Bv9ARM.7.html revision 9c3531d72aeaad6c5f01efe6a1c82023e1379e4d
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML EXPERIMENTAL 970324//EN">
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt - Copyright (C) 2000 Internet Software Consortium.
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - Permission to use, copy, modify, and distribute this software for any
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - purpose with or without fee is hereby granted, provided that the above
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - copyright notice and this permission notice appear in all copies.
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - THE SOFTWARE IS PROVIDED "AS IS" AND INTERNET SOFTWARE CONSORTIUM DISCLAIMS
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - ALL WARRANTIES WITH REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - OF MERCHANTABILITY AND FITNESS. IN NO EVENT SHALL INTERNET SOFTWARE
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - CONSORTIUM BE LIABLE FOR ANY SPECIAL, DIRECT, INDIRECT, OR CONSEQUENTIAL
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews - ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<!-- $Id: Bv9ARM.7.html,v 1.5 2000/06/22 21:53:45 tale Exp $ -->
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<META NAME="GENERATOR" CONTENT="Adobe FrameMaker 5.5/HTML Export Filter">
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<TITLE> Section 7. Troubleshooting</TITLE></HEAD>
4a53e3c2b83c476a93148eaee0272649beb221caMark AndrewsSection 7. Troubleshooting</H1>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews7.1 Common Log Messages and What They Mean</H3>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrewslame server</H6>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<PRE CLASS="2Level-fixed"><A NAME="pgfId=997353"></A>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<CODE CLASS="grammar_literal">ns named[111]: Lame server on 'www.example.com' (in 'example.com'?): [192.168.0.2].53 'ns2.example.com'</CODE>
4a53e3c2b83c476a93148eaee0272649beb221caMark AndrewsThis is a harmless error message. It means that the server at 192.168.0.2 (<EM CLASS="pathname">
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews) is listed as a nameserver for "<EM CLASS="pathname">
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews", but it doesn't really know anything about <EM CLASS="pathname">
4a53e3c2b83c476a93148eaee0272649beb221caMark AndrewsIf this is a zone under your control, check each of the nameservers to ensure that they are configured to answer questions properly.</P>
4a53e3c2b83c476a93148eaee0272649beb221caMark AndrewsIf it's a zone out on the Internet, it would be nice to notify the owners of the domain in question so that they can take a look at it. In practice, though, not many people have time to do this.</P>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrewsbad referral</H6>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<PRE CLASS="2Level-fixed"><A NAME="pgfId=997358"></A>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews<CODE CLASS="grammar_literal">ns named[111]: bad referral (other.com !< subdomain.other.com)</CODE>
4a53e3c2b83c476a93148eaee0272649beb221caMark AndrewsThis indicates that your nameserver (<EM CLASS="pathname">
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews) queried the nameserver for <EM CLASS="pathname">
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews to find out how to get to <EM CLASS="pathname">
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews told your nameserver that <EM CLASS="pathname">
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews, so your nameserver queried that.</P>
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews had been delegated to it, so it referred your server (<EM CLASS="pathname">
4a53e3c2b83c476a93148eaee0272649beb221caMark Andrews nameserver.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Huntnot authoritative for</H6>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<PRE CLASS="2Level-fixed"><A NAME="pgfId=997362"></A>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<CODE CLASS="grammar_literal">ns named-xfer[111]: [192.168.0.1] not authoritative for example.com, SOA query got rcode 0, aa 0, ancount 1, aucount 0</CODE>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntThis error usually shows up on a slave server. It indicates that the master server is not answering authoritatively for the zone. This usually happens when the zone is rejected (while <CODE CLASS="Program-Process">
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt is loading) on the master server. Check the logs on the master server. If ancount -- 0, you may be pointing at the wrong master server for the zone.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Huntrejected zone</H6>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<PRE CLASS="2Level-fixed"><A NAME="pgfId=997365"></A>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<CODE CLASS="grammar_literal">ns named[111]: master zone "example.com" (IN) rejected due to errors (serial111)</CODE>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt zone was rejected because of an error in the zone file. Check the lines above this error. <CODE CLASS="Program-Process">
