Integrating W2K AD with BIND 9.2.1 on Linux

[Mark_Andrews at isc.org]

> Hi:
> 
> I know this question has been posted literally hundreds of times, and
> in my searching I have found answers to everything except what I am
> looking for - so I apologize in advance for posting this.
> 
> We are trying to integrate W2K AD into our organization, and are
> running BIND 9.2.1 on RedHat Linux 9. I have gone through the

	BIND 9.2.1 is old.

> Microsoft Research paper - Using BIND DNS Servers with Windows 2000. I
> have performed all the changes they have recommended, but am getting
> the following errors on trying to do a 'nsupdate':
> 
> Sep 25 14:38:16 gateway named[24505]: client 10.10.1.1#1279: updating
> zone 'abc.com.pk/IN': adding an RR
> Sep 25 14:38:16 gateway named[24505]: journal file
> pri/abc.com.pk.zone.jnl does not exist, creating it
> Sep 25 14:38:16 gateway named[24505]: pri/abc.com.pk.zone.jnl: create:
> permission denied

	Fix the directory permission to allow the user named is running
	as to write to the "pri" directory.  Note named relinquish root's
	abiltity to override file permissions under Linux.

> Sep 25 14:38:16 gateway named[24505]: client 10.10.1.1#1279: updating
> zone 'abc.com.pk/IN': error: journal open failed: unexpected error
> 
> I know that there is probably a simple answer to this problem, but it
> has eluded me for a while now. Your collective help would be greatly
> appreciated!
> 
> Mansoor Sultan
> Head of Information Technology
> Khushhali Bank - Central Processing Unit
> #306, 3rd Floor, Evacuee Trust Complex
> F-5/1, Sir Agha Khan Road
> Islamabad-44000, Pakistan
> Mansoor.Sultan at kb.com.pk
> +92 51 922-3331 (voice)
> +92 51 922-3332 (facsimile)
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org