DNS "chicken-and-egg" Problem
D. Stussy
spam at bde-arc.ampr.org
Thu Oct 30 22:41:28 UTC 2008
<bsfinkel at anl.gov> wrote in message news:ged835$r82$1 at sf1.isc.org...
> To summarize this problem -
> ...
> 5) Someone (I do not remember who, and I cannot find the reply in
> the list archives) pointed out to me that the answers I am
> getting from UCLA are not authoritative - the "aa" flag is
> missing.
>
> What could cause glue information (that I think is correct) in the
> ucla.edu zones to be returned to my server as not authoritative?
> I now assume that the reason that my BIND does not cache the glue is
> that the glue is not marked authoritative. Thanks.
Because GLUE is never authoritative. To get the authoritative address
record, you need to query the zone, not its parent.
Your server is throwing away the glue record and cannot get to the zone.
This is either a bug or a configuration error.
It works for me (using a different version of BIND not 9.5.0):
; <<>> DiG 9.5.1b1 <<>> igpp.ucla.edu a +trace
... [snipped root and edu.]
ucla.edu. 172800 IN NS DNS3.ucla.edu.
ucla.edu. 172800 IN NS DNS2.ucla.edu.
ucla.edu. 172800 IN NS ADNS2.BERKELEY.edu.
ucla.edu. 172800 IN NS DNS.ucla.edu.
;; Received 180 bytes from 192.26.92.32#53(C3.NSTLD.COM) in 72 ms
igpp.ucla.edu. 21600 IN NS igpp.ucla.edu.
;; Received 61 bytes from 164.67.128.1#53(DNS.ucla.edu) in 2 ms
igpp.ucla.edu. 86400 IN A 128.97.94.1
igpp.ucla.edu. 86400 IN NS igpp.ucla.edu.
;; Received 61 bytes from 128.97.94.1#53(igpp.ucla.edu) in 2 ms
; <<>> DiG 9.5.1b1 <<>> igpp.ucla.edu a
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 9711
;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 1, ADDITIONAL: 0
;; QUESTION SECTION:
;igpp.ucla.edu. IN A
;; ANSWER SECTION:
igpp.ucla.edu. 86383 IN A 128.97.94.1
;; AUTHORITY SECTION:
igpp.ucla.edu. 21583 IN NS igpp.ucla.edu.
;; Query time: 2 msec
;; SERVER: ::1#53(::1)
;; WHEN: Thu Oct 30 22:36:25 2008
;; MSG SIZE rcvd: 61
Therefore, change your version (upgrade).
More information about the bind-users
mailing list