[prev in list] [next in list] [prev in thread] [next in thread]
List: bind9-users
Subject: Re: SERVFAIL - internal view
From: Barry Finkel <b19141 () achilles ! ctd ! anl ! gov>
Date: 2004-02-04 15:14:38
Message-ID: 200402041514.JAA11390 () atalanta ! ctd ! anl ! gov
[Download RAW message or body]
Thomas Birke <Thomas.Birke@RZ.Uni-Augsburg.DE> wrote:
> here we are using bind 9.2.3. Our name server contains two views - one
> for internal one for external answers. Everything worked fine till last
> week.
>
> For our delegated zone verwaltung.uni-augsburg.de we entered the six
> active direcory domain ns entries _udp, _tcp,_sites,_msdce,
> ForestDNSZones and DomainDNSZones. If you use "dig
> _tcp.verwaltung.uni-augsburg.de. ns" on the internal view you get a
> SERVFAIL. Outside the University if you use this command everything
> works fine. If you compare output of the command "nslookup->ls -d " of
> the internal and of the external view, you will not find any
> difference. Also I entered /usr/local/named -d 10 and I got the
> following result:
> <trace output omitted here>>
I ran doc-2.1.4, and there were no problems reported on your parent
domain
verwaltung.uni-augsburg.de
But doc did report problems when I queried
_udp.verwaltung.uni-augsburg.de
The one nameserver that has that zone did not respond, and I cannot
tell if that zone (and the other "_" zones) are slaved on any other
servers.
I ran two "dig" commands, and one succeeded, while one produced
SERVFAIL. I am not sure what is happening. Below are the four
commands and their output.
======================================================================
britaine% doc -x -v verwaltung.uni-augsburg.de
Doc-2.1.4: doc -x -v verwaltung.uni-augsburg.de
Doc-2.1.4: Starting test of verwaltung.uni-augsburg.de. parent is uni-augsburg.de.
Doc-2.1.4: Test date - Wed Feb 4 09:02:23 CST 2004
soa @deneb.dfn.de. for uni-augsburg.de. has serial: 2004020402
soa @dns1.rz.uni-augsburg.de. for uni-augsburg.de. has serial: 2004020402
soa @dns2.rz.uni-augsburg.de. for uni-augsburg.de. has serial: 2004020402
SOA serial #'s agree for uni-augsburg.de. domain
Found 3 NS and 3 glue records for verwaltung.uni-augsburg.de. @deneb.dfn.de. (AUTH)
Found 3 NS and 2 glue records for verwaltung.uni-augsburg.de. \
@dns1.rz.uni-augsburg.de. (AUTH) Found 3 NS and 2 glue records for \
verwaltung.uni-augsburg.de. @dns2.rz.uni-augsburg.de. (AUTH) DNServers for \
uni-augsburg.de. === 3 were also authoritatve for verwaltung.uni-augsburg.de.
=== 0 were non-authoritative for verwaltung.uni-augsburg.de.
Servers for uni-augsburg.de. that are also authoritative for \
verwaltung.uni-augsburg.de. === agree on NS records for verwaltung.uni-augsburg.de.
NS list summary for verwaltung.uni-augsburg.de. from parent (uni-augsburg.de.) \
servers == deneb.dfn.de. dns1.rz.uni-augsburg.de. dns2.rz.uni-augsburg.de.
soa @deneb.dfn.de. for verwaltung.uni-augsburg.de. serial: 2004020402
soa @dns1.rz.uni-augsburg.de. for verwaltung.uni-augsburg.de. serial: 2004020402
soa @dns2.rz.uni-augsburg.de. for verwaltung.uni-augsburg.de. serial: 2004020402
SOA serial #'s agree for verwaltung.uni-augsburg.de.
Authoritative domain (verwaltung.uni-augsburg.de.) servers agree on NS for \
verwaltung.uni-augsburg.de. NS list from verwaltung.uni-augsburg.de. authoritative \
servers matches list from === parent (uni-augsburg.de.) servers also authoritative \
for verwaltung.uni-augsburg.de. Checking 0 potential addresses for hosts at \
verwaltung.uni-augsburg.de. ==
Summary:
No errors or warnings issued for verwaltung.uni-augsburg.de.
Done testing verwaltung.uni-augsburg.de. Wed Feb 4 09:02:26 CST 2004
britaine%
======================================================================
britaine% doc -x -v _udp.verwaltung.uni-augsburg.de.
Doc-2.1.4: doc -x -v _udp.verwaltung.uni-augsburg.de.
Doc-2.1.4: Starting test of _udp.verwaltung.uni-augsburg.de. parent is \
udp.verwaltung.uni-augsburg.de.
