Upgrade failed

Thu Oct 25 22:22:58 UTC 2007

> Hi 
>  
> We recently upgraded our DNS environment [running on RHEL 4] from bind
> 9.2.4 to 9.4.1-P1 and it showed up following errors. What could be the
> possible reason for this?

	Firstly it pays to have a clean setup to upgrade from.  Lots
	of the messages below would have been being emitted by 9.2.4.
 
> Oct 24 11:35:12 gesprddns02 named[18750]: starting BIND 9.4.1-P1 -u
> named -t /var/named/chroot
> Oct 24 11:35:12 gesprddns02 named[18750]: loading configuration from
> '/etc/named.conf'
> Oct 24 11:35:12 gesprddns02 named[18750]: listening on IPv4 interface
> lo, 127.0.0.1#53
> Oct 24 11:35:12 gesprddns02 kernel: process `named' is using obsolete
> setsockopt SO_BSDCOMPAT
> Oct 24 11:35:12 gesprddns02 named[18750]: listening on IPv4 interface
> eth0, 3.160.160.103#53
> Oct 24 11:35:12 gesprddns02 named[18750]: listening on IPv4 interface
> eth1, 3.160.248.103#53
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> 127.IN-ADDR.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> 254.169.IN-ADDR.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> 2.0.192.IN-ADDR.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> 255.255.255.255.IN-ADDR.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> D.F.IP6.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> 8.E.F.IP6.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> 9.E.F.IP6.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> A.E.F.IP6.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: automatic empty zone:
> B.E.F.IP6.ARPA
> Oct 24 11:35:12 gesprddns02 named[18750]: command channel listening on
> 127.0.0.1#953
> Oct 24 11:35:12 gesprddns02 named[18750]: zone 0.in-addr.arpa/IN:
> loading from master file named.zero failed: file not found
> Oct 24 11:35:12 gesprddns02 named[18750]: zone 0.0.127.in-addr.arpa/IN:
> loading from master file named.local failed: file not found
> Oct 24 11:35:12 gesprddns02 named[18750]: zone 255.in-addr.arpa/IN:
> loading from master file named.broadcast failed: file not found
> Oct 24 11:35:12 gesprddns02 named[18750]:

	Supply the master files.

> slaves/gesupply.com.100.3.zone:558: warning:
> XRX_0000AA65FB31.gesdom1.ad.gesupply.com: bad name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:

	See check-names in the ARM.  Underscore is not legal in a
	hostname (RFC 952).  Hosts really should be renamed.

> slaves/gesupply.com.100.3.zone:1066: warning:
> CI_GMR0R41E1.gesdom1.ad.gesupply.com: bad name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone 100.3.in-addr.arpa/IN:
> loaded serial 2007103010
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/gesupply.com.101.3.zone:279: warning:
> CI_5QR0R41E1.gesdom1.ad.gesupply.com: bad name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone 101.3.in-addr.arpa/IN:
> loaded serial 2007101509
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/gesupply.com.160.3.zone:118: warning:
> CI_2KT0R41E1.gesdom1.ad.gesupply.com: bad name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/gesupply.com.160.3.zone:1154: warning:
> CI_7KB1R41E1.gesdom1.ad.gesupply.com: bad name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone 160.3.in-addr.arpa/IN:
> loaded serial 2007100902
> Oct 24 11:35:12 gesprddns02 named[18750]: zone
> 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/I
> N: loading from master file named.ip6.local failed: file not
>  found

	Again supply the zone.

> Oct 24 11:35:12 gesprddns02 named[18750]: zone gesupply.com/IN: loaded
> serial 2007101801
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:76: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)

	Make gc._msdcs.ad.gesupply.com a seperate zone and turn
	off check-names.

> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:77: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:78: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:79: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:80: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:81: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:82: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:83: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:84: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:85: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:86: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:87: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:88: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/ad.gesupply.com.zone:89: gc._msdcs.ad.gesupply.com: bad owner
> name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone ad.gesupply.com/IN:
> loaded serial 2007100904
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/gesdom1.ad.gesupply.com.zone:991:
> CI_2KT0R41E1.gesdom1.ad.gesupply.com: bad owner name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/gesdom1.ad.gesupply.com.zone:992:
> CI_5QR0R41E1.gesdom1.ad.gesupply.com: bad owner name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/gesdom1.ad.gesupply.com.zone:993:
> CI_7KB1R41E1.gesdom1.ad.gesupply.com: bad owner name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/gesdom1.ad.gesupply.com.zone:994:
> CI_GMR0R41E1.gesdom1.ad.gesupply.com: bad owner name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]:
> slaves/gesdom1.ad.gesupply.com.zone:1368:
> XRX_0000AA65FB31.gesdom1.ad.gesupply.com: bad owner name (check-names)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone
> gesdom1.ad.gesupply.com/IN: loaded serial 2007101995
> Oct 24 11:35:12 gesprddns02 named[18750]: zone
> gesuppkellirl.ad.gesupply.com/IN: loaded serial 2007101502
> Oct 24 11:35:12 gesprddns02 named[18750]: zone dev.gesupply.com/IN:
> loaded serial 2007062101
> Oct 24 11:35:12 gesprddns02 named[18750]: zone gexpro.com/IN: loaded
> serial 2007102304
> Oct 24 11:35:12 gesprddns02 named[18750]: zone usirexel.com/IN: loaded
> serial 710
> Oct 24 11:35:12 gesprddns02 named[18750]: zone localdomain/IN: loading
> from master file localdomain.zone failed: file not found
> Oct 24 11:35:12 gesprddns02 named[18750]: zone localhost/IN: loading
> from master file localhost.zone failed: file not found
> Oct 24 11:35:12 gesprddns02 named[18750]: running
> Oct 24 11:35:12 gesprddns02 named[18750]: zone gesupply.com/IN: sending
> notifies (serial 2007101801)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone 100.3.in-addr.arpa/IN:
> sending notifies (serial 2007103010)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone dev.gesupply.com/IN:
> sending notifies (serial 2007062101)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone gexpro.com/IN: sending
> notifies (serial 2007102304)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone 160.3.in-addr.arpa/IN:
> sending notifies (serial 2007100902)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone 101.3.in-addr.arpa/IN:
> sending notifies (serial 2007101509)
> Oct 24 11:35:12 gesprddns02 named: named startup succeeded
> Oct 24 11:35:12 gesprddns02 named[18750]: zone ad.gesupply.com/IN:
> sending notifies (serial 2007100904)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone
> gesdom1.ad.gesupply.com/IN: sending notifies (serial 2007101995)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone
> gesuppkellirl.ad.gesupply.com/IN: sending notifies (serial 2007101502)
> Oct 24 11:35:12 gesprddns02 named[18750]: zone usirexel.com/IN: sending
> notifies (serial 710)
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: unable to find
> root NS 'thomas1.ge.com' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: unable to find
> root NS 'thomas2.ge.com' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: unable to find
> root NS 'thomas3.ge.com' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: unable to find
> root NS 'thomas4.ge.com' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'A.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'B.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'C.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'D.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'E.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'F.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'G.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'H.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'I.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'J.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'K.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'L.ROOT-SERVERS.NET' in hints
> Oct 24 11:35:12 gesprddns02 named[18750]: checkhints: extra NS
> 'M.ROOT-SERVERS.NET' in hints

