Improve company productivity with a Business Account.Sign Up

x
?
Solved

DNS Suffixes not working properly

Posted on 2009-06-30
2
Medium Priority
?
314 Views
Last Modified: 2012-05-07
I have multiple domains in my 2000-2003 forest
i.e
contoso.com
acme.com
widgets.com

Let's say my primary corp domain is contoso.com and I have a production datatcenter in acme.com

I need to point a contoso.com client at a dns server in widgets.com for QA to do some testing.

I have a production jboss server...we'll call it jboss1.acme.com with an alias prod-sw1
the alias exists in each domain:
i.e
prod-sw1.contoso.com points to jboss1.acme.com
prod-sw1.widgets.com points to jboss1.widgets.com (widgets is a test environment)

In the past, I was able to set a contoso clients DNS server to a widgets.com DNS server and then set the primary DNS suffix to widgets.com.
pinging prod-sw1 would result in getting a response from prod-sw1.widgets.com
Now with the DNS server and DNS suffixes set, i still only get a response from production: prod-sw1.acme.com

i do an nslookup and i AM pointed at the widgets DNS server BUT it responds with the acme result.

Note: each DNS server has forward lookup zones for every other domain. I am perplexed why a DNS server does not give a response for the host from within its own domain and why DNS sufixes do not override DNS queries. This used to work fine for us. Please help!!!

Thank you!

I
0
Comment
Question by:captjjt
1 Comment
 
LVL 71

Accepted Solution

by:
Chris Dent earned 2000 total points
ID: 24748117

Hey,

You can't blame the DNS Server, it only gives the answer for the question the client asks :)

You might take a look at what's happening in the query. NsLookup will give you a close enough view of that:

nslookup
set debug
prod-sw1

You should see it constructs queries based on the primary DNS suffix then the DNS Suffix Search List. It asks the DNS server for each in order.

If will only append each suffix if it receives NXDOMAIN responses for the first suffixes.

From what you've said I'd have to assume either the primary DNS suffix is ignored, or the search list order is incorrect.

Chris
0

Featured Post

NEW Internet Security Report Now Available!

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out this quarters report on the threats that shook the industry in Q4 2017.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Seizing the Operation Master Roles in Windows Server 2016 in case of FSMO holder failure.
This is a comprehensive review of a bundled Toolkit designed for use by IT Professionals and End Users to help Microsoft Outlook fans manipulate Outlook files and repair some common problems. Enjoy...
As developers, we are not limited to the functions provided by the VBA language. In addition, we can call the functions that are part of the Windows operating system. These functions are part of the Windows API (Application Programming Interface). U…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

595 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question