Solved

DNS does not resolve soa record

Posted on 2014-10-26
6
367 Views
Last Modified: 2014-11-04
Hi Experts,
I've a DC server (DC1) and ISP server (ISP1) in my environment. DNS in DC1 is AD-integrated and in ISP1 is secondary.
The issue now is some of the zones in the ISP1 server are unable to reload  from master DC1 and the serial number is not updated. It returns error "zone not loaded by DNS server". I've checked the zone transfers setting in DC1 and it's configured properly. I've tried to re-create the problematic zones in ISP1 but it did not resolved the issue.  I've asked my infra team and they suspected it's due to the SOA record not configured properly in master server DC1. I checked the SOA record is exists in DC1 but I'm unable to nslookup the SOA. Any ideas on how to further check on this issue?

C:\>nslookup
Default Server:  dc1.abc.com
Address:  x.x.x.x

> set type=soa
> fish.com.cn
Server:  dc1.abc.com
Address:  x.x.x.x

fish.com.cn       canonical name = www.fish.com.cn
0
Comment
Question by:SuzenJ
  • 3
  • 3
6 Comments
 
LVL 70

Expert Comment

by:Chris Dent
Comment Utility
You need to go fish.com.cn, then delete the CNAME you've created going to www.fish.com.cn.

You cannot create CNAME  records if there's another record at the same level. At the zone apex you'll have NS and SOA at the very least.

Chris
0
 

Author Comment

by:SuzenJ
Comment Utility
Thanks Chris for the reply..
So you're suggesting me to delete the CNAME record in DC1 for fish.com.cn going to www.fish.com.cn??

But why there is no issue for replication from DC1 with other ad-integrated primary DC servers (for ex: DC2) but the issue only happened in secondary zone server which is ISP1.
In addition, only some zones in ISP1 are having issue to reload from master and not all.

From DC1 AD integrated Primary DNS, I've 1 SOA record, 5 CNAME records, and 100 NS records.
Please confirm if I need to delete the first CNAME records as per below details?

SOA:
Name: (same as parent folder) Type: SOA Data: xxx

CNAME:
Name: (same as parent folder)  Type: Alias (CNAME)  Data: www.fish.com.cn
Name: ibe  Type: Alias (CNAME)  Data: ibe.fish.com
Name: m  Type: Alias (CNAME)  Data: vweb.abc.com
Name: mobile  Type: Alias (CNAME)  Data: vweb.abc.com
Name: www Type: Alias (CNAME) Data: vweb.abc.com
0
 
LVL 70

Expert Comment

by:Chris Dent
Comment Utility
> But why there is no issue for replication from DC1 with other ad-integrated primary DC servers (for ex: DC2) but

Because that replication mechanism doesn't use the DNS protocol at all, instead it replicates using Active Directory.

> In addition, only some zones in ISP1 are having issue to reload from master and not all.

Your usage of the CNAME is illegal (that is, it contravenes all RFCs which dictate how DNS is supposed to work), nothing can be guaranteed while it's in that state.

You are correct that this is the one in error:

Name: (same as parent folder)  Type: Alias (CNAME)  Data: www.fish.com.cn

Chris
0
How your wiki can always stay up-to-date

Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
- Increase transparency
- Onboard new hires faster
- Access from mobile/offline

 

Author Comment

by:SuzenJ
Comment Utility
Thanks Chris..

Sorry as I has missed out some info for the nslookup result earlier. There are 2 CNAME records found not one as per my earlier comment.

C:\>nslookup
Default Server:  dc1.abc.com
Address:  x.x.x.x

> set type=soa
> fish.com.cn
Server:  dc1.abc.com
Address:  x.x.x.x

fish.com.cn       canonical name = www.fish.com.cn
www.fish.com.cn       canonical name = vweb.abc.com

Do i need to remove the record for Name: www Type: Alias (CNAME) Data: vweb.abc.com as well?

I saw one successful zone transfer in ISP1 with 2 host (A) records, 1 SOA, 100 NS for fish.info

Host A:
Name: (same as parent folder)  Type: Host (A)  Data: x.x.x.x  ---->> IP for vweb.abc.com
Name: www  Type: Host (A)  Data: x.x.x.x  ---->> IP for vweb.abc.com

Do I need to create the same Host A record for fish.com.cn?
0
 
LVL 70

Accepted Solution

by:
Chris Dent earned 500 total points
Comment Utility
Nope, you only need remove the first one (fish.com.cn -> www.fish.com.cn). The other is harmless.

And yes, if you wish that to resolve you will have to replace the CNAME with an A record. It's only the CNAME that's prohibited.

Chris
0
 

Author Closing Comment

by:SuzenJ
Comment Utility
Thank you very much Chris!! Once I deleted the CNAME record I'm able to nslookup the SOA record and the zone transfer is working fine now.
0

Featured Post

The curse of the end user strikes again      

You’ve updated all your end user’s email signatures. Hooray! But guess what? They’re playing around with the HTML, adding stupid taglines and ruining the imagery. Find out how you can save your signatures from end users today.

Join & Write a Comment

In this article, we will see the basic design consideration while designing a Multi-tenant web application in a simple manner. Though, many frameworks are available in the market to develop a multi - tenant application, but do they provide data, cod…
The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…

772 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

12 Experts available now in Live!

Get 1:1 Help Now