[SOLVED] CentOS 5.5 Bind named.conf

gymiv@aol.com · 03-03-2011, 02:28 PM

I just installed CentOS 5.5 and the bind package that came with it, 9.3.6. There is no /etc/named.conf. I know i can create one but i am concerned that it did not install properly. If there is supposed to be a named.conf file there why does it not exist? Also this is the first time I have configured bind any how to help would be greatly appreciated.

szboardstretcher · 03-03-2011, 02:58 PM

You are correct. The Centos package is not installing a /etc/named.conf

Why? i dont know. It is listed in the rpm -ql command -- but it is not being installed in that location.

gymiv@aol.com · 03-03-2011, 08:50 PM

So what do i do from here to fix the issue?

williebens · 03-03-2011, 08:59 PM

Check this: unixmultiverse.com and click on the DNS tab.

--Willie

chrism01 · 03-04-2011, 01:30 AM

That is same as RHEL 5 http://www.linuxtopia.org/online_boo...5_ch-bind.html. For security you'll prob find it intalled chrooted; see first page at Chap 16.

Quote:

if you have installed the bind-chroot package, the BIND service will run in the /var/named/chroot environment. All configuration files will be moved there. As such, named.conf will be located in /var/named/chroot/etc/named.conf, and so on.

mikey99 · 03-04-2011, 09:27 AM

Quote:

Originally Posted by gymiv@aol.com

I just installed CentOS 5.5 and the bind package that came with it, 9.3.6. There is no /etc/named.conf. I know i can create one but i am concerned that it did not install properly. If there is supposed to be a named.conf file there why does it not exist? Also this is the first time I have configured bind any how to help would be greatly appreciated.

As far as I remember, by default, you do not get a named.conf

If you want a starting point, install the caching-nameserver package. This will give you a named-caching-nameserver.conf which you can rename. If you have also installed bind-chroot, it will be in /var/named/chroot/etc/ rather than /etc/

gymiv@aol.com · 03-07-2011, 10:41 AM

the only files i have in that directory are localtime and rndc.key. I guess my biggest concern is whether or not this installed right and if it did then why are all the howto's on the net telling me to look for files that don't exist. I can't follow a how to if i can't find the files it is telling me to find. As far as what i installed it was just the default that came with CentOS 5.5, i do not know if it is chroot or not. Please advise.

szboardstretcher · 03-07-2011, 10:47 AM

If you are planning on using Centos for a DNS server, I would personally advise against it.

Use OpenBSD -- it comes with BIND chrooted, with an example config in place.

IMHO - it has the best documentation of any OS, especially concerning BIND. I think this will do you well.

Also, I think most will agree that it is either the most secure, or nearly the most secure OS out there.

gymiv@aol.com · 03-07-2011, 11:12 AM

is there some reason not to use centos? I have this on my web servers and was trying to keep to one os. also i am more conserned with trying to get this to work on any os. This is just a test PC at time. As i am concerned with security in the long run if i cannot get this to work on one os why would it work on another.

szboardstretcher · 03-07-2011, 11:27 AM

Quote:

Originally Posted by gymiv@aol.com

is there some reason not to use centos? I have this on my web servers and was trying to keep to one os. also i am more conserned with trying to get this to work on any os. This is just a test PC at time. As i am concerned with security in the long run if i cannot get this to work on one os why would it work on another.

Centos/Redhat are both wonderful operating systems and work well for many things. I -personally- do not trust either of them to be running in a place that will eventually get attacked such as a DNS server. I've been around the country as a contractor and talked to many, many other security contractors, and I would say more than half of them will tell you not to use Centos/Redhat for world facing services. But, don't trust a strangers percentages, research for yourself.

There are great OS's for each world facing service. OpenBSD is *my* favorite for DNS. Slackware for Apache/PHP and such. Solaris for anything requiring Java.

gymiv@aol.com · 03-07-2011, 11:48 AM

Got it and will more than likely go that direction. What I am curious about is since we have an issue with this why is it not working right? Just trying to figure out an issue that should work fine. Curios about whether it is or is not installing right, just to know why and if i did something wrong. Or if it is installing correctly than where is the file. Just want to know because i do not know why.

szboardstretcher · 03-07-2011, 11:51 AM

Looks like you will have to make a named.conf from scratch. I don't see
one being installed, and it looks like that is "on purpose."

http://wiki.centos.org/FAQ/CentOS5

see section:

5. Bind is broken in CentOS 5

That should help out.

gymiv@aol.com · 03-07-2011, 12:42 PM

can you tell me how to download openbsd the sites i have looked at either do not have an .iso or say that it is shareware and i have to purchas the full version.

chrism01 · 03-08-2011, 12:00 AM

Quote:

5. Bind is broken in CentOS 5

No, it's not. Yes, it looks like it, as bind-9.3.3 in CentOS doesn't install the config files anymore, at least not, where you would expect them. That was a deliberate choice by our upstream vendor. See this bugzilla entry.

Basically you can just copy the example files from /usr/share/doc/bind-9.x.x/sample/etc/ and /usr/share/doc/bind-9.x.x/sample/var/ to start your own configuration from.

Or you can use system-config-bind to set things up.

Documentation on bind can be found in the Deployment Guide, see Chapter 16.

http://www.centos.org/docs/5/html/De...S/ch-bind.html or http://www.linuxtopia.org/online_boo...ion/index.html

mikey99 · 03-08-2011, 08:53 AM

Quote:

Originally Posted by szboardstretcher

Looks like you will have to make a named.conf from scratch. I don't see
one being installed, and it looks like that is "on purpose."

http://wiki.centos.org/FAQ/CentOS5

see section:

5. Bind is broken in CentOS 5

That should help out.

As I said in a previous post, if you want a starting point, install the caching-nameserver package. This will give you a named.caching-nameserver.conf which you can rename. If you have also installed bind-chroot, it will be in /var/named/chroot/etc/ rather than /etc/