What am I missing?

Chris Zimmerman czimmer at wczimmerman.dyndns.org
Fri Jul 1 00:17:54 UTC 2005


My apologies.  That's what I get for posting late in the work day with 
no brain cycles left...

ns1.domain.com
named.conf:

options {
        directory "/var/named.data";    // directory for named
        forwarders {
                2.2.2.2;
                1.1.1.1;
        };
         query-source address * port 53;
         recursive-clients 5000;
         tcp-clients 5000;
};

zone "domain.com" {
        type master;
        file "db.domain";
};

... and so on...

domain.com zone file:

@       IN      SOA     ns1.domain.com. root.ns1.domain.com. (
                                  999912979     ; Serial
                                  10800         ; Refresh every 3 hours
                                  3600          ; Retry every hour
                                  604800        ; Expire after 1 week
                                  60 )  ; Minimum ttl of 1 day
;  Name Servers
                IN      NS      ns1.domain.com.
;               IN      NS      ns2.domain.com.
;
;
; *********** MAIL SYSTEMS **************************************
domain.com.   IN      MX      10      mail.domain.com.
; ******* DIVISIONAL PRINTERS *********************************
;
blah           IN      A       172.31.142.244
....and so on to the subdomain in the same zone file....
;**************************************************
$ORIGIN test.domain.com.
machine1          IN      A       10.247.0.20



ns2.domain.com
named.conf (same options as above)

zone "domain.com" {
        type slave;
        file "db.domain";
        masters { 172.29.3.11;} ;
};


dns1.test.domain.com
dns2.test.domain.com
Both are setup just like ns2.domain.com. 

The difference is in the /etc/resolv.conf.  ns1 and ns2 have domain.com 
for their search domain, where dns1 and dns2 have test.domain.com.  
Nslookup works fine from all machines.  I'm running into an issue with 
things like FTP clients and ssh from one machine to another.  If the 
resolv.conf points to a slave server then the ssh or ftp will take 10 
seconds to resolve the hostname and start the connection.  I've watched 
it with the querylogging turned on and I see 3 attempts to resolve AAAA 
hostnames (I know it's ipv6, but I'm not using it nor is it enabled on 
the machines), then a final attempt at an A record which works and the 
connection is made.  If I point at the master server, then I see 2 
attempts at AAAA records VERY quickly, then one A attempt which works.  
This is only if I use the short names to connect.  If I use the FQDN, 
everything works as expected.  I have compiled bind with the 
--disable-ipv6 option to no avail.  I have turned on the option in ssh 
that forces ipv4 which makes that work everytime (short names or not), 
but FTP still suffers even when compiled to turn off ipv6.  The host is 
SLES 9 with kernel 2.6.5 and all ipv6 use has been removed.

Where I'm confused is why the master works with short names or not in 
either the main domain.com or with the test.domain.com sub domain but 
the slaves don't?

Hope this helps to clarify things.





More information about the bind-users mailing list