Discussion: Delegation
Afficher un message
Vieux 08/01/2008, 03h20   #2
Barry Margolin
Aucun Avatar
 
Messages: n/a
Hébergeur:
Par défaut Re: Delegation

In article <4781d39f$0$36405$742ec2ed@news.sonic.net>,
KM <km@xacrasis.netx> wrote:

> On a small network, a host 'neptune' is the nameserver for an internal
> domain 'nicklan'. I would like one of the hosts, 'nicklite.nicklan', to
> be the nameserver for the subdomain 'jupiter.nicklan'. The hosts in
> this subdomain will all be one and the same as 'nicklite.nicklan'.
>
> neptune and nicklite both run bind9. The respective zone files are
>
> neptune:
> @ IN SOA neptune.nicklan. root.localhost. (
> 56 ; Serial
> 3h ; Refresh
> 1h ; Retry
> 1w ; Expire
> 1h ) ; Negative Cache TTL
> ;
> IN NS neptune.nicklan.
>
> @ IN A 172.23.63.2
> neptune IN A 172.23.63.2
> nicklite IN A 172.23.63.100
>
> ; Attempt delegation of 'jupiter' subdomain.
> jupiter.nicklan. IN NS ns.jupiter.nicklan.
> ns.jupiter.nicklan. A 172.23.63.100


Not that it matters much, but if you want to delegate to nicklite, why
are you delegating to ns.jupiter?

>
> nicklite:
> @ IN SOA ns.jupiter.nicklan. root.localhost. (
> 32 ; Serial
> 3h ; Refresh
> 1h ; Retry
> 1w ; Expire
> 1h ) ; Negative Cache TTL
> ;
> IN NS ns.jupiter.nicklan.
>
> @ IN A 172.23.63.100
> ns IN A 172.23.63.100
> foo IN CNAME ns
>
> The nameserver on nicklite seems to work, e.g.
>
> # host foo.jupiter.nicklan.
> foo.jupiter.nicklan is an alias for ns.jupiter.nicklan.
> ns.jupiter.nicklan has address 172.23.63.100
>
> Likewise the nameserver on neptune, e.g.
>
> # host nicklite.nicklan.
> nicklite.nicklan has address 172.23.63.100
>
> But the nameserver on neptune does not seem to know about the subdomain:
>
> # host foo.jupiter.nicklan.
> Host foo.jupiter.nicklan not found: 3(NXDOMAIN)
>
> Am I trying to do something infeasible, and if not, how to make it work?


Does neptune have recursion disabled? It needs to recurse in order to
query nicklite.

--
Barry Margolin, barmar@alum.mit.edu
Arlington, MA
*** PLEASE post questions in newsgroups, not directly to me ***
*** PLEASE don't copy me on replies, I'll read them in the group ***
  Réponse avec citation
 
Page generated in 0,06006 seconds with 9 queries