dnslint error - not authoritative

When running a dnslint report i receive an error on one out of 15 dns
servers that it is not authoritative for one of the AD zones. Looking at
DNS (not using Microsoft DNS - QIP running bind 9.2) that server is
authoritative for the zone and through nslookup queries does respond
authoritatively.

What does the following error mean and how does it happen? What else can I
look at?

Answering authoritatively for domain: NO

All other DNS servers are reporting YES as answering authoritatively.

Thanks,
Tim

"Tim Kalligonis" <> wrote in message news:esxdUom%...
> When running a dnslint report i receive an error on one out of 15 dns
> servers that it is not authoritative for one of the AD zones. Looking at
> DNS (not using Microsoft DNS - QIP running bind 9.2) that server is
> authoritative for the zone and through nslookup queries does respond
> authoritatively.
>
> What does the following error mean and how does it happen? What else can I
> look at?
>
> Answering authoritatively for domain: NO
>
> All other DNS servers are reporting YES as answering authoritatively.
>
> Thanks,
> Tim
>

Hi Tim,

Is there an entry for this server in the zone's properties, Nameserver tab, on all servers, including the BIND machine's properties?

Is there an NS entry under the zone for this server?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and confers no rights.

Please reply back to the newsgroup/forum to benefit from collaboration among responding engineers, as well as to help others benefit from your resolution.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer

http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please check http://support.microsoft.com for regional support phone numbers.

We are not using Microsoft DNS, but yes the server does have an NS record in
the zone file as do all the other DNS servers, that dnslint is not
complaining about.


"Ace Fekay [Microsoft Certified Trainer]" <>
wrote in message news:%23EiBJB3%...
"Tim Kalligonis" <> wrote in message
news:esxdUom%...
> When running a dnslint report i receive an error on one out of 15 dns
> servers that it is not authoritative for one of the AD zones. Looking at
> DNS (not using Microsoft DNS - QIP running bind 9.2) that server is
> authoritative for the zone and through nslookup queries does respond
> authoritatively.
>
> What does the following error mean and how does it happen? What else can
> I
> look at?
>
> Answering authoritatively for domain: NO
>
> All other DNS servers are reporting YES as answering authoritatively.
>
> Thanks,
> Tim
>

Hi Tim,

Is there an entry for this server in the zone's properties, Nameserver tab,
on all servers, including the BIND machine's properties?

Is there an NS entry under the zone for this server?

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Please reply back to the newsgroup/forum to benefit from collaboration among
responding engineers, as well as to help others benefit from your
resolution.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer

http://twitter.com/acefekay

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

"Tim Kalligonis" <> wrote in message news:%23VIN17j$...
> We are not using Microsoft DNS, but yes the server does have an NS record in
> the zone file as do all the other DNS servers, that dnslint is not
> complaining about.

What does QIP support have to say about it?

Ace

DNS and name resolution is working fine. No issue with AD at all.

I'm just trying to figure out why dnslint would be reporting this. Is it a
false positive or is there something else I can look for to figure out why
it is reporting as not being authoitative? Is it something I should be
concerned about or something that can probably be ignored?


"Ace Fekay [Microsoft Certified Trainer]" <>
wrote in message news:uMF8CRk$...
"Tim Kalligonis" <> wrote in message
news:%23VIN17j$...
> We are not using Microsoft DNS, but yes the server does have an NS record
> in
> the zone file as do all the other DNS servers, that dnslint is not
> complaining about.

What does QIP support have to say about it?

Ace

"Tim Kalligonis" <> wrote in message news:%23Xcj7gk$...
> DNS and name resolution is working fine. No issue with AD at all.
>
> I'm just trying to figure out why dnslint would be reporting this. Is it a
> false positive or is there something else I can look for to figure out why
> it is reporting as not being authoitative? Is it something I should be
> concerned about or something that can probably be ignored?

Hi Tim,

As you know with any of my customers, based on previously helping you with an Exchange problem years ago at your office, as well as being a trainer, I would rather have everything working cleanly with no errors. This is a minor issue. Some IT folks sometimes decide to accept minor errors and move on. I'm not sure where your thoughts lie with this notion at this time. If it were me, I would get down to finding out why, but that's up to you, since you've there are no problems with resolution.

Curiuous, what prompted you to run dnslint? Was there a problem going on?

When you run the following, do any errors show up?
dcdiag /v
netdiag /v

Any event log errors on the DCs?

Is this DNS server in question listed as an entry in any of the DCs' ipconfigs? If not, that could be one reason.

I would also open a ticket with QIP. They have a great support staff. I remember one guy, an ex-student of mine, first name Steve (not posting his last name in the public forum), was working for them a few years back in the Delco/Montco area since their office is local. I'm not sure if he is still there, nor do I have his current contact info.

Ace

In news:%23Xcj7gk$,

Also, it could be simply that UDP is not opened to the box in question.

Ace