DDNS & Authority
Anthony Ryan Mattke
tonhe at ims1.imagestream-is.com
Mon Feb 5 14:43:02 UTC 2001
When doing a NS Update using tsig keys the master domain server reports
NOTAUTH, when in fact it is the primary server both with internic and
software wise aswell. The zone loads w/o errors (minus warnings about
expire and refresh values)
Feb 1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA expire value is
less than refresh + 10 * retry (300 < (60 + 10 * 200))
Feb 1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA expire value is
less than 7 days (300)
Feb 1 12:22:44 ims1 named[24724]: db.iphere: WARNING SOA refresh value is
less than 2 * retry (60 < 200 * 2)
Feb 1 12:22:44 ims1 named[24724]: master zone "iphere.com" (IN) loaded
(serial 1010102)
Does anyone have any suggestions about why the server would report no
authority ?
__
~/ony
o Accept people for what they are -- completely unacceptable.
o
o__O_/
| 9:32am up 61 days, 3:06, 6 users, load average: 0.62, 0.28,
< \
btw, Here is the -d output
atoi:/var/log# nsupdate -d -k /etc/named/tsig:iphere.
> update add test.iphere.com. 333 in a 208.34.3.5
>
;; res_findzonecut: START dname='test.iphere.com.' class=IN, zsize=1025,
naddrs=3
;; res_findzonecut: get the soa, and see if it has enough glue
;; res_nmkquery(QUERY, test.iphere.com., IN, SOA)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20125
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;; test.iphere.com, type = SOA, class = IN
;; Querying server (# 1) address = 192.168.0.1
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 20125
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0
;; QUERY SECTION:
;; test.iphere.com, type = SOA, class = IN
;; AUTHORITY SECTION:
iphere.com. 3m20s IN SOA ims1.imagestream-is.com.
tonhe.imagestream-is.com. (
1010103 ; serial
1M ; refresh
3m20s ; retry
5M ; expiry
3m20s ) ; minimum
;; res_findzonecut: get the ns rrset and see if it has enough glue
;; res_nmkquery(QUERY, iphere.com, IN, NS)
;; res_send()
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20126
;; flags: rd; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;; iphere.com, type = NS, class = IN
;; Querying server (# 1) address = 192.168.0.1
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 20126
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 0, ADDITIONAL: 2
;; QUERY SECTION:
;; iphere.com, type = NS, class = IN
;; ANSWER SECTION:
iphere.com. 5M IN NS ims1.imagestream-is.com.
iphere.com. 5M IN NS ims2.imagestream-is.com.
;; ADDITIONAL SECTION:
ims1.imagestream-is.com. 1d13h16m4s IN A 205.159.243.5
ims2.imagestream-is.com. 5h51m49s IN A 192.168.100.1
;; res_findzonecut: get the missing glue and see if it's finally enough
;; res_findzonecut: add_addrs: 1
;; res_findzonecut: add_addrs: 1
;; res_findzonecut: satisfy(ims1.imagestream-is.com): 2
;; res_findzonecut: FINISH n=2 (OK)
;; res_nupdate: res_mkupdate -> 49
;; res_send()
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id: 20127
;; flags:; ZONE: 1, PREREQUISITE: 0, UPDATE: 1, ADDITIONAL: 1
;; iphere.com, type = SOA, class = IN
test.iphere.com. 5m33s IN A 208.34.3.5
iphere. 0S ANY TSIG HMAC-MD5.SIG-ALG.REG.INT. 0
;; Querying server (# 1) address = 205.159.243.5
;; got answer:
;; ->>HEADER<<- opcode: UPDATE, status: NOTAUTH, id: 20127
;; flags: qr ra; ZONE: 1, PREREQUISITE: 0, UPDATE: 0, ADDITIONAL: 1
;; iphere.com, type = SOA, class = IN
iphere. 0S ANY TSIG HMAC-MD5.SIG-ALG.REG.INT. 18
;; res_nupdate:
More information about the bind-users
mailing list