Tracing out failed “nested” delegated domains across BIND and AD Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) Come Celebrate our 10 Year Anniversary!BIND9 recursion on slave servers for a delegated zone - not workingDo glue records in non-circular dns-lookups speed up domain resolution or not?Resolver Timeouts in Bind 10Why is Denic not accepting my nameservers?Why would delegated nameservers ever be different to authoritative nameservers?DNS referral / delegation: which DNS is responsible; How to delegate the right way?What is the role of NS records at the apex of a DNS domain?Name server NS records missingBind DNS Forwarder With Delegated Sub DomainMoved form BIND to PowerDNS - delegated subdomains not resolving
What is the longest distance a 13th-level monk can jump while attacking on the same turn?
Why don't the Weasley twins use magic outside of school if the Trace can only find the location of spells cast?
Withdrew £2800, but only £2000 shows as withdrawn on online banking; what are my obligations?
What is the musical term for a note that continously plays through a melody?
What does the "x" in "x86" represent?
Why aren't air breathing engines used as small first stages
How much radiation do nuclear physics experiments expose researchers to nowadays?
What would be the ideal power source for a cybernetic eye?
Is it true that "carbohydrates are of no use for the basal metabolic need"?
Sorting numerically
Diagram with tikz
Gastric acid as a weapon
Stars Make Stars
How widely used is the term Treppenwitz? Is it something that most Germans know?
I am not a queen, who am I?
What is the correct way to use the pinch test for dehydration?
What's the difference between `auto x = vector<int>()` and `vector<int> x`?
Is there a documented rationale why the House Ways and Means chairman can demand tax info?
Why is "Consequences inflicted." not a sentence?
Why are there no cargo aircraft with "flying wing" design?
How to recreate this effect in Photoshop?
What are 'alternative tunings' of a guitar and why would you use them? Doesn't it make it more difficult to play?
ListPlot join points by nearest neighbor rather than order
"Seemed to had" is it correct?
Tracing out failed “nested” delegated domains across BIND and AD
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!BIND9 recursion on slave servers for a delegated zone - not workingDo glue records in non-circular dns-lookups speed up domain resolution or not?Resolver Timeouts in Bind 10Why is Denic not accepting my nameservers?Why would delegated nameservers ever be different to authoritative nameservers?DNS referral / delegation: which DNS is responsible; How to delegate the right way?What is the role of NS records at the apex of a DNS domain?Name server NS records missingBind DNS Forwarder With Delegated Sub DomainMoved form BIND to PowerDNS - delegated subdomains not resolving
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
Have a parent domain: hours.com
Hosted on BIND
Have a delegated subdomain: minutes.hours.com
Hosted on AD DNS
Have yet another subdomain which is delegated in above zone: seconds.minutes.hours.com
This is also defined, and hosted on the same AD DNS
Queries using either the BIND or AD DNS servers for hours.com and minutes.hours.com work flawlessly. All glue records defined in correct context.
Queries using the AD DNS servers for seconds.minutes.hours.com also work flawlessly.
Queries using the BIND server for seconds.minutes.hours.com fail with NXDOMAIN.
I can't seem to trace this out. Confirmed glue record for seconds.minutes.hours.com exist and are resolvable if I query the actual A record from either nameservers. I thought that the resolver would hit the BIND nameserver, which would then be "passed off" to the AD DNS server which would then respond with the NS record for the second delegated zone but this is not taking place.
Appreciate any direction on what I should try or if there is something I am missing.
domain-name-system delegation
asked Apr 10 at 16:14
Fred TuckerFred Tucker
1
New contributor
Fred Tucker is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
add a comment |
Have a parent domain: hours.com
Hosted on BIND
Have a delegated subdomain: minutes.hours.com
Hosted on AD DNS
Have yet another subdomain which is delegated in above zone: seconds.minutes.hours.com
This is also defined, and hosted on the same AD DNS
Queries using either the BIND or AD DNS servers for hours.com and minutes.hours.com work flawlessly. All glue records defined in correct context.
Queries using the AD DNS servers for seconds.minutes.hours.com also work flawlessly.
Queries using the BIND server for seconds.minutes.hours.com fail with NXDOMAIN.
I can't seem to trace this out. Confirmed glue record for seconds.minutes.hours.com exist and are resolvable if I query the actual A record from either nameservers. I thought that the resolver would hit the BIND nameserver, which would then be "passed off" to the AD DNS server which would then respond with the NS record for the second delegated zone but this is not taking place.
Appreciate any direction on what I should try or if there is something I am missing.
domain-name-system delegation
asked Apr 10 at 16:14
Fred TuckerFred Tucker
1
New contributor
Fred Tucker is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
To clarify you have seconds.minutes.hours.com delegated from minutes.hours.com? You said "above" but have both listed above. Do you have examples of dig or nslookup with debug/trace flags?
