topic Re: DNS not finding authoritative answer in Communications and Wireless

DNS not finding authoritative answer

Sean OB_1 — Tue, 26 Aug 2003 12:51:43 GMT

Hello!

I have the following entry in my named.conf file:

zone "matc.edu" {
type master;
file "/etc/namedb/named.db";
also-notify { 148.8.60.70; };
};

The head of the named.db file is the following:

;
$TTL 86400
@ IN SOA mail.matc.edu. root.matc.edu. (
2003082600 ; Serial
86400 ; Refresh
7200 ; Retry
3600000 ; Expire
86400 ; Minimum
)
IN A 148.8.128.21
IN NS mail
IN NS garden-brau.csd.uwm.edu.
IN NS harry
;

However when I do any lookup for any machine in this domain it tells me it is a non authoritative answer.

Anyone have any idea why?

Re: DNS not finding authoritative answer

Jerome Henry — Tue, 26 Aug 2003 13:37:10 GMT

Hi Sean,

your @ SOA line implies that mail.matc.edu is your main DNS, right ? And that root@matc.edu is root mail...
So are harry and garden-brau...

Did you set proper rights to your named.db ? Are you NS referenced in resolv.conf ? Otehrwise, nslookup use 127.0.0.1 as NS...

hth

J

Re: DNS not finding authoritative answer

Sean OB_1 — Tue, 26 Aug 2003 16:27:15 GMT

mail.matc.edu is the primary dns server for the matc.edu domain. Harry is a secondary server at matc.edu. Garden-brau is a remnant from a previous admin, so I'm not exactly sure what it is, I believe it is a secondary server as well.

root@mail:/etc/namedb-> cat /etc/resolv.conf
domain matc.edu
nameserver 148.8.128.21
nameserver 148.8.128.28
search matc.edu

root@mail:/etc/namedb-> ls -al named*
-r--rw-r-- 1 root dnsadm 1626 Feb 27 2003 named.ca
-rw-r--r-- 1 root other 1301 Aug 5 14:35 named.conf
-rw-rw-r-- 1 root dnsadm 424931 Aug 26 12:19 named.db
-rw-rw-r-- 1 root dnsadm 348 Nov 28 2001 named.local
-rw-r--r-- 1 root other 6 Aug 29 2002 named.pid
-rw-rw-r-- 1 root dnsadm 479729 Aug 26 08:32 named.rev

root@mail:/etc/namedb-> nslookup
Default Server: mail.milwaukee.tec.wi.us
Address: 148.8.128.21

> server localhost
Default Server: localhost.matc.edu
Address: 127.0.0.1

> mail.matc.edu
Server: localhost.matc.edu
Address: 127.0.0.1

Non-authoritative answer:
Name: mail.matc.edu
Address: 148.8.128.21

Re: DNS not finding authoritative answer

Sean OB_1 — Tue, 26 Aug 2003 16:34:46 GMT

I've corrected an error in the SOA to fix the mail address.

@ IN SOA mail.matc.edu. root.mail.matc.edu. (

The problem still exists. Reverse lookup seems to be authoritative, but not forward.

I'm seeing the following via nslookup:

> server mail.matc.edu
Default Server: mail.matc.edu
Address: 148.8.128.21

> set q=ns
> matc.edu
Server: mail.matc.edu
Address: 148.8.128.21

Non-authoritative answer:
matc.edu nameserver = mail.matc.edu
matc.edu nameserver = uwm.edu
matc.edu nameserver = harry.matc.edu

Authoritative answers can be found from:
mail.matc.edu internet address = 148.8.128.21
uwm.edu internet address = 129.89.169.3
uwm.edu internet address = 129.89.6.2
uwm.edu internet address = 129.89.7.2
harry.matc.edu internet address = 148.8.128.28

Why does it show mail and harry as non-authoritative AND authoritative?

Re: DNS not finding authoritative answer

Markku Leinio — Wed, 27 Aug 2003 08:18:49 GMT

Have you checked the log files, are there any error messages while named is starting?

Re: DNS not finding authoritative answer

Alexander Chuzhoy — Wed, 27 Aug 2003 12:47:46 GMT

You've let us see only par tof your /etc/named.conf file.
Do you have there an entry like the following:

forwarders {x.x.x.x};
forward only;
???

best regards!

Re: DNS not finding authoritative answer

Alexander Chuzhoy — Wed, 27 Aug 2003 12:47:50 GMT

You've let us see only part tof your /etc/named.conf file.
Do you have there an entry like the following:

forwarders {x.x.x.x};
forward only;
???

best regards!

Re: DNS not finding authoritative answer

Alexander Chuzhoy — Wed, 27 Aug 2003 12:47:54 GMT

You've let us see only part of your /etc/named.conf file.
Do you have there an entry like the following:

forwarders {x.x.x.x};
forward only;
???

best regards!

Re: DNS not finding authoritative answer

Sean OB_1 — Wed, 27 Aug 2003 13:40:13 GMT

Some times I could just beat my head against the wall from stupidity!!!

I don't know why I didn't see the errors when it started, but there was a bad record that caused the zone to be rejected. I fixed the record and it's now answering authoritatively.

Thanks for the help everyone!