problem loading dynamic zone
rod at iastate.edu
rod at iastate.edu
Thu Jan 29 15:09:21 UTC 2015
Your zone statement should be
zone "dynamic.wadsworth.org" in {
without the trailing dot (you had "dynamic.wadsworth.org." as the zone).
--
Rod Eldridge
Network Infrastructure, Authentication, & Directory Services Team
Mac OS X Development Team
IT Services, Iowa State University of Science and Technology
> On Jan 29, 2015, at 8:45 AM, Cuttler, Brian (HEALTH) <brian.cuttler at health.ny.gov> wrote:
>
>
> Bind users list,
>
> I am having problems with dynamic DNS config. It 'looks' simple enough
> but I'm unable to load the dynamic zone.
>
> I have stripped down my config, checked the protections on the data
> directory and on the data files.
>
> I simply do not see where the error is.
>
> I have included info on the OS, bind version, displayed my config
> files, nnamed-checkconf and named-checkzone info, shown file protections.
>
> I will also include the logging output, almost forgot that.
>
> Please let me know what additional info is needed.
> Please let me know what I have overlooked, too many other people are
> successfully doing this for it to be a bug (right??).
>
> thank you,
> Brian Cuttler
> Wadsworth Center
> Albany, NY
>
> # uname -a
> Linux znix.wadsworth.org 3.10.0-123.6.3.el7.x86_64 #1 SMP Wed Aug 6
> 21:12:36 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
>
> Installed Packages
> Name : bind
> Arch : x86_64
> Epoch : 32
> Version : 9.9.4
> Release : 14.el7_0.1
> Size : 4.3 M
> Repo : installed
> From repo : updates
> Summary : The Berkeley Internet Name Domain (BIND) DNS (Domain
> Name System) server
>
> [root at znix dns-root]# cat /etc/named.conf
> OPTIONS {
> //
> //
> //boot file for authorative master name server for
> wadsworth.ph.albany.edu
> //note that ther should be one primary entry for each soa
> record.
> //
> //type domain source file or host
> //
> //
> directory "/etc/dns-root/";
> query-source address * port 53;
> dnssec-validation no;
> auth-nxdomain yes; # conform to RFC1035
> empty-zones-enable no;
> //secondary 5.204.128.in-addr.arpa 172.16.1.6 db.128.204.5
> allow-transfer { 199.184.28.129; 199.184.28.125;
> 199.184.28.128; 199.184.30.42; 199.184.28.130; 199.184.30.36;
> 150.142.80.208; 150.142.80.209; 10.49.66.7; 10.50.156.45; 172.16.1.50;
> };
> //secondary 6.204.128.in-addr.arpa 172.16.1.6 db.128.204.6
> allow-recursion {any;};
> };
>
>
> key "rndc-key" {
> algorithm hmac-md5;
> secret "hide key #1";
> };
>
> key dhcpupdate {
> algorithm hmac-md5;
> secret "hide key #2";
> };
>
> controls {
> inet 127.0.0.1 port 953
> allow { 127.0.0.1; } keys { "rndc-key"; };
> };
>
> ** removing channel logging config lines to save space ***
>
> zone "." in {
> type hint;
> file "db.cache";
> };
>
>
> zone "wadsworth.org" in {
> type master;
> file "db.wadsworth.org";
> };
>
> zone "dynamic.wadsworth.org." in {
> type master;
> file "db.dynamic";
> allow-update { key dhcpupdate; };
> };
>
> zone "0.0.127.in-addr.arpa" in {
> type master;
> file "db.127.0.0";
> };
>
>
> [root at znix dns-root]# cat db.wadsworth.org
> $TTL 86400
> @ IN SOA admin.wadsworth.org. qll.wadsworth.org. (
> ; 1.58 ; serial
> 1501231306 ; serial number
> 10800 ; refresh after 3 hours
> 3600 ; retry after 1 hour
> 604800 ; expire after 1000 hour
> 86400 ) ; minimum ttl of 1 day
>
>
> IN NS znix.wadsworth.org.
>
> ;
>
> ; Updating this file updates the SOA, important because all of the
> ; db.wadsworth.org.ip.number.files are included from this file and
> ; are dependent on the SOA serial number in this file.