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt will usually tell you what it didn't like and where to find it in the zone file.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Huntno NS RRs found</H6>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<PRE CLASS="2Level-fixed"><A NAME="pgfId=997368"></A>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<CODE CLASS="grammar_literal">ns named[111]: Zone "example.com" (file example.com.db): no NS RRs found at zonetop</CODE>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt file is missing NS records at the top of the zone (in the SOA section). Check to make sure they exist and that there is white space (spaces or tabs) in front of them. White spaces matter here.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Huntno default TTL set</H6>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<PRE CLASS="2Level-fixed"><A NAME="pgfId=997371"></A>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<CODE CLASS="grammar_literal">ns named[111]: Zone "example.com" (file example.com.db): No default TTL set using SOA minimum instead</CODE>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntYou will need to add a <KBD CLASS="Literal-user-input">
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt zone file. See RFC 2308, or <A HREF="Bv9ARM.5.html#19693" CLASS="XRef">
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntSetting TTLs</A>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt for information on how to use <CODE CLASS="grammar_literal">
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Huntno root nameserver for class</H6>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<PRE CLASS="2Level-fixed"><A NAME="pgfId=997374"></A>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<CODE CLASS="grammar_literal">findns: No root nameservers for class IN?</CODE>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntYour nameserver is having problems finding the root nameservers. Check your root hints file to make sure it is not corrupted. Also, make sure that your nameserver can reach the Internet.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntIf you are running an internal root nameserver, make sure it is configured properly and is answering queries.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Huntaddress already in use</H6>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<PRE CLASS="2Level-fixed"><A NAME="pgfId=997378"></A>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<CODE CLASS="grammar_literal">ctl_server: bind: Address already in use</CODE>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntThis usually indicates that another copy of BIND is already running. Verify that you have killed old copies of the daemon.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntThis can also pop up if you originally ran named as "root" and now run it as a regular user. named may have left behind an ndc control socket that is owned by root if it crashed, or was not killed gracefully.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntThis means that the regular user wouldn't be able to delete it, so it would think named is still running. The solution is to remove any ndc sockets in <EM CLASS="pathname">
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt7.2 Common Problems</H3>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt7.2.1 It's not working; how can I figure out what's wrong?</H4>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntThe best solution to solving installation and configuration issues is to take preventative measures by setting up logging files beforehand (see the sample configurations in <A HREF="Bv9ARM.3.html#30164" CLASS="XRef">
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntSample Configuration and Logging.</A>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt). The log files provide a source of hints and information that can be used to figure out what went wrong and how to fix the problem.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt7.3 Incrementing and Changing the Serial Number</H3>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntZone serial numbers are just numbers--they aren't date related. A lot of people set them to a number that represents a date, usually of the form YYYYMMDDRR. A number of people have been testing these numbers for Y2K compliance and have set the number to the year 2000 to see if it will work. They then try to restore the old serial number. This will cause problems, because serial numbers are used to indicate that a zone has been updated. If the serial number on the secondary server is lower than the serial number on the primary, the secondary server will attempt to update its copy of the zone.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntSetting the serial number to a lower number on the primary server than the secondary server means that the secondary will not perform updates to its copy of the zone.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntThe solution to this is to add 2147483647 (2^31-1) to the number, reload the zone and make sure all secondaries have updated to the new zone serial number, then reset the number to what you want it to be, and reload the zone again.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt7.4 Where Can I Get Help?</H3>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntThe Internet Software Consortium (ISC) offers a wide range of support and service agreements for BIND and DHCP servers. Four levels of premium support are available and each level includes support for all ISC programs, significant discounts on products and training, and a recognized priority on bug fixes and non-funded feature requests. In addition, ISC offers a standard support agreement package which includes services ranging from bug fix announcements to remote support. It also includes training in BIND and DHCP.</P>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan HuntTo discuss arrangements for support, contact
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Huntor visit the ISC web page at<BR>
a747113422afaa29ce72d2c5ba7f0b7ea9ec2054Evan Hunt<A HREF="http://www.isc.org/services/support/">http://www.isc.org/services/support/</A></EM>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt to read more.</P>
ef421f66f47224a42073deaf087378c5d0c9952eEvan Hunt<p>Return to <A href="Bv9ARM.html">BINDv9 Administrator Reference Manual</A>