[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: ?????: DNS in LDAP



El mié, 13-05-2009 a las 20:45 +0200, Ronny Aasen escribió:
> John S. Skogtvedt wrote:
> > Oded Naveh skrev:
> >   
> >> John S. Skogtvedt wrote:
> >>     
> >>> "host tjener" returns both found and not found (twice):
> >>>   # host tjener
> >>>   tjener.intern has address 10.0.2.2
> >>>   Host tjener.intern not found: 3(NXDOMAIN)
> >>>   Host tjener.intern not found: 3(NXDOMAIN)
> >>>
> >>> I think that's a bug? It doesn't seem to break name lookup though.
> >>>       
> >> 	I think it may be due to multiple nameservers in your
> >> /etc/resolv.conf.
> >> It looks like 127.0.0.1, replies with the address, while another nameserver
> >> has no idea.
> >> Maybe you'd like to try:
> >> # host tjener tjener
> >> Or:
> >> # host tjener 10.0.2.1
> >> So you'd know who you're talking to.
> >> Odd.
> >>
> >>
> >>     
> >
> > /etc/resolv.conf:
> >   nameserver 127.0.0.1
> >   search intern
> >
> > According to host -v all responses come from 10.0.2.2:
> >
> > # host -v tjener 10.0.2.2
> > Trying "tjener.intern"
> > Using domain server:
> > Name: 10.0.2.2
> > Address: 10.0.2.2#53
> > Aliases:
> >
> > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33604
> > ;; flags: qr aa rd; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
> >
> > ;; QUESTION SECTION:
> > ;tjener.intern.                 IN      A
> >
> > ;; ANSWER SECTION:
> > tjener.intern.          3600    IN      A       10.0.2.2
> >
> > Received 47 bytes from 10.0.2.2#53 in 1 ms
> > Trying "tjener.intern"
> > Host tjener.intern not found: 3(NXDOMAIN)
> > Received 106 bytes from 10.0.2.2#53 in 4 ms
> > Trying "tjener.intern"
> > Host tjener.intern not found: 3(NXDOMAIN)
> > Received 106 bytes from 10.0.2.2#53 in 3 ms
> >
> >   
> pdns send the question almost directly to the backend. so you may recive 
> multiple answers. but this suggests something is wrong in the ldap 
> somewhere. so the query is matched multiple places but only content 
> recived once.


I think so. There must be something wrong in the machine where he did
the tests. I haven't seen that in months of being using pdns in ldap.
Anyway, I've just logged into a school and it's working right, giving
only one answer (the only difference in my setup is that I'm not using
pdns-recursor, but using the ISP dns server as recursor).

Regards.
José L:


Attachment: signature.asc
Description: Esta parte del mensaje =?ISO-8859-1?Q?est=E1?= firmada digitalmente


Reply to: