upgrading BIND 921 to 932

[Jeff Reasoner]

Strict name checking has been enabled by default in Bind code for a
while (at least 9.3.1). Probably (especially since this is Windows), one
or more of the records in the problem zonefile has an "_". Assuming
you're realing with the master nameserver, your options are: 

A. change the offending name(s).
B. disable globally in named.conf with:

options
{
check-names master ignore;
}

C. disable name checking in that zone with:

zone "foo.com" in {
	type master;
	file "db.foo.com";
	check-names ignore;
	};

On Mon, 2006-03-20 at 12:13, simon church wrote:
> there were no errors in the event log, when running nslookup. however I did notice an application error relating to the specific zone "Bad owner name (check-names)". Any idea why that should come up? I tried other test zones and they are working fine. For some reason the upgrade does not like this particular zone file? I did recreate the file but it did not make any difference.
> 
> > -----Original Message-----
> > From: mayer at gis.net
> > Sent: Fri, 17 Mar 2006 21:20:53 -0500
> > To: schurchy at inbox.com
> > Subject: Re: upgrading BIND 921 to 932
> > 
> > simon church wrote:
> >> Hello,
> >> 
> >> we are upgrading our old installation of BIND 921 (windows 2000) to
> >> 932 (windows 2003). We have a primary server and a secondary server.
> >> I set up a test environment with 921 and some test zones and was able
> >> to run nslookups etc to prove that it was working. I ran the install
> >> for 932, setting up the local account, changing some file/folder
> >> permissions as required. However, I am not able to run any nslookups
> >> now.
> >> 
> >> Are there some other steps I need to take in doing this upgrade that
> >> I might be missing? Also, when it comes to production, does it matter
> >> whcih order I upgrade the primary versus secondary BIND servers?
> >> 
> > 
> > Don't use BIND 9.2.1 on Windows. It has plenty of bugs as well as some
> > architectural issues. Use 9.3.2 and 9.3.3 as soon as it's available.
> > 
> > What are the nslookup errors? Please use dig instead, it comes with the
> > install. Are there errors in the application event log and if so what
> > are they?
> > 
> > Danny
> 
>