Re: Help, I can´t make a delega tion :(

2009/6/2 Reyner Herrpinark Lugo <[email protected]>:
>
> tip-server.example.com:  authoritative for example.com
> With the following data:
>
> dns_zone       |host      |ttl    |dns_type |mx_priority |data      |
> us.example.com |@         |604800 |ns       |NULL        |ns1       |
> us.example.com |ns1       |604800 |a        |NULL        |10.7.20.2 |

I think the above data might be incorrect.  Change it to:
example.com |us         |604800 |ns       |NULL        |ns1.us       |
example.com |ns1.us       |604800 |a        |NULL        |10.7.20.2 |

> and ns1.us.example.com:  authoritative for us.example.com
> With the following data:
>
> dns_zone       |host |ttl    |dns_type|mx_priority|data       |
> us.example.com |@    |604800 |so      |NULL       |ns1 reynerhl.gmail.com. 20090408 3000 900 108864000 432000|

I assume the above line has a typo, and "so" should be "soa".

> My querys are:
> SELECT ttl, dns_type, mx_priority, data
> FROM dns_records WHERE dns_zone='%zone%' AND host='%record%';

I have not examined your queries for correctness.  You should look at
the previous threads from this mailing list from just a few months ago
where others were working on subdelegating dns.

> (from the 10.7.20.3 [authoritative for example.com]):
> dig ns us.example.com @127.0.0.1
> ;; QUESTION SECTION:
> ;us.example.com.                        IN      NS
> ;; ANSWER SECTION:
> us.example.com.         604800  IN      NS      ns1.us.example.com.

Good.

> another from the same server:
> dig a ns1.us.example.com @127.0.0.1:
> ;; QUESTION SECTION:
> ;ns1.us.example.com.    IN      A
> ;; ANSWER SECTION:
> ns1.us.example.com. 604800      IN      A       10.7.20.2

Good.

Well changing the data as I suggested above might not be a good thing
because the above two steps are returning the correct data.

> Now, it is the trouble:
> dig a test.us.example.com @127.0.0.1
> ;; ->>HEADER<<- opcode: QUERY, status: SERVFAIL, id: 47560
> ;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 0, ADDITIONAL: 0

You don't say which server you did the query on, but I assume you did
it on tip-server.  Correct, you need it to not return a SERVFAIL,
which is what I was hoping to achieve with the data change I suggested
above.  If this is on ns1, then you have a simple configuration error
in either your query or your data, because nearly the same data on
tip-server does seem to work properly.

What you need to happen is tip-server returns an NS record for
us.example.com when you ask it for test.us.example.com.  Assuming you
have your nameserver on tip-server set to recursive mode, then it
should chase that sub-delegation to the second server and get the
answer for test.us.example.com.

> It is as if not allowed to transfer the querys through example.com to us.example.com. I mean, the querys never reach the delegated server, I think if example.com's server find a substring that match with his domain name (test.us.EXAMPLE.COM), he assume hi is authoritaive for that, I 'm not pretty shure, is just an idea.

I think you just said the same thing I did :-)

> Todd, please. if you have this trouble resolved, share all your configuration files, posting, by mail, where you prefer.

I don't do dns delegation, so most of my answers are just guesses
based on how I think it's supposed to work.  I think you're close, so
keep on working on it.

-- 
Regards...      Todd

------------------------------------------------------------------------------
OpenSolaris 2009.06 is a cutting edge operating system for enterprises 
looking to deploy the next generation of Solaris that includes the latest 
innovations from Sun and the OpenSource community. Download a copy and 
enjoy capabilities such as Networking, Storage and Virtualization. 
Go to: http://p.sf.net/sfu/opensolaris-get