Onderwerp: DNS zone records transfer van ns1 naar ns2 bug

Op mijn BIND9, centos machine lukt het me niet om de zone records van ns1 naar ns2 te verplaatsen dmv. master -> slave


Op ns1 staat in named.conf:
zone "domain.com" {
type master;
file "/var/named/domain.com.hosts";
allow-transfer { 2.123.123.2; };
};

en op ns2 staat:
zone "domain.com" {
type slave;
file "/var/named/domain.com.hosts";
masters { 1.123.123.1; };
};

er draait geen selinux of iptables
na een "service named restart" op beide servers krijg ik geen fout melding
en herstart feilloos.

graag jullie suggestie's

zet eens in de options bij de master: also-notify{ipvanslave;}

dit is zoals mijn named.conf op ns1 eruit ziet

options {
directory "/etc";
pid-file "/var/run/named/named.pid";
recursion no; // Do not provide recursive service
also-notify{2.123.123.2;}
};

zone "." IN {
type hint;
file "/var/named/named.ca";
};

zone "localdomain" IN {
type master;
file "/var/named/localdomain.zone";
};

zone "localhost" IN {
type master;
file "/var/named/localhost.zone";
};

zone "0.0.127.in-addr.arpa" IN {
type master;
file "/var/named/named.local";
};

zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0 .0.0.0.0.0.0.ip6.arpa" IN {
type master;
file "/var/named/named.ip6.local";
};

zone "255.in-addr.arpa" IN {
type master;
file "/var/named/named.broadcast";
};

zone "0.in-addr.arpa" IN {
type master;
file "/var/named/named.zero";
};
///////////////////////////////////////
zone "domain.com" {
type master;
file "/var/named/domain.com.hosts";
allow-transfer { 2.123.123.2; };
};

maar tot nu toe nog geen master -> slave transfer

en wat zegt je log, de notify en alles zal zichtbaar moeten zijn.

in ns1 log staat:

Apr 9 12:39:48 ns1 named[26425]: /var/named/domain.com.hosts:1: no TTL specified; using SOA MINTTL instead
Apr 9 12:39:48 ns1 named[26425]: /var/named/domain.com.hosts:16: ignoring out-of-zone data (ns1.server.net)

Apr 9 12:39:49 ns1 named[26425]: client 1.123.123.1#61627: received notify for zone 'ns2.server.net'
Apr 9 12:39:52 ns1 named[26425]: client 2.123.123.2#50558: transfer of 'domain.com/IN': AXFR-style IXFR started
Apr 9 12:39:52 ns1 named[26425]: client 2.123.123.2#50558: transfer of 'domain.com/IN': AXFR-style IXFR ended


in ns2 log staat:

Apr 9 14:42:44 ns2 named[10855]: zone domain.com/IN: Transfer started.
Apr 9 14:42:44 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: connected using 2.123.123.2#50558
Apr 9 14:42:44 ns2 named[10855]: dumping master file: /var/named/tmp-vH4T52gpWj: open: permission denied
Apr 9 14:42:44 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: failed while receiving responses: permission denied
Apr 9 14:42:44 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: end of transfer


permissions staat op -rw-r----- 1 root named

en de zone zelf ? named:named ?

ik heb zo juist een chown named:named op beide servers gegaan

en alle zones staan nu:
-rw-r----- 1 named named domain.com

nog eens een service named restart

maar de log blijft volhouden:
Apr 9 14:56:26 ns2 named[10855]: zone domain.com/IN: Transfer started.
Apr 9 14:56:26 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: connected using 2.123.123.2#52169
Apr 9 14:56:26 ns2 named[10855]: dumping master file: /var/named/tmp-Hb3T1hnkVN: open: permission denied
Apr 9 14:56:26 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: failed while receiving responses: permission denied
Apr 9 14:56:26 ns2 named[10855]: transfer of 'domain.com/IN' from 1.123.123.1#53: end of transfer

mail even naar m.hoffs@mijn-sleutel.com, wil best even voor je kijken.

ik ziet het al... de directory named stond op root : named

na een chown named:named loopt ie goed

Thanks mike!