On Wed, Dec 03, 2003 at 11:16:32PM +1000, Mark Constable wrote:
> Is there a technique using dig to determine if we do or do not
> have a glue record in place, and whether that is something I
> need to specifically deal with or not ?

For any given server-ip which is the parent of some dom.ain, try this:

    dig §server dom.ain ns +norecurs +noall +additional +authority

and look for the absence of NS records and the presence of A/AAAA
records in the results. eg:
    
    $ dig §137.39.1.3 oz.au ns +norecurs +noall +additional +authority
    ;; global options:  printcmd
    munnari.oz.au.          14400   IN      AAAA    2001:388:c02:4000::1:21
    munnari.oz.au.          172800  IN      A       128.250.1.21
    munnari.oz.au.          172800  IN      A       128.250.22.2

vs:

    $ dig §211.29.133.32 gov.au ns +norecurs +noall +additional +authority
    ;; global options:  printcmd

A non-authoritative server will say something like this:

    $ dig §192.189.54.17 gov.au ns +norecurs +noall +additional +authority
    ;; global options:  printcmd
    gov.au.                 84785   IN      NS      ns1.ausregistry.net.
    gov.au.                 84785   IN      NS      ns2.ausregistry.net.
    ...
    ns1.ausregistry.net.    142219  IN      A       203.18.56.41
    ns2.ausregistry.net.    145820  IN      A       203.18.56.42
    ...

Note that a server which is also authoritative for other zones
which contain nameservers for the zone you are looking up will
return those addresses as well.

Chris