Auth server reports: resolver priming query complete

Previous Topic Next Topic
 
classic Classic list List threaded Threaded
6 messages Options
Reply | Threaded
Open this post in threaded view
|

Auth server reports: resolver priming query complete

Bind-Users forum mailing list
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hello!

Why would an auto-only server (in this case the master) report this:

 Jul 27 13:07:58 ns1 named[624]: resolver priming query complete

tia,

- -Jim P.
-----BEGIN PGP SIGNATURE-----
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=epDS
-----END PGP SIGNATURE-----

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users
Reply | Threaded
Open this post in threaded view
|

Re: Auth server reports: resolver priming query complete

Bind-Users forum mailing list
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sat, 2019-07-27 at 11:04 -0400, Jim Popovitch via bind-users wrote:
> Hello!
>
> Why would an auto-only server (in this case the master) report this:
>
>  Jul 27 13:07:58 ns1 named[624]: resolver priming query complete
>

<sigh>  "auth-only"


- -Jim P.

-----BEGIN PGP SIGNATURE-----
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=Dyhy
-----END PGP SIGNATURE-----

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users
Reply | Threaded
Open this post in threaded view
|

Re: Auth server reports: resolver priming query complete

Mark Andrews
Authoritative servers lookup addresses of nameservers to send notify messages.
If the names are not in the authoritative data it will iterate to find the address.

Mark

> On 28 Jul 2019, at 1:06 am, Jim Popovitch via bind-users <[hidden email]> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> On Sat, 2019-07-27 at 11:04 -0400, Jim Popovitch via bind-users wrote:
>> Hello!
>>
>> Why would an auto-only server (in this case the master) report this:
>>
>> Jul 27 13:07:58 ns1 named[624]: resolver priming query complete
>>
>
> <sigh>  "auth-only"
>
>
> - -Jim P.
>
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAEBCAAdFiEE3RmV4WutJ2KyCS2zPcxbabkKGJ8FAl08aHMACgkQPcxbabkK
> GJ8tuRAAjlNlCEcG9cXb/pgaWGfbbmOB8oFGUr7KXVTJ6hNBnBV9bpDSlOKs8HaZ
> AvgcMYljXTyCD3E+INHMUmRAZqgDlpK2AsEMGZRqBHBX1/TFTzHas4+CuUS8PmVb
> nxDw791GOkIe1YQlZoobPCskHPlsBgkLCPYXIi2s2IG+DGmS9MSVJC9hz2Q7XHMm
> gq/urkj2PN+sf6+fIC7bZ9DXGeM7AzvLNCUJADljwdTPiak8CowOLhckOY3yhkZa
> UFoH9bY3U+OUosdKnm8fDn1/EbMZ70lsTeFZVMieX73W7nkQtudhovHmVQ6UdfrO
> Sv5D2hH5C+0Le60n5vyVe6cPWtgVb7CVSGnx6pK6XmHyspJpEiA9EQZ4MOW7QeLe
> DY3u2i3zHhFKNOlJ1fkD8Hki2GJtN8LhdG+huS+2eWso/d89FOsjmYbJyevp5IV7
> oOJZ4jNAEkRr/jz+MyRdYjT99Yd9gy/sM8lsjHbCI+6vcKlJQgrEWdzfUs1qnGh0
> GCe0iF9gTq9LHOk1+ACDMDWzPS1Gt9Bsa81+rk+jB4Y0tCaR1E2ODz/2HAg6Jqq7
> gMOMgw5jkifvIgUN5phiEdfSlmRLcXJp1jJpZ3UCjbRHwkeINKUdegDt0B9njRiG
> w77j027FeXMZW8fMvYMOEFNacyRjRYQVFbnUfy5Zah6l4TLTamU=
> =Dyhy
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> bind-users mailing list
> [hidden email]
> https://lists.isc.org/mailman/listinfo/bind-users

--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: [hidden email]

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users
Reply | Threaded
Open this post in threaded view
|

Re: Auth server reports: resolver priming query complete

Bind-Users forum mailing list
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sun, 2019-07-28 at 01:36 +1000, Mark Andrews wrote:
> Authoritative servers lookup addresses of nameservers to send notify messages.
> If the names are not in the authoritative data it will iterate to find the address.

Thanks Mark. BTW, this is with v9.14.4.  Follow-up question:

I only see ns1 (master) logging the priming, ns2 doesn't.  ns2 is a
slave to ns1, but also a master to a 3rd party (e.g. also-notify,
notify-explict).  Shouldn't ns2 also be priming addresses of the non-
auth 3rd party?


