wildcard dns

From my blog.

I’m having this problem where I can’t get the CNAME *.domain.tld working on Mac OSX server 10.8

I'll illustrate my problem (presuming web service is up and running):

Let’s set up a new “Primary Zone” with an “A Record”.

1. Server.app
2. DNS
3. +
4. Add Primary Zone
5. Name: domain.tld
6. Done
7. +
8. Add Machine Record
9. Zone: domain.tld
10. Host Name: domain.tld
11. IP Addresses: 127.0.0.1
12. Done
13. Visit http://domain.tld/ in Safari

That’s great, now we can find the domain by visiting the browser, but how about www.domain.tld?

No can do.... But this is logical 😉

Let’s add a CNAME (or “alias Record”)

1. Server.app
2. DNS
3. +
4. Add Alias Record
5. Zone: domain.tld
6. Host Name: www
7. Destination: domain.tld
8. Done
9. Visit http://www.domain.tld/ in Safari

Now we can find domain.tld as well as www.domain.tld in the browser.

This is just great, it almost looks like a full Enterprise Webserver!!

Now I want to add *.domain.tld so I can find all.these.sub.domains.domain.tld as well, of maybe just dev.domain.tld or test.domain.tld or even www2.domain.tld

1. Server.app
2. DNS
3. +
4. Add Alias Record
5. Zone: domain.tld
6. Host Name: *

😕

The by most people much beloved GUI does not accept the * so I’ll just type “asteriks” in stead and change it in the terminal later.

1. Host Name: asteriks
2. Destination: domain.tld
3. Done
4. Terminal.app
5. # sudo nano /private/var/named/db.domain.tld
6. change "asteriks.domain.tld" to "*.domain.tld"
7. Server.app
8. DNS
9. OFF
10. ON

The “GUI” now reflects the zonefile.

I can now resolve anything.domain.tld, but not for long… 😟

The problem

The problem is that periodically or after a service/machine restart, the *.domain.tld CNAME will be undone because Apple does not like it when I change things I’m not "supposed" to change. 😢

The issue I have with this problem is that *.domain.tld is widely accepted in Bind/DNS systems except for Mac OSX server Mountain Lion.

Incom”Apple”ble…..

Conclusion

Apple OSX Server is NOT enterprise ready because it fails on a number of accounts (Bind, Samba) to offer the functionalities a 'real world' enterprise *NIX server offers.

Apple "Server Support"

I have spoken to Apple Server Support in Ireland who only know how to handle the GUI, so very friendly, but not very helpful! 😐

Please feel free to discus this issue in this thread of on my blog.

Message was edited by: OcchioNL