[Pdns-users] Issue with subdoamin delegation and AFXR

[Posner, Sebastian]

If test.annoying.com is a domain on its own; then there MUST be 
a SOA record (it is kind of the domains "identity"), then you can 
AXFR the domain (given that NS records are present, too).

If test.annoying.com is NOT a domain on its own, no SOA is needed,

But then you can NOT AXFR test.annoying.com, because you can only 
AXFR domains, for which there MUST be a SOA and NS, and the 
nameserver MUST be configured to know that it is a domain on its own.

In your setup, you could AXFR annoying.com, and this would include 
all records from test.annoying.com.

Kind regards,

Sebastian

> -----Ursprüngliche Nachricht-----
> Von: pdns-users-bounces at mailman.powerdns.com [mailto:pdns-users-
> bounces at mailman.powerdns.com] Im Auftrag von Luca Salvatore
> Gesendet: Montag, 29. Juli 2013 00:29
> An: Pieter Lexis; pdns-users at mailman.powerdns.com
> Betreff: Re: [Pdns-users] Issue with subdoamin delegation and AFXR
> 
> I thought having the parent domain 'annoying.com' would be enough...
> All the records are in there.
> 
> Are you saying I also need a SOA for 'test.annoying.com'?
> 
> 
> 
> -----Original Message-----
> From: pdns-users-bounces at mailman.powerdns.com [mailto:pdns-users-
> bounces at mailman.powerdns.com] On Behalf Of Pieter Lexis
> Sent: Friday, 26 July 2013 5:43 PM
> To: pdns-users at mailman.powerdns.com
> Subject: Re: [Pdns-users] Issue with subdoamin delegation and AFXR
> 
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
> 
> Hi Luca,
> 
> On 07/26/2013 01:03 AM, Luca Salvatore wrote:
> > But this does not work.  In the pdns log file I get errors
> >
> > AXFR of domain 'test.annoying.com' initiated by ?ns3.ninefold.com?
> > AXFR of domain 'test.annoying.com' failed: not authoritative
> >
> > So why can I delegate the parent domain, but not a subdomain?
> 
> You probably don't have test.annoying.com configured as a domain on the
> master. You need to have that domain on your master-server (and at
> least an SOA record in that domain).
> 
> Hope this helps, cheers,
> 
> Pieter
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.12 (GNU/Linux)
> Comment: Using GnuPG with undefined - http://www.enigmail.net/
> 
> iQIcBAEBAgAGBQJR8iiCAAoJELPqGO5ebd4jEVIQAIfKmK8//qLb1seZUNXVH90i
> jPsYLCaIMvnYCBaKK8TyCVXTazcxvXVExXXerM2GE4UmPLNeNFJdNxPVPdMXhgjN
> Mc8/6TdzcS11lgiH7VF+mQ1nu0MdEu2Svg2bzY8hz5ptE/v3yzIJFD+T/yHso3ro
> XlDWGZgDGh2qGfyUCiiSp24mM6oAJWOvQnApmRfMvIk3CSmWpZzntTM0cIjGN30+
> ulCjtjOQQHAUivNzakWyWgcdrToffoezFSwq1WIqX/5uq8ua75c+prMsMaUzG557
> zs6WNV5w/6kmvQRgH997XdmpjE/3XKN/WGzScB2u9kE51EPu3Q3wOK3mF0wM1B1y
> 4cHny2BCfx5Wg8+f2rMj/Q5KMGVcKmdOQfoGCjf9WuGU95kVA1/B14bqwhWi2bMo
> MJelRUN9jX+YvYdB9HIuesVTVV2JzmAqdPakPwJpny1oEWuTU6OC93UPF3FTCMCv
> peTxDbJYxGK7DOBr3tW0cSQLCL5rxJf7N4l6XfOM04hgadLP1JYPYhGAIJsa/sYJ
> bid3h8hOSNW1nC7iIKQE5Vm6xDQ9vCM9ZsubmlBsPDurirtoq5M93Qq8qcM8iDPs
> Cw3zeUsFpbfArXXj2fRlMH6UpGKiWs5SWNdncf7XdKsD0hdW5X9idWWanDNvR3df
> 1zx41QZ7awAzTIqnXfew
> =oZOT
> -----END PGP SIGNATURE-----
> 
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users
> 
> _______________________________________________
> Pdns-users mailing list
> Pdns-users at mailman.powerdns.com
> http://mailman.powerdns.com/mailman/listinfo/pdns-users