- -Jim P.
-----BEGIN PGP SIGNATURE-----
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=aKXt
-----END PGP SIGNATURE-----

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users
Reply | Threaded
Open this post in threaded view
|

Re: Auth server reports: resolver priming query complete

Mark Andrews


> On 28 Jul 2019, at 2:03 am, Jim Popovitch via bind-users <[hidden email]> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA256
>
> On Sun, 2019-07-28 at 01:36 +1000, Mark Andrews wrote:
>> Authoritative servers lookup addresses of nameservers to send notify messages.
>> If the names are not in the authoritative data it will iterate to find the address.
>
> Thanks Mark. BTW, this is with v9.14.4.  Follow-up question:
>
> I only see ns1 (master) logging the priming, ns2 doesn't.  ns2 is a
> slave to ns1, but also a master to a 3rd party (e.g. also-notify,
> notify-explict).  Shouldn't ns2 also be priming addresses of the non-
> auth 3rd party?

If you have "notify explicit;” and also-notify then named will only
send notify messages to the addresses listed in the also-notify clause
so there is not need to iterate.  Priming only occurs when named actually
iterates.

>
> - -Jim P.
> -----BEGIN PGP SIGNATURE-----
>
> iQIzBAEBCAAdFiEE3RmV4WutJ2KyCS2zPcxbabkKGJ8FAl08ddUACgkQPcxbabkK
> GJ+ogxAAj4x2Cq+MtPe4mmgSN+fiOfyx5lg/TJ/TLBtBZj6TzYVd67urTF1tqzQU
> gEB2fOM55XVd1ogoVSlXAT6JW3npqfb0Wi6hFGXlHJwvC7AGSwpxEKCqBvUCZIVr
> 3V9zgFGbEbbmR0VvNAupAxrqUIlu0TvbhIuBSEktRObLk+9W/go+SUCxQFB0VMwe
> 6UTfGkpjzTE7SWqdoSEUom57LsYm0tOu+zk+f6v7wCc3BmZPWLUpWmlyEwZFpxAy
> +BZzUBSDA4lmGIqfDyY+FDqu0MIQ5T8JbN6idcvGH03nsNOhMr4gT2m9Sk80C1ro
> PX0rHIS4gcMPtxnfurmRbpiaGt3psUriPCft8PyazUx47KebERvL0MQOFNH4ayuI
> jHDLPVc6ZTF5kHY6AipEnzkXRO46cOKWoaasYcVjycMGXVulxqbe/Y4wMir/8Bwu
> FMVgboDgDmpxSCmsgWfZv5OM/dU9QEv4nSemBBaacXbGbNXoI0ZW5375KkuMQ19d
> mQM0e9HBDDJ3zj2w+ahJGeM3J/XaN87kdQQLUujdc5RUZKWvuWElYamNLahjC+l/
> 4Uez5w2ADGuCvEeid9YKypKMz1m9r2CaGEwysztNpaKNb9YEsNewNY/WQYT0XZzW
> xAX/t6Q6d+LfejRZSVqk0JyL61IKax0uiQwPLLBiLc7+n4kJ1lo=
> =aKXt
> -----END PGP SIGNATURE-----
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> bind-users mailing list
> [hidden email]
> https://lists.isc.org/mailman/listinfo/bind-users

--
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742              INTERNET: [hidden email]

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users
Reply | Threaded
Open this post in threaded view
|

Re: Auth server reports: resolver priming query complete

Bind-Users forum mailing list
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

On Sun, 2019-07-28 at 02:14 +1000, Mark Andrews wrote:

> > On 28 Jul 2019, at 2:03 am, Jim Popovitch via bind-users <[hidden email]> wrote:
> >
> > -----BEGIN PGP SIGNED MESSAGE-----
> > Hash: SHA256
> >
> > On Sun, 2019-07-28 at 01:36 +1000, Mark Andrews wrote:
> > > Authoritative servers lookup addresses of nameservers to send notify messages.
> > > If the names are not in the authoritative data it will iterate to find the address.
> >
> > Thanks Mark. BTW, this is with v9.14.4.  Follow-up question:
> >
> > I only see ns1 (master) logging the priming, ns2 doesn't.  ns2 is a
> > slave to ns1, but also a master to a 3rd party (e.g. also-notify,
> > notify-explict).  Shouldn't ns2 also be priming addresses of the non-
> > auth 3rd party?
>
> If you have "notify explicit;” and also-notify then named will only
> send notify messages to the addresses listed in the also-notify clause
> so there is not need to iterate.  Priming only occurs when named actually
> iterates.

Should ns1 (master) be priming if it also has notify-explict and also-
notify statements.  The domain in question is the domain sending this
email.

- -Jim P.
-----BEGIN PGP SIGNATURE-----
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=pPMe
-----END PGP SIGNATURE-----

_______________________________________________
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list

bind-users mailing list
[hidden email]
https://lists.isc.org/mailman/listinfo/bind-users