Problems getting bind working on F11

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



I gave up porting a chroot bind setup from previous Fedora installations
to the preferred chroot-less configuration in Fedora 11 and decided just
to start from scratch.  Unfortunately, I haven't been able to get that
working, either.

named seems to start okay:

        [root@front etc]# service named restart
        Stopping named: [OK]
        Starting named: [OK]

... and I see this in /var/log/messages:

        Aug  8 19:59:53 front named[2106]: starting BIND 9.6.1-P1-RedHat-9.6.1-4.P1.fc11 -u named
        Aug  8 19:59:53 front named[2106]: built with '--build=i386-redhat-linux-gnu' '--host=i386-redhat-linux-gnu' '--target=i586-redhat-linux-gnu' '--program-prefix=' '--prefix=/usr' '--exec-prefix=/usr' '--bindir=/usr/bin' '--sbindir=/usr/sbin' '--sysconfdir=/etc' '--datadir=/usr/share' '--includedir=/usr/include' '--libdir=/usr/lib' '--libexecdir=/usr/libexec' '--sharedstatedir=/var/lib' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--with-libtool' '--localstatedir=/var' '--enable-threads' '--enable-ipv6' '--with-pic' '--disable-static' '--disable-openssl-version-check' '--with-dlz-ldap=yes' '--with-dlz-postgres=yes' '--with-dlz-mysql=yes' '--with-dlz-filesystem=yes' '--with-gssapi=yes' '--disable-isc-spnego' 'build_alias=i386-redhat-linux-gnu' 'host_alias=i386-redhat-linux-gnu' 'target_alias=i586-redhat-linux-gnu' 'CFLAGS= -O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector --param=ssp-buffer-size=4 -m32 -march=i586 -mtune=generic -fasynch
 ronous-unwind-tables' 'CPPFLAGS= -DDIG_SIGCHASE'
        Aug  8 19:59:53 front named[2106]: adjusted limit on open files from 1024 to 1048576
        Aug  8 19:59:53 front named[2106]: found 1 CPU, using 1 worker thread
        Aug  8 19:59:53 front named[2106]: using up to 4096 sockets
        Aug  8 19:59:53 front named[2106]: loading configuration from '/etc/named.conf'
        Aug  8 19:59:53 front named[2106]: using default UDP/IPv4 port range: [1024, 65535]
        Aug  8 19:59:53 front named[2106]: using default UDP/IPv6 port range: [1024, 65535]
        Aug  8 19:59:53 front named[2106]: listening on IPv4 interface lo, 127.0.0.1#53
        Aug  8 19:59:53 front named[2106]: listening on IPv6 interface lo, ::1#53
        Aug  8 19:59:53 front named[2106]: automatic empty zone: 127.IN-ADDR.ARPA
        Aug  8 19:59:53 front named[2106]: automatic empty zone: 254.169.IN-ADDR.ARPA
        Aug  8 19:59:53 front named[2106]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
        Aug  8 19:59:53 front named[2106]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
        Aug  8 19:59:53 front named[2106]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
        Aug  8 19:59:53 front named[2106]: automatic empty zone: D.F.IP6.ARPA
        Aug  8 19:59:53 front named[2106]: automatic empty zone: 8.E.F.IP6.ARPA
        Aug  8 19:59:53 front named[2106]: automatic empty zone: 9.E.F.IP6.ARPA
        Aug  8 19:59:53 front named[2106]: automatic empty zone: A.E.F.IP6.ARPA
        Aug  8 19:59:53 front named[2106]: automatic empty zone: B.E.F.IP6.ARPA
        Aug  8 19:59:53 front named[2106]: command channel listening on 127.0.0.1#953
        Aug  8 19:59:53 front named[2106]: command channel listening on ::1#953
        Aug  8 19:59:53 front named[2106]: the working directory is not writable
        Aug  8 19:59:53 front named[2106]: zone 0.in-addr.arpa/IN: NS '0.in-addr.arpa' has no address records (A or AAAA)
        Aug  8 19:59:53 front named[2106]: zone 0.in-addr.arpa/IN: loaded serial 0
        Aug  8 19:59:53 front named[2106]: zone 1.0.0.127.in-addr.arpa/IN: NS '1.0.0.127.in-addr.arpa' has no address records (A or AAAA)
        Aug  8 19:59:53 front named[2106]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
        Aug  8 19:59:53 front named[2106]: zone 1.168.192.IN-ADDR.ARPA/IN: loaded serial 3
        Aug  8 19:59:53 front named[2106]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: NS '1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa' has no address records (A or AAAA)
        Aug  8 19:59:53 front named[2106]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/IN: loaded serial 0
        Aug  8 19:59:53 front named[2106]: zone localhost.localdomain/IN: loaded serial 0
        Aug  8 19:59:53 front named[2106]: zone localhost/IN: loaded serial 0
        Aug  8 19:59:53 front named[2106]: zone endoframe.net/IN: loaded serial 3
        Aug  8 19:59:53 front named[2106]: running