	You hints don't match reality.  You have a private root.

> Oct 24 11:35:14 gesprddns02 named[18750]: client 3.100.32.76#36576:
> query (cache) 'gesstgapp02/AAAA/IN' denied
> Oct 24 11:35:14 gesprddns02 named[18750]: client 3.100.32.76#36579:
> query (cache) 'gesstgapp02.amer.consind.ge.com/A/IN' denied
> Oct 24 11:35:15 gesprddns02 named[18750]: client 3.160.232.73#49940:
> query (cache) 'ec-dev-sm-u2.indsys.ge.com/A/IN' denied
> Oct 24 11:35:15 gesprddns02 named[18750]: client 3.160.232.73#49942:
> query (cache) 'ec-dev-sm-u1.indsys.ge.com/A/IN' denied
> Oct 24 11:35:15 gesprddns02 named[18750]: client 3.100.32.76#36584:
> query (cache) 'gesstgapp02.amer.consind.ge.com/AAAA/IN' denied
> Oct 24 11:35:16 gesprddns02 named[18750]: client 3.100.32.76#36587:
> query (cache) 'gesstgapp02.supply.ge.com/AAAA/IN' denied
> Oct 24 11:35:16 gesprddns02 named[18750]: client 3.100.32.76#36590:
> query (cache) 'gesstgapp02.corporate.ge.com/AAAA/IN' denied
> Oct 24 11:35:16 gesprddns02 named[18750]: client 3.160.232.73#49944:
> query (cache) 'ec-dev-sm-u2.indsys.ge.com/A/IN' denied
> Oct 24 11:35:16 gesprddns02 named[18750]: client 3.100.32.76#36594:
> query (cache) 'gesstgapp02/AAAA/IN' denied
> Oct 24 11:35:16 gesprddns02 named[18750]: client 3.160.232.73#49946:
> query (cache) 'ec-dev-sm-u1.indsys.ge.com/A/IN' denied
> Oct 24 11:35:16 gesprddns02 named[18750]: client 3.100.32.76#36597:
> query (cache) 'gesstgapp02.amer.consind.ge.com/A/IN' denied
> Oct 24 11:35:16 gesprddns02 named[18750]: client 3.160.232.73#49948:
> query (cache) 'ec-dev-sm-u2.indsys.ge.com/A/IN' denied
> Oct 24 11:35:16 gesprddns02 named[18750]: client 3.160.232.73#49950:
> query (cache) 'ec-dev-sm-u1.indsys.ge.com/A/IN' denied
> Oct 24 11:35:17 gesprddns02 named[18750]: client 3.160.232.73#49952:
> query (cache) 'ec-dev-sm-u2.indsys.ge.com/A/IN' denied
> Oct 24 11:35:17 gesprddns02 named[18750]: client 3.160.232.73#49954:
> query (cache) 'ec-dev-sm-u1.indsys.ge.com/A/IN' denied
> Oct 24 11:35:20 gesprddns02 named[18750]: client 3.100.32.76#36602:
> query (cache) 'gesstgapp02.amer.consind.ge.com/AAAA/IN' denied
> Oct 24 11:35:21 gesprddns02 named[18750]: client 3.100.32.76#36605:
> query (cache) 'gesstgapp02.supply.ge.com/AAAA/IN' denied
> Oct 24 11:35:21 gesprddns02 named[18750]: client 3.100.32.76#36608:
> query (cache) 'gesstgapp02.corporate.ge.com/AAAA/IN' denied
> Oct 24 11:35:21 gesprddns02 named[18750]: client 3.100.32.76#36612:
> query (cache) 'gesstgapp02/AAAA/IN' denied
> Oct 24 11:35:21 gesprddns02 named[18750]: client 3.100.32.76#36615:
> query (cache) 'gesstgapp02.amer.consind.ge.com/A/IN' denied

	Set allow-query-cache.
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark_Andrews at isc.org