> ; Just update a comment field if you have no changes to make here.
> ; I generally just change the number of ";" in the next line.
> ;;;;;;;;
>
> newton.wadsworth.org. IN A 172.16.1.6
> ;ldap1.wadsworth.org. IN A 199.184.30.42
> nnewton.wadsworth.org. IN A 199.184.30.36
> oxenopus.wadsworth.org. IN A 172.16.1.118
> bionsc.wadsworth.org. IN A 199.184.28.129
> localhost IN A 127.0.0.1
>
>
> [root at znix dns-root]# cat db.dynamic
> $TTL 86400
> @ IN SOA admin.wadsworth.org. qll.wadsworth.org. (
> ; 1.58 ; serial
> 1501231306 ; serial number
> 10800 ; refresh after 3 hours
> 3600 ; retry after 1 hour
> 604800 ; expire after 1000 hour
> 86400 ) ; minimum ttl of 1 day
>
>
> IN NS znix.wadsworth.org.
> znix IN A 199.184.30.15
> ;
>
> ; Updating this file updates the SOA, important because all of the
> ; db.wadsworth.org.ip.number.files are included from this file and
> ; are dependent on the SOA serial number in this file.
> ; Just update a comment field if you have no changes to make here.
> ; I generally just change the number of ";" in the next line.
> ;;;;;;;;
>
> localhost IN A 127.0.0.1
>
>
> [root at znix dns-root]# cat db.dynamic.jnl
> [root at znix dns-root]#
>
>
> [root at znix dns-root]# /usr/sbin/named-checkconf -j
> [root at znix dns-root]# /usr/sbin/named-checkconf -z
> zone wadsworth.org/IN: loaded serial 1501231306
> zone dynamic.wadsworth.org/IN: loaded serial 1501231306
> zone 0.0.127.in-addr.arpa/IN: loaded serial 1409291326
>
>
>
> [root at znix dns-root]# /usr/sbin/named-checkzone -j wadsworth.org
> db.dynamic
> zone wadsworth.org/IN: journal rollforward failed: no more
> zone wadsworth.org/IN: not loaded due to errors.
>
>
> [root at znix dns-root]# /usr/sbin/named-checkzone -j wadsworth.org
> db.wadsworth.org
> zone wadsworth.org/IN: loaded serial 1501231306
> OK
>
>
> root at znix dns-root]# /usr/sbin/named-checkzone -j wadsworth.org
> db.dynamic
> zone wadsworth.org/IN: journal rollforward failed: no more
> zone wadsworth.org/IN: not loaded due to errors.
>
> [root at znix dns-root]# ls -ld /etc/dns-root
> drwxrwxr-x. 2 named named 12288 Jan 28 10:39 /etc/dns-root
>
> drwxrwxr-x. 2 named named 12288 Jan 28 10:39 /etc/dns-root
> [root at znix dns-root]# ls -las db.wadsworth.org db.dynamic*
> 4 -rw-rw-r--. 1 named named 844 Jan 27 17:09 db.dynamic
> 0 -rw-rw-r--. 1 named named 0 Jan 27 14:08 db.dynamic.jnl
> 12 -rw-rw-r--. 1 named named 8605 Jan 28 10:37 db.wadsworth.org
>
>
> From my /var/log/named-logs/dns_general_log file
>
> 28-Jan-2015 10:44:17.199 general: info: managed-keys-zone: loaded
> serial 0
> 28-Jan-2015 10:44:17.200 general: info: zone 0.0.127.in-addr.arpa/IN:
> loaded serial 1409291326
> 28-Jan-2015 10:44:17.332 general: info: zone wadsworth.org/IN: loaded
> serial 1501231306
> 28-Jan-2015 10:44:17.332 general: error: zone
> dynamic.wadsworth.org/IN: journal rollforward failed: no more
> 28-Jan-2015 10:44:17.332 general: error: zone
> dynamic.wadsworth.org/IN: not loaded due to errors.
> 28-Jan-2015 10:44:17.333 general: notice: all zones loaded
> 28-Jan-2015 10:44:17.333 general: notice: running
>
>
> _______________________________________________
> Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list
>
> bind-users mailing list
> bind-users at lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
More information about the bind-users
mailing list