ddns help

[Glenn Satchell]

>To: dhcp-server at isc.org
>From: Jeff Meyer <jeffm at andersonlabs.com>
>Subject: ddns help
>Date: Fri, 22 Sep 2006 12:17:27 -0500
>
>Hi all,
>
>In attempting to setup ddns I have run into the following error message:
>
>dhcpd: Unable to add forward map from wks.int.mydomain.com to 
>192.168.0.100: timed out
>
>I am hoping someone can take a look at my setup and tell me where I went 
>wrong, or what I am misssing.
>
>Thanks!!
>
>here are my configs:
>
>named.conf:
>
>acl clients {
>     192.168.0.0/24;
>     192.168.1.1/24;

This should be 192.168.1.0/24 although it will probably still work as is...

>};
>
>options {
>     forwarders { 169.207.1.3; };
>     version "";
>     listen-on    { 192.168.0.1; 192.168.1.1; 127.0.0.1; };
>     allow-recursion { clients; };
>     allow-query { clients; 127.0.0.1; };
>     querylog no;
>};
>
>include "/etc/rndc.key";
>
>controls {
>     inet 127.0.0.1 port 953
>     allow { 127.0.0.1; } keys { "rndc-key"; };
>};
>
>logging {
>     channel query_info {
>         file "named_query.log" versions 3 size 10m;
>         severity info;
>         print-category yes;
>         print-time yes;
>     };
>
>     category lame-servers { null; };
>     category queries { query_info; };
>     category resolver { query_info; };
>};
>
>// Standard zones
>//
>zone "." {
>     type hint;
>     file "standard/root.hint";
>};
>
>zone "localhost" {
>     type master;
>     file "standard/localhost";
>     allow-transfer { localhost; };
>};
>
>zone "127.in-addr.arpa" {
>     type master;
>     file "standard/loopback";
>     allow-transfer { localhost; };
>};
>
>zone 
>"0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" {
>     type master;
>     file "standard/loopback6.arpa";
>     allow-transfer { localhost; };
>};
>
>zone "int.mydomain.com." {

There is an extra '.' on the end of the domain name - this might cause
problems. You don't have this on any of the other zone lines.

>     type master;
>     file "master/int.mydomain.com";
>     allow-update { key rndc-key; };
>};
>
>zone "0.168.192.in-addr.arpa" {
>     type master;
>     file "master/0.168.192.in-addr.arpa";
>     allow-update { key rndc-key; };
>};
>
>zone "1.168.192.in-addr.arpa" {
>     type master;
>     file "master/1.168.192.in-addr.arpa";
>};
>
>dhcpd.conf:
>
>authoritative;
>ddns-update-style interim;
>
>shared-network LOCAL-NET {
>     option  domain-name "int.mydomain.com";
>     option  domain-name-servers 192.168.0.1;
>     option broadcast-address 192.0.0.255;

This broadcast address is most certainly wrong. Should be
192.168.0.255. However the broadcast address is specific to the subnet
so it would be better to define it there.

Also there is only one subnet, so you don't really need the
shared-network statement.

>     default-lease-time 86400;
>     max-lease-time 172800;
>
>     subnet 192.168.0.0 netmask 255.255.255.0 {
>         option routers 192.168.0.1;
>
>         range 192.168.0.100 192.168.0.110;
>     }
>}
>
>include "/var/named/etc/rndc.key";
>
>zone int.mydomain.com. {
>     primary 192.168.0.1;
>     key rndc-key;
>}
>
>zone 0.168.192.in-addr.arpa. {
>     primary 192.168.0.1;
>     key rndc-key;
>}
>
>rndc.key:
>
>key "rndc-key" {
>     algorithm hmac-md5;
>     secret "my_secret";
>};

Alas the format for the key definition in dhcpd.conf looks similar, but
it is different! This is what you need in dhcpd.conf - note that there
are no quotes:

key rndc-key {
     algorithm hmac-md5;
     secret my_secret;
};

If the key is wrong then bind will happily ignore the request, hence
the reason dhcpd gives the timeout message. As SImon mentioned in his
other email look at the named logs to see the error there (if any).

regards,
-glenn
--
Glenn Satchell     mailto:glenn.satchell at uniq.com.au | Some days we are
Uniq Advances Pty Ltd         http://www.uniq.com.au | the flies;  some
PO Box 70 Paddington NSW Australia 2021              | days we  are the
tel:0409-458-580  tel:02-9380-6360  fax:02-9380-6416 | windscreens...