Source:How to check DNS configuration: Difference between revisions

From SEPsesam
(Marked this version for translation)
(26 intermediate revisions by 4 users not shown)
Line 1: Line 1:
== General ==
<noinclude><div class="noprint"><languages />
<br />


Most of our customers face problems while configuring new clients in SEP sesam. Often the sources of the problems are misconfigured DNS Servers or no functional DNS at all. This document describes how to use SEP sesam with DNS names and how to check whether if your DNS configuration is OK.
<translate>== Overview == <!--T:2--> </translate>


== Requirements and Rules ==
{{Additional_Resources_Box|seeAlsoLinks=<nowiki />
*<translate><!--T:5-->
[[Special:MyLanguage/FAQ#name_resolution|Why do I get the message: "Login incorrect. Password incorrect." during the backup?]]
*[[Special:MyLanguage/FAQ#profile_setting|What happens when I set a profile?]]</translate>}}


* SEP sesam needs a proper DNS to work, it will NOT work with IP Addresses only
</div></noinclude><translate><!--T:8-->
* All DNS Names have to correctly resolve forward and reverse
Certain problems can occur when configuring new clients in SEP sesam if the DNS server is incorrectly configured or missing. SEP sesam needs a correct DNS to work and will not work with just an IP address. All DNS names must be correctly resolved (forward and reverse DNS lookup).
* If no DNS Server is available, the hosts file of the client and backup server have to be used for making systems available via DNS name
* The Hostname of the SEP sesam Server must not include an underscore "_" sign (see [http://en.wikipedia.org/wiki/Hostname#Restrictions_on_valid_host_names Wikipedia])


== Configuration ==
<!--T:9-->
If the DNS server is missing, you will have to use the '''hosts file''' of the client and backup server to make systems available via a DNS name. The hosts file can be found in the following locations:</translate>


=== Common Error Messages ===
;Linux
/etc/hosts


There are some common error messages which are an indication for errors in your name resolution:
;Windows
C:\Windows\system32\drivers\etc\hosts


CLIENT_HOSTNAME: Login to stpd from <CLIENT_HOSTNAME> to <SESAM_SERVER_HOSTNAME> incorrect.
{{note|<translate><!--T:10--> The hostname of the SEP sesam server may not include an underscore "_" sign. For hostname restrictions, see [http://en.wikipedia.org/wiki/Hostname#Restrictions_on_valid_host_names Restrictions on valid host names].</translate>}}


Login incorrect. Client resolves his IP address [X.X.X.X] to [RANDOM_HOSTNAME], but server resolves it to [X.X.X.X]. Please adjust your name resolution.  (0)
== {{anchor|tools}}<translate><!--T:11--> Tools for checking DNS resolution </translate> ==


=== Hosts Files ===
<translate><!--T:12-->
Several tools are available to check DNS resolution. However, SEP recommends the use of <tt>sm_setup check_resolution</tt>.</translate>


==== Linux ====
=== {{anchor|sm_setup_check}}<translate><!--T:13--> <tt>sm_setup check_resolution</tt> (recommended)</translate> ===


If a hosts file has to be used because of no DNS servers in your network, the file on the system is placed in:
<translate><!--T:14-->
The SEP sesam <tt>sm_setup</tt> tool is part of the SEP sesam Client and Server installation and can be used from the command line to resolve DNS names. Before using this tool, you need to set up a SEP sesam profile as described in FAQ: [[Special:MyLanguage/FAQ#profile_setting|What happens when I set up a profile?]]


/etc/hosts
<!--T:15-->
SEP recommends that you run this command on the backup server AND on the client with the same arguments. It is important that the client and the backup server are resolved correctly.


==== Windows ====
<!--T:16-->
;Syntax</translate>
'''Client''':~ # sm_setup check_resolution '''backupserver'''
Calling getaddrinfo with ''''backupserver''''
        Official name: '''backupserver.sep.de'''
        IPv4 Address #1: '''172.16.1.146'''
Calling getnameinfo for IP Address #1 ''''172.16.1.146''''
        Official name: '''backupserver.sep.de'''
        Alternate name: backupserver


If you want to use a hosts file on windows Systems for working around DNS problems, the file can be found in:
'''Client''':~ # sm_setup check_resolution '''client'''
Calling getaddrinfo with ''''client''''
        Official name: '''client.sep.de'''
        IPv4 Address #1: '''172.16.1.145'''
Calling getnameinfo for IP Address #1 ''''172.16.1.145''''
        Official name: '''client.sep.de'''
        Alternate name: client
<br>
'''Backupserver''':~ # sm_setup check_resolution '''client'''
' Calling getaddrinfo with ''''client''''
        Official name: '''client.sep.de'''
        IPv4 Address #1: '''172.16.1.145'''
Calling getnameinfo for IP Address #1 ''''172.16.1.145''''
        Official name: '''client.sep.de'''
        Alternate name: client


  C:\Windows\system32\drivers\etc\hosts
  '''Backupserver''':~ # sm_setup check_resolution '''backupserver'''
Calling getaddrinfo with ''''backupserver''''
        Official name: '''backupserver.sep.de'''
        IPv4 Address #1: '''172.16.1.146'''
Calling getnameinfo for IP Address #1 ''''172.16.1.146''''
        Official name: '''backupserver.sep.de'''
        Alternate name: backupserver


== Tools to check DNS Resolution ==


There are various tools which can be used to check the DNS resolution, they have up and downsides.
<translate><!--T:17-->
The recommended way to check your DNS configuration is to use [[How_to_check_DNS_configuration#sm_setup_check_resolution_.28recommended.29|sm_setup check_resolution]]
The returned addresses and hostnames must match. If the reverse resolve returns an ''official name'' that is different from the name specified on the command line, problems will occur when backing up the client (see [[#messages|Common error messages]]).</translate>


=== <tt>ping</tt> ===
==={{anchor|nslookup}}<translate><!--T:18--> <tt>nslookup</tt> (Windows and Linux)</translate>===


<tt>ping</tt> is not a proper tool to check DNS resolution, it will not always be 100% correct. It is
<translate><!--T:19-->
also not possible to correctly reverse resolve the DNS names.
The <tt>nslookup</tt> tool is a network administration command-line tool for querying the DNS to obtain a hostname or IP address.  


=== <tt>nslookup</tt> (Windows and Linux) ===
<!--T:20-->
It is useful for troubleshooting DNS issues, but not for full hostname resolution as it ignores the hosts file. SEP sesam resolves its hostnames via the "common library function" and first uses the hostname specified in the hosts file of the system. By default, nslookup translates a domain name to an IP address (or vice versa).


This tool can be used to query and existing DNS Server for a certain hostname or ip address. It
<!--T:21-->
will NOT check the hosts file of the System. As such, you may get different results if you choose
Use the <tt>nslookup</tt> command to check that the name resolution is correct: ''forward'' with and without FQDN as well as ''reverse''. Check on the SEP sesam Server AND on the SEP sesam Client. If DNS is not used and the verification done via the <code>etc/hosts</code> file, use [[#ping|ping]] to check individual clients.  
to use <tt>nslookup</tt>. SEP sesam resolves its hostnames via 'common library function' and will first use
the hostname specified in the hosts file of the system.


=== <tt>host</tt> (linux only) ===
<!--T:22-->
;Syntax</translate>
        nslookup {client}
        nslookup {IP-Address of client}                        # important reverse lookup
        nslookup {SEPsesam Server name}
        nslookup {IP-Address of SEPsesam Server}                # important reverse lookup


As <tt>nslookup</tt>, <tt>host</tt> can be used to forward and reverse resolve hostnames and ip addresses. It
<translate><!--T:23-->
defaults to the name server configured in {{Path|/etc/resolv.conf}} but can also be used wit a certain
Example: check ''mysesam'' name resolution and reverse lookup:</translate>
DNS Server as an additional argument. It will query the DNS Server of the System first.


=== <tt>sm_setup check_resolution</tt> (recommended) ===
      #>nslookup mysesam
      Server:  dns.domaine.de
      Address:  192.168.1.254


This is the recommended way to check your DNS Resolution. Both SEP sesam Client and SEP sesam Servers
      Name:    mysesam.domaine.de
come with the SEP sesam tool "<tt>sm_setup</tt>" installed. It can be used to forward and reverse resolve
      Address:  192.168.1.1
DNS names from the Command Line.


Before you can use this tool, be sure to execute the SEP sesam profile like shown in this FAQ entry:
      #>nslookup 192.168.1.1
      Server:   dns.domaine.de
      Address:  192.168.1.254


[[English_FAQ#A_support_staff_member_told_me_to_set_a_profile.2C_what_does_he_mean.3F|A support staff member told me to set a profile, what does he mean?]]
      Name:    mysesam.domaine.de
      Address:  192.168.1.1


It is recommended to run this command on the backup server AND on the client with different
=== {{anchor|host}}<translate><!--T:24--> <tt>host</tt> (Linux only)</translate>===
arguments. On the backup server, the second argument will be the desired hostname of the
client. If executing the command at the client, the second argument will be the hostname
of the backup server.


