RE: Unexpected error question

2009-02-05 Thread Cherney John-CJC030
I see. I was assuming that the second line was caused by the first line, and that if I could get more info on the first line, I could take care of both of them. I have a named user that the named process is run as. However, I see these errors even when I use rndc stop as root. Is there any

Re: Inconsistent failure to resolve

2009-02-05 Thread David Ford
My nameservers have nothing to do with authority. They simply fail to resolve it most of the time. 72.34.249.230, 198.106.134.21. Some DNS testors report things like: CheckDNS.NET is asking root servers about authoritative NS for domain Got DNS list for 'emailimage2.howtoburndvd.net' from

Re: SERVFAIL from validating nameservers for advocaat.pro advocaten.pro

2009-02-05 Thread Chris Thompson
On Feb 5 2009, I wrote: DLV records for advocaat.pro advocaten.pro are among the recent additions to dlv.isc.org. Using validating recursive nameservers running BIND 9.5.1-P1 (configured to trust dlv.isc.org), I get SERVFAILs looking things up in them, although not consistently. This doesn't

Re: Unexpected error question

2009-02-05 Thread Mark Andrews
In message f021020da23b6641a05e616d5ead146304597...@de01exm60.ds.mot.com, Ch erney John-CJC030 writes: Yes, I normally use svcadm disable dns/server to stop named. Also, I've modified the dns/server stop method from the usual kill: to /usr/sbin/rndc stop. I did that because I want to make sure

Re: Unexpected error question

2009-02-05 Thread Mark Andrews
In message 200902051556.n15ftxrx004...@metis.hicks-net.net, Gregory Hicks wri tes: Subject: RE: Unexpected error question Date: Thu, 5 Feb 2009 09:51:05 -0500 From: Cherney John-CJC030 john.cher...@motorola.com To: bind-us...@isc.org I see. I was assuming that the second line was

Re: SERVFAIL from validating nameservers for advocaat.pro advocaten.pro

2009-02-05 Thread Mark Andrews
In message prayer.1.3.1.0902051754210.4...@hermes-2.csi.cam.ac.uk, Chris Thompson writes: On Feb 5 2009, I wrote: DLV records for advocaat.pro advocaten.pro are among the recent additions to dlv.isc.org. Using validating recursive nameservers running BIND 9.5.1-P1 (configured to trust

Re: How to create the TSIG?

2009-02-05 Thread Chris Buxton
Create a key: dnssec-keygen -a hmac-md5 -b 512 -n host slave1.key (Note: Use something better than hmac-md5 if your BIND version supports it.) This creates two files, with similar names. Extract the secret from either of them (it is the same in both) and create a key statement: key