Forward zone(s) trans from Pri to Sec no good

Thread view:

Enable EMail Alerts

Start New Thread

Thread rating:

Bill - 28 Jul 2005 19:50 GMT

I have added several more forward lookup zones (besides my main
local.domain.com)
example:
scsa.yahoo.com
scsb.yahoo.com

these are NOT syncing to my secondary dns svr's
note: my main - local.domain.net
updates properly..the others do not

I am stumped and technet and google have not helped
ideas?

thx
bill

Reply to this Message

Kevin D. Goodknecht Sr. [MVP] - 29 Jul 2005 13:07 GMT

> I have added several more forward lookup zones (besides my main
> local.domain.com)
[quoted text clipped - 8 lines]
> I am stumped and technet and google have not helped
> ideas?

Is this on an AD Domain controller?

Are these zones also AD integrated?

Also clarify "these are NOT syncing to my secondary dns svr's"
There can be no secondary zones on one DC if the zone with the same name is
AD integrated on another DC within the same domain.

Signature

Best regards,
Kevin D4 Dad Goodknecht Sr. [MVP]
Hope This Helps
===================================
When responding to posts, please "Reply to Group"
via your newsreader so that others may learn and
benefit from your issue, to respond directly to
me remove the nospam. from my email address.
===================================
http://www.lonestaramerica.com/
===================================
Use Outlook Express?... Get OE_Quotefix:
It will strip signature out and more
http://home.in.tum.de/~jain/software/oe-quotefix/
===================================
Keep a back up of your OE settings and folders
with OEBackup:
http://www.oehelp.com/OEBackup/Default.aspx
===================================

Reply to this Message

Bill - 29 Jul 2005 14:14 GMT

sorry was trying to be brief.
Primary DNS is on the DC (w2K sp4+)
only 1 DC at this time on network (yeah I know = bad)

secondary DNS's are just on W2K sp4 machines
there are 3 of them and I have set them up in the name server list in
properties of each added zone. Zone Transfer I have set to allow and to only
srv in name list

the new ones I added where NOT AD integrated.
I changed one of them to AD integrated still NG
I read doc Q842397 ..loaded patch..have not been able to reboot yet.but did
restart DNS services still NG
DNS Pic:

SERVER

+ Forward Lookup Zone
+local.domain.com
+scs.yahoo.com
+scsb.yahoo.com
+scsc.yahoo.com

and so on
the local.domain.com sync's fine
it is the other that I have added which do not sync

thanks
bill

> > I have added several more forward lookup zones (besides my main
> > local.domain.com)
[quoted text clipped - 15 lines]
> There can be no secondary zones on one DC if the zone with the same name is
> AD integrated on another DC within the same domain.

Reply to this Message

Ace Fekay [MVP] - 29 Jul 2005 15:45 GMT

> sorry was trying to be brief.
> Primary DNS is on the DC (w2K sp4+)
[quoted text clipped - 25 lines]
> thanks
> bill

If you change it to "Any", does that work?

Signature

Regards,
Ace

Please direct all replies ONLY to the Microsoft public newsgroups
so all can benefit.

This posting is provided "AS-IS" with no warranties or guarantees
and confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSE+I, MCT, MVP
Microsoft Windows MVP - Windows Server - Directory Services
Infinite Diversities in Infinite Combinations.
=================================

Reply to this Message

Bill - 29 Jul 2005 16:03 GMT

here is what I just tried

I rebooted my DC (I was very unpopular)
I rebooted the closest Sec DNS svr (I was very unpopular more so now)

I tried making a bogus zone
screwed.test

I got that to sync between the Pri DNS-DC and the Sec DNS(1)

I then removed one of the real zones I needed
redid that zone
alpha5.scs.yahoo.com
made the zone entry on the sec dns(1)
transfer from master
OK

I then went and tried to add in another sec DNS(2) for that zone to transfer
NG it will not sync the zone to DNS(2) ...stumped

> In news:B3BEE650-53E0-4201-AFA7-8D940B474C98@microsoft.com,
> Bill <Bill@discussions.microsoft.com> stated, which I then commented on
[quoted text clipped - 30 lines]
>
> If you change it to "Any", does that work?

Reply to this Message

Bill - 29 Jul 2005 16:10 GMT

PS.
ok it would seem that IF when the new zone is created and the name server
are added it will then sync to the sec dns servers

but if say
I create a new zone on the Pri dns and then later go back to add additional
Sec dns servers it will not sync to the new added sec dsn servers

bill

> here is what I just tried
>
[quoted text clipped - 47 lines]
> >
> > If you change it to "Any", does that work?

Reply to this Message

Kevin D. Goodknecht Sr. [MVP] - 30 Jul 2005 04:48 GMT

> here is what I just tried
>
[quoted text clipped - 15 lines]
> I then went and tried to add in another sec DNS(2) for that zone to
> transfer NG it will not sync the zone to DNS(2) ...stumped

Are the secondary servers multihomed?
Did you try changing allow zone transfers to the actual IP addresses of the
secondary?
Will the transfer go if you allow zone transfers to any server?

Signature

Reply to this Message

Bill - 30 Jul 2005 21:35 GMT

NO multihoming at all

I kinda got it to work
some zones would transfer some not

It seems I had to delete them all and recreate

the IF the zone populed properly in AD it showed having some type of extra
signiture file in AD for those that would transfer

I did end up having to just manually modifiy the zone record files on then
secodnary servers

there is something buggy in the DNS service with w2k cause some work some
did not
weird

> > here is what I just tried
> >
[quoted text clipped - 20 lines]
> secondary?
> Will the transfer go if you allow zone transfers to any server?

Reply to this Message