The output of the command looks like this:
<translate><!--T:25-->
The <tt>host</tt> command can also be used to resolve a hostname into an IP address and vice versa. It defaults to the name server configured in <code>/etc/resolv.conf</code> but can also be used with a DNS server as an additional argument. It will query the DNS server of the system first.


  backupserver:~ # sm_setup check_resolution '''client'''
<!--T:26-->
Calling gethostbyname with ''''client''''
;Syntax</translate>
  '''Client''':~ # host '''backupserver'''
                      backupserver.sep.de has address '''172.16.1.146'''
   
   
        Official name: '''client.sep.de'''
        Alternate name: client
        Address type: AF_INET
        Address length: 4
        First IP Address: '''172.16.1.145'''
Calling gethostbyaddr with ''''172.16.1.145''''
        Official name: '''client.sep.de'''
        Alternate name: client
        Address type: AF_INET
        Address length: 4
        First IP Address: '''172.16.1.145'''


As you can see the command will output the forward and reverse resolved hostname
'''Client''':~ # host '''172.16.1.146'''
of the system. Both the addresses and hostnames which are returned have to
                      146.1.16.172.in-addr.arpa domain name pointer '''backupserver.sep.de'''
match. For example if the Official name which is returned from the reverse
 
resolve is different from the one specified on the command line, this will
==={{anchor|ping}}<translate><!--T:27--> <tt>ping</tt></translate>===
result in problems backing up the client (see [[How to check DNS configuration#Common Error Messages|Common Error Messages]]).
 
<translate><!--T:28-->
The same values have to match on the client for the hostname of the backup server:
<tt>ping</tt> is a network administration software utility used to test the reachability of a destination device on an IP network via ICMP echo request. It is not a suitable tool for checking DNS resolution and will not always be 100% correct. Although ping resolves an IP address, it is not strictly a name server lookup tool and may return a potentially outdated cached result.
 
<!--T:29-->
In addition, it is not possible to correctly reverse resolve DNS names. For more details, see the [https://en.wikipedia.org/wiki/Ping_%28networking_utility%29 ping description on Wikipedia].</translate>
 
=={{anchor|messages}}<translate><!--T:30--> Common error messages</translate>==
 
<translate><!--T:31-->
The following common error messages indicate that there is a problem with your name resolution:</translate>
 
CLIENT_HOSTNAME: Login to stpd from <CLIENT_HOSTNAME> to <SESAM_SERVER_HOSTNAME> incorrect.
 
Login incorrect. Client resolves his IP address [X.X.X.X] to [RANDOM_HOSTNAME], but server resolves it to [X.X.X.X]. Please adjust your name resolution.  (0)
 
<translate><!--T:32-->
In this case, check your name resolution (DNS or <tt>etc/hosts</tt> file). The SEP sesam Server and the SEP sesam Client must be reachable with or without FQDN and should be able to resolve each other and also themselves correctly, including reverse lookup.  
 
<!--T:33-->
If you have changed an entry in your DNS configuration, but Windows still reports a wrong hostname/IP, try running <tt>ipconfig /flushdns</tt> as administrator.</translate>
 
<div class="noprint"><noinclude>
==<translate><!--T:34-->
See also==
[[Special:MyLanguage/FAQ#name_resolution|Why do I receive the message: "Login incorrect. Password incorrect." during backup?]] – [[Special:MyLanguage/FAQ#profile_setting|What happens when I set a profile?]]</translate>


client:~ # sm_setup check_resolution '''backupserver'''
{{Copyright}}</noinclude></div>
Calling gethostbyname with ''''backupserver''''
        Official name: '''backupserver.sep.de'''
        Alternate name: backupserver
        Address type: AF_INET
        Address length: 4
        First IP Address: '''172.16.1.146'''
Calling gethostbyaddr with ''''172.16.1.146''''
        Official name: '''backupserver.sep.de'''
        Alternate name: backupserver
        Address type: AF_INET
        Address length: 4
        First IP Address: '''172.16.1.146'''

Revision as of 10:56, 18 September 2023


Overview


Certain problems can occur when configuring new clients in SEP sesam if the DNS server is incorrectly configured or missing. SEP sesam needs a correct DNS to work and will not work with just an IP address. All DNS names must be correctly resolved (forward and reverse DNS lookup).

If the DNS server is missing, you will have to use the hosts file of the client and backup server to make systems available via a DNS name. The hosts file can be found in the following locations:

Linux
/etc/hosts
Windows
C:\Windows\system32\drivers\etc\hosts
Note
The hostname of the SEP sesam server may not include an underscore "_" sign. For hostname restrictions, see Restrictions on valid host names.

Tools for checking DNS resolution

Several tools are available to check DNS resolution. However, SEP recommends the use of sm_setup check_resolution.

sm_setup check_resolution (recommended)

The SEP sesam sm_setup tool is part of the SEP sesam Client and Server installation and can be used from the command line to resolve DNS names. Before using this tool, you need to set up a SEP sesam profile as described in FAQ: What happens when I set up a profile?

SEP recommends that you run this command on the backup server AND on the client with the same arguments. It is important that the client and the backup server are resolved correctly.

