List Archives

This forum is an archive of all posts to our mailing list over the past few years. The forum is set read only therefore to contribute you will need to join our list community. See more info about this here.

When subscribed to the list you should use your standard email client to send your posts to ActiveDir@mail.activedir.org.

List Archives

Unanswered Active Topics

Forums Search

Forums >ActiveDir Mail List Archive >List Archives

Subject: [ActiveDir] OT - DNS Zone Transfers and Automatic Notify

Prev Next

You are not authorized to post a reply.

Author

Messages

pbbergs

Posts:287

12/16/2009 2:42 PM
I have several secondary InfoBlox (Linux) dns bind servers. These are new so they can accept incremental zone transfers. I have a Windows 2008 Geographically Dispersed Exchange 2007 Cluster that (Obviously) is heavily dependent upon DNS. When we have a failover the virtual name is flipped from one subnet to the other. In comes the problem. My TTL for the virtual host is 1 minute and on the Windows/AD integrated side everything is "Mostly" happy. On my Windows DNS server's (All DC/DNS servers are 2003 with DFL/FFL at 2003), the zone transfer setting is set to Zone Transfer with Notify. Here in lies the possible problem. If I inspect my zone from a 2003 server dns server the addresses for the machines are all setup and everything looks fine, but I'm not seeing quick response, but this could be a secondary issue on how quickly the box really wants the updates, but... If I inspect my zones from my Windows 7 with RSAT, there is a problem. If I click on the Notify button, under the zone transfer tab of the zone, my secondary servers are all in error. I get the feedback that there is a "Validation error, please try again later". There are no messages in my DNS event logs, nor any of the other logs pertaining to this issue. Is the validation related to Windows? I can't find much info at all on this validation piece at all. Has anyone seen this issue or know if this is a problem? Thanks Paul

pbbergs

Posts:287

12/16/2009 7:33 PM
I just got an answer back from someone at Microsoft. Turns out this is a known bug, system works but it gives the appearance it doesn't. Thanks Paul From: activedir-owner@mail.activedir.org [mailto:activedir-owner@mail.activedir.org] On Behalf Of Paul Bergson (ALLETE) Sent: Wednesday, December 16, 2009 8:41 AM To: activedir@mail.activedir.org Subject: [ActiveDir] OT - DNS Zone Transfers and Automatic Notify I have several secondary InfoBlox (Linux) dns bind servers. These are new so they can accept incremental zone transfers. I have a Windows 2008 Geographically Dispersed Exchange 2007 Cluster that (Obviously) is heavily dependent upon DNS. When we have a failover the virtual name is flipped from one subnet to the other. In comes the problem. My TTL for the virtual host is 1 minute and on the Windows/AD integrated side everything is "Mostly" happy. On my Windows DNS server's (All DC/DNS servers are 2003 with DFL/FFL at 2003), the zone transfer setting is set to Zone Transfer with Notify. Here in lies the possible problem. If I inspect my zone from a 2003 server dns server the addresses for the machines are all setup and everything looks fine, but I'm not seeing quick response, but this could be a secondary issue on how quickly the box really wants the updates, but... If I inspect my zones from my Windows 7 with RSAT, there is a problem. If I click on the Notify button, under the zone transfer tab of the zone, my secondary servers are all in error. I get the feedback that there is a "Validation error, please try again later". There are no messages in my DNS event logs, nor any of the other logs pertaining to this issue. Is the validation related to Windows? I can't find much info at all on this validation piece at all. Has anyone seen this issue or know if this is a problem? Thanks Paul

You are not authorized to post a reply.

Forums >ActiveDir Mail List Archive >List Archives > [ActiveDir] OT - DNS Zone Transfers and Automatic Notify

ActiveForums 3.7

Syndicate

Friends

List Archives

List Archives

Friends

Members

Articles

Related Links

Ads