DNS zone records transfer van ns1 naar ns2 bug

[anouk]

Op mijn BIND9, centos machine lukt het me niet om de zone records van ns1 naar ns2 te verplaatsen dmv. master -> slave


Op ns1 staat in named.conf:
zone "domain.com" {
type master;
file "/var/named/domain.com.hosts";
allow-transfer { 2.123.123.2; };
};

en op ns2 staat:
zone "domain.com" {
type slave;
file "/var/named/domain.com.hosts";
masters { 1.123.123.1; };
};

er draait geen selinux of iptables
na een "service named restart" op beide servers krijg ik geen fout melding
en herstart feilloos.

graag jullie suggestie's

[Mikey]

zet eens in de options bij de master: also-notify{ipvanslave;}

[anouk]

dit is zoals mijn named.conf op ns1 eruit ziet

options {
directory "/etc";
pid-file "/var/run/named/named.pid";
recursion no; // Do not provide recursive service
also-notify{2.123.123.2;}
};

zone "." IN {
type hint;
file "/var/named/named.ca";
};

zone "localdomain" IN {
type master;
file "/var/named/localdomain.zone";
};

zone "localhost" IN {
type master;
file "/var/named/localhost.zone";
};

zone "0.0.127.in-addr.arpa" IN {
type master;
file "/var/named/named.local";
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0. 0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "/var/named/named.ip6.local";
};

zone "255.in-addr.arpa" IN {
type master;
file "/var/named/named.broadcast";
};

zone "0.in-addr.arpa" IN {
type master;
file "/var/named/named.zero";
};
///////////////////////////////////////
zone "domain.com" {
type master;
file "/var/named/domain.com.hosts";
allow-transfer { 2.123.123.2; };
};

maar tot nu toe nog geen master -> slave transfer

[Mikey]

en wat zegt je log, de notify en alles zal zichtbaar moeten zijn.

[anouk]

in ns1 log staat:

Apr 9 12:39:48 ns1 named[26425]: /var/named/domain.com.hosts:1: no TTL specified; using SOA MINTTL instead
Apr 9 12:39:48 ns1 named[26425]: /var/named/domain.com.hosts:16: ignoring out-of-zone data (ns1.server.net)

Apr 9 12:39:49 ns1 named[26425]: client 1.123.123.1#61627: received notify for zone 'ns2.server.net'
Apr 9 12:39:52 ns1 named[26425]: client 2.123.123.2#50558: transfer of 'domain.com/IN': AXFR-style IXFR started
Apr 9 12:39:52 ns1 named[26425]: client 2.123.123.2#50558: transfer of 'domain.com/IN': AXFR-style IXFR ended


in ns2 log staat:

Apr 9 14:42:44 ns2 named[10855]: zone domain.com/IN: Transfer started.
Apr 9 14:42:44 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: connected using 2.123.123.2#50558
Apr 9 14:42:44 ns2 named[10855]: dumping master file: /var/named/tmp-vH4T52gpWj: open: permission denied
Apr 9 14:42:44 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: failed while receiving responses: permission denied
Apr 9 14:42:44 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: end of transfer


permissions staat op -rw-r----- 1 root named

[Mikey]

en de zone zelf ? named:named ?

[anouk]

ik heb zo juist een chown named:named op beide servers gegaan

en alle zones staan nu:
-rw-r----- 1 named named domain.com

nog eens een service named restart

maar de log blijft volhouden:
Apr 9 14:56:26 ns2 named[10855]: zone domain.com/IN: Transfer started.
Apr 9 14:56:26 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: connected using 2.123.123.2#52169
Apr 9 14:56:26 ns2 named[10855]: dumping master file: /var/named/tmp-Hb3T1hnkVN: open: permission denied
Apr 9 14:56:26 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: failed while receiving responses: permission denied
Apr 9 14:56:26 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: end of transfer

[Mikey]

mail even naar m.hoffs@mijn-sleutel.com, wil best even voor je kijken.

[anouk]

ik ziet het al... de directory named stond op root : named

na een chown named:named loopt ie goed :)

Thanks mike!