How to add new solaris client IP into Solaris 10 DNS server

yashraj221087 · 11-16-2018, 05:19 PM

Hi,

We just built a new Solaris 10 zone. And would like to add it to our DNS server. Its also Solaris 10. Please let me know how can I get the IP resolved using this DNS server. I added entry into zone config file but not working. I did restarted the DNS services. And also added nameserver name into resolv.conf

Quote:
bash-3.2# nslookup test-dev2-web-01 192.168.x.y
Server: 192.168.x.y
Address: 192.168.x.y#53

** server can't find test-dev2-web-01: REFUSED

Quote:
bash-3.2# cat /etc/resolv.conf
domain xysystem.com
nameserver 192.168.x.y
search xysystem.com

Please let me know what I am missing.

scasey · 11-17-2018, 10:48 AM

Please use [code] tags for commands and output.
Not sure why you're obfuscating private IP addresses...it's a bit confusing.

You're asking why the change to your name server isn't working, but you're not showing us what you did to make that change. Makes it difficult to help you.

yashraj221087 · 11-17-2018, 11:10 PM

Okay. Here are the details.

Quote:

bash-3.00# nslookup test-dev2-web-01 192.168.30.225
Server: 192.168.30.225
Address: 192.168.30.225#53

** server can't find test-dev2-web-01: REFUSED

And
The changes I did was, added A record into zone files under /var/named on DNS name server (192.168.30.225).

Quote:

bash-3.00# cat db.testsystem.com | grep 192.168.10.239
test-dev2-web-01 IN A 192.168.10.239 ;DEV 2.0 Web-01

Restarted DNS server service.

Quote:

bash-3.00# svcadm refresh svc:/network/dns/server:default

Also my "allow" entry from named.conf file is as below:

Quote:

bash-3.00# grep allow /etc/named.conf
allow-query { any; };
// allow-recursion { corpnets; };
// #allow-query { 8.15.22.0/24; 192.168.173.0/24; };
allow-transfer {
allow-query-cache { none; };

My resolv.conf on client is :

Quote:

bash-3.00# cat /etc/resolv.conf
domain testsystem.com
nameserver 192.168.30.225
search testsystem.com

Please let me know if I need to do anything else here.

scasey · 11-17-2018, 11:15 PM

Sorry, really need the answer to my question:
What did you change in the DNS?

yashraj221087 · 11-18-2018, 09:02 PM

When you say "change in DNS", you mean DNS server right?

I did changed zones db files in under /var/named. I added client IP address and name i.e. A record and PTR record in zone files. Then restarted the dns server service.

Let me know if this clarifies your question.

scasey · 11-18-2018, 10:38 PM

IDK. Doesn't the allow-query belong in the named.conf? Can you query anything in that name server?

yashraj221087 · 11-18-2018, 11:21 PM

Quote:

bash-3.00# grep allow /etc/named.conf
allow-query { any; };
// allow-recursion { corpnets; };
// #allow-query { 8.15.22.0/24; 192.168.173.0/24; };
allow-transfer {
allow-query-cache { none; };

Yes, the other clients are able to resolve.

Quote:

bash-3.00# nslookup stage-dev1-web-01 192.168.30.225
Server: 192.168.30.225
Address: 192.168.30.225#53

Name: stage-dev1-web-01.testsystem.com
Address: 192.168.10.169

scasey · 11-19-2018, 09:01 AM

Your OP: nslookup test-dev2-web-01 192.168.30.225

#7: nslookup stage-dev1-web-01 192.168.30.225

...not looking to resolve the same name ??

Can other clients resolve test-dev2-web-01 ?
If so, the problem is in the first client you were on.
If not, the problem is in the named.conf on the DNS server.

yashraj221087 · 11-19-2018, 09:05 AM

What you mean?

Those are 2 different clients.

I am able to query the existing client.

Quote:

Code:

bash-3.00# nslookup stage-dev1-web-01 192.168.30.225
Server: 192.168.30.225
Address: 192.168.30.225#53

Name: stage-dev1-web-01.testsystem.com
Address: 192.168.10.169

But I am NOT able to query the new client which is added to dns server.

Quote:

bash-3.00# nslookup test-dev2-web-01 192.168.30.225
Server: 192.168.30.225
Address: 192.168.30.225#53

** server can't find test-dev2-web-01: REFUSED

Hope you get what I am trying to explain here..

scasey · 11-19-2018, 09:12 AM

I'm asking if you can query the new client from any other client. If not, there's a problem in your configuration on the DNS server.
Compare what you've added there in both named.conf and the new zone file you should have created to the entries and zone file of a server that does resolve.

You've not shared what changes/additions you made to the DNS server...makes it difficult to help...but a careful review of those changes should show you the problem.

yashraj221087 · 11-19-2018, 09:20 AM

I don;t know if you are looking at my replies. I already shared what I have done on dns server.

Below are my from previous replies: This is from DNS server..

Quote:

bash-3.00# cat db.testsystem.com | grep 192.168.10.239
test-dev2-web-01 IN A 192.168.10.239 ;DEV 2.0 Web-01

I did changed zones db files in under /var/named. I added client IP address and name i.e. A record and PTR record in zone files. Then restarted the dns server service.

scasey · 11-19-2018, 08:06 PM

Quote:

Originally Posted by yashraj221087

I don;t know if you are looking at my replies. I already shared what I have done on dns server.
I did changed zones db files in under /var/named. I added client IP address and name i.e. A record and PTR record in zone files. Then restarted the dns server service.

I'm reading your replies.

Code:

cat db.testsystem.com | grep 192.168.10.239
test-dev2-web-01 IN A 192.168.10.239 ;DEV 2.0 Web-01

Shows that there is one line in a file that seems to define an A record for 239...
Have you referenced that file correctly in your named.conf? We don't know.
Have you updated the Serial Number correctly?
Do the entries in named.conf and a working db file match the new entries?
What did you change in /var/named ?
What does the related entry in named.conf look like?
What does the entire db.testsystem.com file look like?

yashraj221087 · 11-20-2018, 03:46 PM

can you let me know how can I restart the named daemon or named process in DNS name server?

scasey · 11-20-2018, 04:02 PM

Have you tried this?
I presumed that if you were adding records to your DNS server you are the admin, and would know that you needed to restart named...and had already done so.
I’m not sure enough about how to do that on Solaris to advise you. Another option is to contact Oracle Support.