Doc-2.1.4: Test date - Wed Feb 4 09:08:37 CST 2004
WARNING: No NS found for parent domain udp.verwaltung.uni-augsburg.de.
soa @deneb.dfn.de. for verwaltung.uni-augsburg.de. has serial: 2004020402
soa @dns1.rz.uni-augsburg.de. for verwaltung.uni-augsburg.de. has serial: 2004020402
soa @dns2.rz.uni-augsburg.de. for verwaltung.uni-augsburg.de. has serial: 2004020402
SOA serial #'s agree for verwaltung.uni-augsburg.de. domain
Found 1 NS and 1 glue records for _udp.verwaltung.uni-augsburg.de. @deneb.dfn.de. \
(non-AUTH) Found 1 NS and 1 glue records for _udp.verwaltung.uni-augsburg.de. \
@dns1.rz.uni-augsburg.de. (non-AUTH) Found 1 NS and 1 glue records for \
_udp.verwaltung.uni-augsburg.de. @dns2.rz.uni-augsburg.de. (non-AUTH) DNServers for \
verwaltung.uni-augsburg.de. === 0 were also authoritatve for \
_udp.verwaltung.uni-augsburg.de. === 3 were non-authoritative for \
_udp.verwaltung.uni-augsburg.de. Servers for verwaltung.uni-augsburg.de. (not also \
authoritative for _udp.verwaltung.uni-augsburg.de.) === agree on NS records for \
_udp.verwaltung.uni-augsburg.de. NS list summary for _udp.verwaltung.uni-augsburg.de. \
from parent (verwaltung.uni-augsburg.de.) servers == \
verw-ads1.verwaltung.uni-augsburg.de. ;; res_nsend to server \
verw-ads1.verwaltung.uni-augsburg.de. 137.250.200.1: Connection timed out DIGERR \
(UNKNOWN): dig @verw-ads1.verwaltung.uni-augsburg.de. for SOA of \
_udp.verwaltung.uni-augsburg.de. failed
SYSerr: No servers for _udp.verwaltung.uni-augsburg.de. returned SOAs ...
Summary:
YIKES: doc aborted while testing _udp.verwaltung.uni-augsburg.de. parent \
verwaltung.uni-augsburg.de. Incomplete test for _udp.verwaltung.uni-augsburg.de. (2)
Done testing _udp.verwaltung.uni-augsburg.de. Wed Feb 4 09:08:49 CST 2004
britaine%
======================================================================
britaine% dig _udp.verwaltung.uni-augsburg.de ns
; <<>> DiG 8.3 <<>> _udp.verwaltung.uni-augsburg.de ns
;; res options: init recurs defnam dnsrch
;; res_nsend to server default -- 146.139.254.5: Connection timed out britaine% !! \
@@dns1.rz.uni-augsburg.de. dig _udp.verwaltung.uni-augsburg.de ns \
@@dns1.rz.uni-augsburg.de.
; <<>> DiG 8.3 <<>> _udp.verwaltung.uni-augsburg.de ns @@dns1.rz.uni-augsburg.de.
; Bad server: @dns1.rz.uni-augsburg.de. -- using default server and timer opts
; (3 servers found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 6
;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0
;; QUERY SECTION:
;; _udp.verwaltung.uni-augsburg.de, type = NS, class = IN
;; Total query time: 9906 msec
;; FROM: britaine.ctd.anl.gov to SERVER: default -- 146.139.254.5
;; WHEN: Wed Feb 4 09:03:07 2004
;; MSG SIZE sent: 49 rcvd: 49
britaine%
======================================================================
britaine% dig verwaltung.uni-augsburg.de ns @@dns1.rz.uni-augsburg.de.
; <<>> DiG 8.3 <<>> verwaltung.uni-augsburg.de ns @@dns1.rz.uni-augsburg.de.
; Bad server: @dns1.rz.uni-augsburg.de. -- using default server and timer opts
; (3 servers found)
;; res options: init recurs defnam dnsrch
;; got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 6
;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 0, ADDITIONAL: 3
;; QUERY SECTION:
;; verwaltung.uni-augsburg.de, type = NS, class = IN
;; ANSWER SECTION:
verwaltung.uni-augsburg.de. 1D IN NS dns2.RZ.uni-augsburg.de.
verwaltung.uni-augsburg.de. 1D IN NS deneb.dfn.de.
verwaltung.uni-augsburg.de. 1D IN NS dns1.RZ.uni-augsburg.de.
;; ADDITIONAL SECTION:
dns1.RZ.uni-augsburg.de. 16h39m27s IN A 137.250.1.254
dns2.RZ.uni-augsburg.de. 16h39m27s IN A 137.250.1.30
deneb.dfn.de. 23h59m1s IN A 192.76.176.9
;; Total query time: 144 msec
;; FROM: britaine.ctd.anl.gov to SERVER: default -- 146.139.254.5
;; WHEN: Wed Feb 4 09:03:21 2004
;; MSG SIZE sent: 44 rcvd: 157
britaine%
======================================================================
----------------------------------------------------------------------
Barry S. Finkel
Computing and Instrumentation Solutions Division
Argonne National Laboratory Phone: +1 (630) 252-7277
9700 South Cass Avenue Facsimile:+1 (630) 252-4601
Building 222, Room D209 Internet: BSFinkel@anl.gov
Argonne, IL 60439-4828 IBMMAIL: I1004994
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic