LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   Linux - Newbie (https://www.linuxquestions.org/questions/linux-newbie-8/)
-   -   Bind slave serer setup help (https://www.linuxquestions.org/questions/linux-newbie-8/bind-slave-serer-setup-help-4175476620/)

DarkLogix 09-10-2013 12:13 PM

Bind slave serer setup help
 
Ok I've setup a bind dns server as a secondary DNS server (to replicate the AD DNS from my DC)

the forward zone is working but the reverse zones aren't
This is on centOS 6.4, with VMware tools installed and "yum -y update" run (so should be fully up to date)

hopefully someone can tell me whats wrong.
here is my named.conf file

-----------------------------------------
logging {
channel default_debug {
file "data/named.run";
severity dynamic;
};
};

zone "." IN {
type hint;
file "named.ca";
};

zone "domain-logix.local" IN {
type slave;
masters { 10.0.2.6; 2001:470:b801::2; };
file "domain-logix.local.zone";
};
zone "254.254.10.in-addr.arpa" IN {
type slave;
file "254.254.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "4.0.10.in-addr.arpa" IN {
type slave;
file "4.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "3.0.10.in-addr.arpa" IN {
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "4.0.10.in-addr.arpa" IN {
type slave;
file "4.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "3.0.10.in-addr.arpa" IN {
type slave;
file "3.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "2.0.10.in-addr.arpa" IN {
type slave;
file "2.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "1.0.10.in-addr.arpa" IN {
type slave;
file "1.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "0.0.10.in-addr.arpa" IN {
type slave;
file "0.0.10.in-addr.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "0.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "0.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "0.0.2.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "0.0.2.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "1.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "1.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "1.0.2.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "1.0.2.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

zone "2.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa" IN {
type slave;
file "2.0.0.0.1.0.8.b.0.7.4.0.1.0.0.2.ip6.arpa";
masters { 10.0.2.6; 2001:470:b801::2; };
};

include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

DarkLogix 09-10-2013 12:15 PM

Arrg looks like I didn't get a full copy of it when I copied from putty

so another question whats an easy way to copy the named.conf file to a windows box?

DarkLogix 09-11-2013 03:10 PM

Any help would be nice

jpollard 09-11-2013 06:09 PM

Active directory doesn't use the same format... and has a couple of extra entries required for AD to work. All the files can be used for is reference.

DarkLogix 09-12-2013 12:10 PM

I'm not using the windows dns files directly
and the forward DNS is working its the reverse that isn't

I exported the list and just used it for the names of the zones, can you tell me how the reverse zones should be named?

jpollard 09-12-2013 12:22 PM

You already have the names.

Bind uses the reversed IP number you already have (for example:zone "1.0.10.in-addr.arpa"). Now the FILE names can be anything you want - that is why bind has the "file" reference. It is only a convention that is mirror the zone name.

DarkLogix 09-12-2013 01:21 PM

ok so why isn't it working?

jpollard 09-12-2013 02:37 PM

I have no idea why Windows does what it does.

DNS should work when you use the Linux server for name resolution.

Now, it might NOT work for other servers UNLESS the linux server is authoritative for the names and IP numbers. Both need to be delegated. I ran a small home server that could only provide forward references as that server was authoritative for the domain name. But it was not authoritative for the IP numbers, thus reverse lookups did not work.

When I ran domain and subdomain servers, the main domain server had to delegate the IP numbers to the subdomain, and until I did that, the subdomain could not provide reverse lookup services for those hosts not using the subdomain server specifically (which was a real pain for Kerberos, which validates IP numbers by reverse lookup - and if the result doesn't match the forward lookup it tended to count them as invalid, and would request the wrong service tickets).

DarkLogix 09-12-2013 02:49 PM

I added the bind server in the Name servers list on the windows box and enabled transfer, also for every zone I set it to notify all servers in the name servers tab.

jpollard 09-12-2013 03:33 PM

Did the slave server get the updates?

BTW, I noticed that you didn't specify "type slave" for the 3.0.10 zone, and there is no file specification either.

Code:

zone "3.0.10.in-addr.arpa" IN {
masters { 10.0.2.6; 2001:470:b801::2; };
};


DarkLogix 09-12-2013 03:34 PM

Ah I must have missed that
BTW just checking so does that part of the config look right?

also any chance you could tell me how to copy the named.conf file off the linux server so I can edit in notepad? and paste the full config here?

DarkLogix 09-12-2013 03:52 PM

Oh I just looked some more and it looks like I've got the 10.0.3 zone twice.
I'm ether not good at coping from putty/vim or messed up when I was editing before I pasted into putty/vim

jpollard 09-12-2013 04:43 PM

scp/putty should be able to copy the files... but since the Linus server is supposed to be the slave the data files are a don't care. It should get them from the master server.

DarkLogix 09-12-2013 04:57 PM

Its my understanding it needs to be told what zones its going to be a secondary DNS server for

jpollard 09-12-2013 08:59 PM

You already have that - the existing configuration is for a secondary. I was assuming some AD controller was the master.


All times are GMT -5. The time now is 10:19 PM.