But it doesn't seem to be working:

        [root@front etc]# ssh front
        ssh: Could not resolve hostname front: Name or service not known
        [root@front etc]# hostname
        front.endoframe.net
        [root@front etc]# 

Is "the working directory is not writable" (from /var/log/messages
output, above) cause for concern?  What directory is it referring to?

I deal with this stuff infrequently enough that I've quite likely
overlooked something silly.  I created entries for my machines using
system-config-bind; what follows are (what I hope are the) relevant
resulting configuration files.  Hopefully some glaring error or omission
will jump out at someone:

        # cat /etc/named.conf:
        //
        // named.conf
        //
        // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
        // server as a caching only nameserver (as a localhost DNS resolver only).
        //
        // See /usr/share/doc/bind*/sample/ for example named configuration files.
        //
        
        
        options {
        	listen-on port 53 { 127.0.0.1; };
        	listen-on-v6 port 53 { ::1; };
        	directory 	"/var/named";
        	dump-file 	"/var/named/data/cache_dump.db";
                statistics-file "/var/named/data/named_stats.txt";
                memstatistics-file "/var/named/data/named_mem_stats.txt";
        	allow-query     { localhost; };
        	recursion yes;
        	dnssec-enable yes;
        	dnssec-validation yes;
        	dnssec-lookaside . trust-anchor dlv.isc.org.;
        };
        
        logging {
                channel default_debug {
                        file "data/named.run";
                        severity dynamic;
                };
        };
        
        zone "1.168.192.IN-ADDR.ARPA." IN {
        	type master;
        	file "192.168.1.db";
        };
        zone "endoframe.net." IN {
        	type master;
        	file "endoframe.net.db";
        };
        zone "." IN {
        	type hint;
        	file "named.ca";
        };
        
        include "/etc/named.rfc1912.zones";
        
        include "/etc/pki/dnssec-keys//named.dnssec.keys";
        include "/etc/pki/dnssec-keys//dlv/dlv.isc.org.conf";


        # cat /var/named/endoframe.net.db
        $TTL 1H	
        @	SOA	localhost.	root.localhost. (	3
        						3H
        						1H
        						1W
        						1H )
        		NS	localhost.	
        front	IN	1H	A	192.168.1.20	
        hinge	IN	1H	A	192.168.1.21	
        door	IN	1H	A	192.168.1.1	
        glyph	IN	1H	A	192.168.1.10	
        chime	IN	1H	A	192.168.1.22	
        stile	IN	1H	A	192.168.1.24	
        bolt	IN	1H	A	192.168.1.25	


        # cat /var/named/192.168.1.db
        $TTL 1H	
        @	SOA	localhost.	root.localhost. (	3
        						3H
        						1H
        						1W
        						1H )
        		NS	localhost.	
        20	PTR	front.endoframe.net.	
        21	PTR	hinge.endoframe.net.	
        1	PTR	door.endoframe.net.	
        10	PTR	glyph.endoframe.net.	
        22	PTR	chime.endoframe.net.	
        24	PTR	stile.endoframe.net.	
        25	PTR	bolt.endoframe.net.	


-- 
Braden McDaniel <braden@xxxxxxxxxxxxx>


-- 
fedora-list mailing list
fedora-list@xxxxxxxxxx
To unsubscribe: https://www.redhat.com/mailman/listinfo/fedora-list
Guidelines: http://fedoraproject.org/wiki/Communicate/MailingListGuidelines
[Index of Archives]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora Magazine]     [Fedora News]     [Fedora Summer Coding]     [Fedora Laptop]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [SSH]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Gnome Users]     [KDE Users]     [Fedora Art]     [Fedora Docs]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Libvirt Users]     [Fedora ARM]

  Powered by Linux