Problems with BIND 9 and secondary DNS setup
Mark.Andrews at nominum.com
Mark.Andrews at nominum.com
Fri Sep 15 13:07:05 UTC 2000
A CNAME at the top of a zone is illegal. BIND 9 refuse to transfer
such an illegal configuration.
Mark
> Hey out there,
>
> I'm having problems attempting to setup secondary DNS on my machine. My buddy
> 's server is setup as the primary DNS for the
> zones, and we are attempting to set up mine as a secondary server for the zon
> es. Right now, his named is working fine, but
> mine gives errors on attempting zone transfers.
>
> The logs look like this:
>
> Sep 14 21:31:40 stdlog at kira named[28312]: loading configuration from '/etc/na
> med.conf'
> Sep 14 21:31:41 stdlog at kira named[28312]: dns_zone_load: zone mylanguagelab.c
> om/IN: no database file
> Sep 14 21:31:41 stdlog at kira named[28312]: dns_zone_load: zone t-p-l.com/IN: n
> o database file
> Sep 14 21:31:41 stdlog at kira named[28312]: dns_zone_load: zone taimeng.com/IN:
> no database file
> Sep 14 21:31:41 stdlog at kira named[28312]: dns_zone_load: zone cloran.za.net/I
> N: no database file
> Sep 14 21:31:41 stdlog at kira named[28312]: refresh_callback: zone taimeng.com/
> IN: CNAME at top of zone discovered: master
> 24.113.36.103#53
> Sep 14 21:31:41 stdlog at kira named[28312]: refresh_callback: zone mylanguagela
> b.com/IN: CNAME at top of zone discovered: master
> 24.113.36.103#53
> Sep 14 21:31:42 stdlog at kira named[28312]: refresh_callback: zone t-p-l.com/IN
> : CNAME at top of zone discovered: master
> 24.113.36.103#53
> Sep 14 21:31:42 stdlog at kira named[28312]: refresh_callback: zone cloran.za.ne
> t/IN: CNAME at top of zone discovered: master
> 24.113.36.103#53
> Sep 14 21:33:38 stdlog at kira named[28312]: refresh_callback: zone orbis-terrar
> um.net/IN: CNAME at top of zone
> discovered: master 24.113.36.103#53
>
> Whenever my server contacts his for the zone information, it returns the CNAM
> E at top of zone discovered message, and fails in
> the zone transfer, and doesn't create the database file.
>
> My machine has primary DNS setup for one zone and his is the secondary for th
> at; that works flawlessly; but this has errors.
>
> /etc/named.conf
>
> acl pat {
> localhost;
> };
>
> acl secondary {
> 24.113.36.103; //Fermi
> };
>
> logging {
> channel main {
> syslog daemon;
> };
> category default {
> main;
> };
> };
>
> options {
> directory "/var/named";
>
> forward only;
> forwarders {
> 24.2.10.33;
> 24.2.10.34;
> 24.2.10.35;
> 24.2.10.36;
> };
>
> recursion yes;
> auth-nxdomain yes;
>
> also-notify {
> 24.113.36.103;
> };
> allow-transfer { secondary; };
> allow-query { any; };
> allow-recursion { any; };
> };
>
> zone "." in {
> type hint;
> file "root.cache";
> };
>
> zone "tfsb.org" in {
> type master;
> file "master/ns.tfsb.org";
> };
>
> zone "orbis-terrarum.net" {
> type slave;
> file "slave/ns.orbis-terrarum.net";
> masters { 24.113.36.103; };
> };
>
> zone "taimeng.com" {
> type slave;
> file "slave/ns.taimeng.com";
> masters { 24.113.36.103; };
> };
>
> zone "mylanguagelab.com" {
> type slave;
> file "slave/ns.mylanguagelab.com";
> masters { 24.113.36.103; };
> };
>
> zone "t-p-l.com" {
> type slave;
> file "slave/ns.t-p-l.com";
> masters { 24.113.36.103; };
> };
>
> zone "cloran.za.net" {
> type slave;
> file "slave/ns.cloran.za.net";
> masters { 24.113.36.103; };
> };
>
> named.orbis-terrarum.net (on his box, where it's primary)
>
> $ORIGIN orbis-terrarum.net.
> @ 1D IN SOA ns1.orbis-terrarum.net. robbat2.orbis
> -terrarum.net. (
> 2000140906 ; serial
> 6H ; refresh
> 2H ; retry
> 1w ; expiry
> 2w ) ; minimum
>
> 3d IN NS ns1
> 1d IN CNAME tesla
>
> ; Primary Addresses
> fermi 2d IN A 24.113.36.103
> 3w IN RP root.fermi.orbis-terrarum.net. robbat
> 2.orbis-terrarum.net.
> 1w IN HINFO INTEL-586 LINUX-2.4.0-test5
> 3w IN LOC 49 16 N 122 58 W 20m 1m 10000m 100m
> tesla 1w IN CNAME tesla
> einstein 2d IN A 24.113.152.188
>
> ; Friends
> ultralightning 6h IN CNAME cr472933-a.rct1.bc.wave.home.com.
>
> ; Services
> ns1 2d IN CNAME tesla
> $INCLUDE services/mail
> $INCLUDE services/www
> $INCLUDE services/ftp
> $INCLUDE services/ldap
> $INCLUDE services/mysql
>
> ; Web Virtual Hosts
> djgpp 1w IN CNAME www
> gnu 1w IN CNAME www
> prog 1w IN CNAME www
> nojason 1w IN CNAME www
> test 1w IN CNAME www
> voodoo 1w IN CNAME www
> robbat2 1w IN CNAME www
>
> ; Internal Network A-records
> fermi-int 3w IN A 192.168.1.1
> tesla-int 3w IN A 192.168.1.2
> einstein-int 3w IN A 192.168.1.3
> henon-int 3w IN A 192.168.1.4
> heiselberg-int 3w IN A 192.168.1.5
> ; Internal Network CNAME-records
> proxy 3w IN CNAME fermi-int
>
> ; RP related TXT record
> robbat2.orbis-terrarum.net. 3w IN TXT "Robin Johnson ICQ: 30269588"
>
> ; Primary RP record
> $INCLUDE rp/orbis-terrarum.net
>
> ; CentralInfo.Net DNS Servers
> $INCLUDE dns/centralinfo.net
> ; tfsb.org DNS Servers
> $INCLUDE dns/tfsb.org
>
> Any help that could be provided would be greatly appreciated!
>
> Oh, and we're both running BIND 9.0.0rc6
>
> Thanks!
>
> Pat Lougheed
>
>
--
Mark Andrews, Nominum Inc.
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742 INTERNET: Mark.Andrews at nominum.com
More information about the bind-users
mailing list