– Jon Angliss
Apr 11 at 2:55
add a comment |
Have a parent domain: hours.com
Hosted on BIND
Have a delegated subdomain: minutes.hours.com
Hosted on AD DNS
Have yet another subdomain which is delegated in above zone: seconds.minutes.hours.com
This is also defined, and hosted on the same AD DNS
Queries using either the BIND or AD DNS servers for hours.com and minutes.hours.com work flawlessly. All glue records defined in correct context.
Queries using the AD DNS servers for seconds.minutes.hours.com also work flawlessly.
Queries using the BIND server for seconds.minutes.hours.com fail with NXDOMAIN.
I can't seem to trace this out. Confirmed glue record for seconds.minutes.hours.com exist and are resolvable if I query the actual A record from either nameservers. I thought that the resolver would hit the BIND nameserver, which would then be "passed off" to the AD DNS server which would then respond with the NS record for the second delegated zone but this is not taking place.
Appreciate any direction on what I should try or if there is something I am missing.
domain-name-system delegation
asked Apr 10 at 16:14
Fred TuckerFred Tucker
1
New contributor
Fred Tucker is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Have a parent domain: hours.com
Hosted on BIND
Have a delegated subdomain: minutes.hours.com
Hosted on AD DNS
Have yet another subdomain which is delegated in above zone: seconds.minutes.hours.com
This is also defined, and hosted on the same AD DNS
Queries using either the BIND or AD DNS servers for hours.com and minutes.hours.com work flawlessly. All glue records defined in correct context.
Queries using the AD DNS servers for seconds.minutes.hours.com also work flawlessly.
Queries using the BIND server for seconds.minutes.hours.com fail with NXDOMAIN.
I can't seem to trace this out. Confirmed glue record for seconds.minutes.hours.com exist and are resolvable if I query the actual A record from either nameservers. I thought that the resolver would hit the BIND nameserver, which would then be "passed off" to the AD DNS server which would then respond with the NS record for the second delegated zone but this is not taking place.
Appreciate any direction on what I should try or if there is something I am missing.
domain-name-system delegation
domain-name-system delegation
asked Apr 10 at 16:14
Fred TuckerFred Tucker
1
New contributor
Fred Tucker is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 10 at 16:14
Fred TuckerFred Tucker
1
New contributor
Fred Tucker is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 10 at 16:14
Fred TuckerFred Tucker
1
New contributor
Fred Tucker is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
asked Apr 10 at 16:14
Fred TuckerFred Tucker
1
asked Apr 10 at 16:14
Fred TuckerFred Tucker
1
1
New contributor
Fred Tucker is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
New contributor
Fred Tucker is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
Fred Tucker is a new contributor to this site. Take care in asking for clarification, commenting, and answering.
Check out our Code of Conduct.
To clarify you have seconds.minutes.hours.com delegated from minutes.hours.com? You said "above" but have both listed above. Do you have examples of dig or nslookup with debug/trace flags?
– Jon Angliss
Apr 11 at 2:55
add a comment |
To clarify you have seconds.minutes.hours.com delegated from minutes.hours.com? You said "above" but have both listed above. Do you have examples of dig or nslookup with debug/trace flags?
– Jon Angliss
Apr 11 at 2:55
To clarify you have seconds.minutes.hours.com delegated from minutes.hours.com? You said "above" but have both listed above. Do you have examples of dig or nslookup with debug/trace flags?
– Jon Angliss
Apr 11 at 2:55
To clarify you have seconds.minutes.hours.com delegated from minutes.hours.com? You said "above" but have both listed above. Do you have examples of dig or nslookup with debug/trace flags?
– Jon Angliss
Apr 11 at 2:55
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Fred Tucker is a new contributor. Be nice, and check out our Code of Conduct.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962458%2ftracing-out-failed-nested-delegated-domains-across-bind-and-ad%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Fred Tucker is a new contributor. Be nice, and check out our Code of Conduct.
Fred Tucker is a new contributor. Be nice, and check out our Code of Conduct.
Fred Tucker is a new contributor. Be nice, and check out our Code of Conduct.
Fred Tucker is a new contributor. Be nice, and check out our Code of Conduct.
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962458%2ftracing-out-failed-nested-delegated-domains-across-bind-and-ad%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
To clarify you have seconds.minutes.hours.com delegated from minutes.hours.com? You said "above" but have both listed above. Do you have examples of dig or nslookup with debug/trace flags?
– Jon Angliss
Apr 11 at 2:55