DNS - can't remove "0.0.10.in-addr.arpa" reverse domain!

Question

I'm having some trouble with DNS behind our firewall. In this case we have an internal block of IP's. We're using the public 10.0.1.xxx subnet. Using OS X Server's DNS service to attempt to add a virtual host to our to our previously working network has created some trouble. First of it always adds the Reverse Zone 0.0.10.in-addr.arpa. to our Zones list. The working one is 1.0.10.in-addr.arpa. so why does it insist on adding this other one? I delete it and save. But it reappears immediately...
It even shows in the log:
+03-Sep-2009 08:50:12.083 zone 0.0.10.in-addr.arpa/IN/com.apple.ServerAdmin.DNS.public: loading from master file db.0.0.10.in-addr.arpa. failed: file not found+
Server is running Leopard (10.5.8)

Answer 1

Hi,
When you set up your Kerberos realm on the original 10.0.x.x DNS zone with its accompanying x.0.10.in-addr.arpa then you established a required service. If you still had OD master with Kerberos running when you deleted the 10.0.x.x zone then Kerberos failed and kept trying to use the reverse pointer x.0.10.in-addr.arpa.
You will probably have to take the OD back to standalone after setting up the new zone with the new address and its reverse pointer. Give the new zone a different host name which results in a new realm. Then repromote OD and have Kerberos established with the new realm and DNS setup.
At this point it seems Kerberos is borked and you don't have much choice about going to standalone and repromoting to get it back.
HTH,
Harry