Syntax
Client:~ # sm_setup check_resolution backupserver
Calling getaddrinfo with 'backupserver'

        Official name: backupserver.sep.de
        IPv4 Address #1: 172.16.1.146

Calling getnameinfo for IP Address #1 '172.16.1.146'

        Official name: backupserver.sep.de
        Alternate name: backupserver
Client:~ # sm_setup check_resolution client
Calling getaddrinfo with 'client'

        Official name: client.sep.de
        IPv4 Address #1: 172.16.1.145

Calling getnameinfo for IP Address #1 '172.16.1.145'

        Official name: client.sep.de
        Alternate name: client


Backupserver:~ # sm_setup check_resolution client
' Calling getaddrinfo with 'client'

        Official name: client.sep.de
        IPv4 Address #1: 172.16.1.145

Calling getnameinfo for IP Address #1 '172.16.1.145'

        Official name: client.sep.de
        Alternate name: client

Backupserver:~ # sm_setup check_resolution backupserver
Calling getaddrinfo with 'backupserver'

        Official name: backupserver.sep.de
        IPv4 Address #1: 172.16.1.146

Calling getnameinfo for IP Address #1 '172.16.1.146'

        Official name: backupserver.sep.de
        Alternate name: backupserver


The returned addresses and hostnames must match. If the reverse resolve returns an official name that is different from the name specified on the command line, problems will occur when backing up the client (see Common error messages).

nslookup (Windows and Linux)

The nslookup tool is a network administration command-line tool for querying the DNS to obtain a hostname or IP address.

It is useful for troubleshooting DNS issues, but not for full hostname resolution as it ignores the hosts file. SEP sesam resolves its hostnames via the "common library function" and first uses the hostname specified in the hosts file of the system. By default, nslookup translates a domain name to an IP address (or vice versa).

Use the nslookup command to check that the name resolution is correct: forward with and without FQDN as well as reverse. Check on the SEP sesam Server AND on the SEP sesam Client. If DNS is not used and the verification done via the etc/hosts file, use ping to check individual clients.

Syntax
       nslookup {client}
       nslookup {IP-Address of client}                         # important reverse lookup
       nslookup {SEPsesam Server name}
       nslookup {IP-Address of SEPsesam Server}                # important reverse lookup

Example: check mysesam name resolution and reverse lookup:

     #>nslookup mysesam
     Server:   dns.domaine.de
     Address:  192.168.1.254
     Name:     mysesam.domaine.de
     Address:  192.168.1.1
     #>nslookup 192.168.1.1
     Server:   dns.domaine.de
     Address:  192.168.1.254
     Name:     mysesam.domaine.de
     Address:  192.168.1.1

host (Linux only)

The host command can also be used to resolve a hostname into an IP address and vice versa. It defaults to the name server configured in /etc/resolv.conf but can also be used with a DNS server as an additional argument. It will query the DNS server of the system first.

Syntax
Client:~ # host backupserver
                     backupserver.sep.de has address 172.16.1.146

Client:~ # host 172.16.1.146
                     146.1.16.172.in-addr.arpa domain name pointer backupserver.sep.de

ping

ping is a network administration software utility used to test the reachability of a destination device on an IP network via ICMP echo request. It is not a suitable tool for checking DNS resolution and will not always be 100% correct. Although ping resolves an IP address, it is not strictly a name server lookup tool and may return a potentially outdated cached result.

In addition, it is not possible to correctly reverse resolve DNS names. For more details, see the ping description on Wikipedia.

Common error messages

The following common error messages indicate that there is a problem with your name resolution:

CLIENT_HOSTNAME: Login to stpd from <CLIENT_HOSTNAME> to <SESAM_SERVER_HOSTNAME> incorrect.
Login incorrect. Client resolves his IP address [X.X.X.X] to [RANDOM_HOSTNAME], but server resolves it to [X.X.X.X]. Please adjust your name resolution.  (0)

In this case, check your name resolution (DNS or etc/hosts file). The SEP sesam Server and the SEP sesam Client must be reachable with or without FQDN and should be able to resolve each other and also themselves correctly, including reverse lookup.

If you have changed an entry in your DNS configuration, but Windows still reports a wrong hostname/IP, try running ipconfig /flushdns as administrator.

See also

Why do I receive the message: "Login incorrect. Password incorrect." during backup?What happens when I set a profile?

Copyright © SEP GmbH (formerly SEP AG) 1999-2025. All rights reserved.
Any form of reproduction of the contents or parts of this manual is allowed only with the express written permission from SEP GmbH. When compiling and designing user documentation SEP GmbH uses great diligence and attempts to deliver accurate and correct information. However, SEP GmbH cannot issue a guarantee for the contents of this manual.