T SEND TECHNICAL QUESTIONS DIRECTLY TO ME, post them to newsgroups.
Please DON'T copy followups to me -- I'll assume it wasn't posted to the group.


More information about the bind-users mailing list