Catalog zone failure

Gregory Shapiro bind-users at g.gshapiro.net
Sun Apr 30 06:02:45 UTC 2023


I've created a catalog zone, have it successfully secondarying on the secondary server but using it as a catalog zone fails with:

Apr 30 05:33:48 keef named[7473]: catz: zone 'gshapiro.net' uses an invalid primary (no IP address assigned)
Apr 30 05:33:48 keef named[7473]: catz: error "failure" while trying to generate config for zone 'gshapiro.net'

I can't figure out why since I both define a set of default primaries in the secondary named.conf as well as have them listed within the catalog zone itself.

Relevant named.conf sections on the secondary:

options
{
	catalog-zones
	{
		zone "catalog-gshapiro-net"
			default-primaries
			{
				51.159.90.0;
				2001:bc8:2e97:100::100;
			}
			zone-directory "/usr/local/etc/namedb/secondary";
	};
	dnssec-validation	auto;
	masterfile-format	text;
};

zone "catalog-gshapiro-net"
{
	type secondary;
	allow-query
	{
		localhost;
	};
	primaries
	{
		51.159.90.0;
		2001:bc8:2e97:100::100;
	};
	file "/usr/local/etc/namedb/secondary/catalog-gshapiro-net";
};

And the catalog-gshapiro-net zone file (from the primary):

$TTL 1H
@		IN	SOA	ns.gshapiro.net.	hostmaster.gshapiro.net.	(
				2023042904	; Serial Number
				1H		; Refresh
				15M		; Retry
				1W		; Expire
				15M	)	; Minimum TTL

		IN	NS	invalid.

;; Configuration
version			IN	TXT	"2"
primaries.ext		IN	A	51.159.90.0
primaries.ext		IN	AAAA	2001:bc8:2e97:100::100
tsig.primaries.ext	IN	TXT	"ns-gshapiro-net-xfer"
allow-query.ext		IN	APL	1:0.0.0.0/0

;; Zones  (% printf '\7example\3org\0' | openssl sha1)
8477e81e5c5997a573ae2f33b5863c403c5d45fc.zones	IN	PTR	gshapiro.net.



More information about the bind-users mailing list