* [Comm] DNS ïðîáëåìà
@ 2003-10-20 21:47 Anatol B. Bazjukin
2003-10-24 7:03 ` [Comm] DNS Alexey Borovskoy
2003-10-24 10:48 ` Anatol B. Bazjukin
0 siblings, 2 replies; 3+ messages in thread
From: Anatol B. Bazjukin @ 2003-10-20 21:47 UTC (permalink / raw)
To: community
Hello ,
На связке двух машин моделируется будущая сеть:
клиенты - ХР
сервер - ALTM 2.2 из коробки
Адрес сервера 192.168.168.3 server.test.ru
Установлен DHCP и DNS.
Cоздаю динамический DHCP:
dhcp.conf
ddns-updates on;
ddns-update-style interim;
ddns-domainname "test.ru";
ddns-rev-domainname "in-addr.arpa";
include "/var/lib/bind/etc/rndc.key" ;
zone test.ru. {primary 192.168.168.3 ; key rndc-key ;}
zone 168.168.192.in-addr-arpa. { primary 192.168.168.3 ; key rndc-key ;}
option domain-name-servers 192.168.168.3;
option domain-name "test.ru";
Далее стандартно.
В конфигурации BIND добавление в local.conf:
zone "test.ru" {
type master;
file "/var/lib/bind/zone/test.ru.hosts";
allow-update {key rndc-key; }; };
zone "168.168.192.in-addr.arpa" {
type master;
file "/var/lib/bind/zone/192.168.168.rev";
allow-update { key rndc-key; };
};
C ХР машины ipconfig/relase ipconfig/renew -
прямая зона- OK
security: debug 3: client 192.168.168.3#1042: request has valid signature
security: debug 3: client 192.168.168.3#1042: recursion available: approved
security: debug 3: client 192.168.168.3#1042: update 'test.ru/IN' approved
обратная -
security: debug 3: client 192.168.168.3#1042: request is not signed
security: debug 3: client 192.168.168.3#1042: recursion available: approved
security: error: client 192.168.168.3#1042: update '168.168.192.in-addr.arpa/IN' denied
Замена
allow-update { key rndc-key; }; на allow-update { any; };
прямая зона- OK
обратная - OK
Поскольку опыта на Linux драхма требуется помощь.
--
Best regards,
Anatol mailto:anatol@vb3397.spb.edu
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Comm] DNS
2003-10-20 21:47 [Comm] DNS ïðîáëåìà Anatol B. Bazjukin
@ 2003-10-24 7:03 ` Alexey Borovskoy
2003-10-24 10:48 ` Anatol B. Bazjukin
1 sibling, 0 replies; 3+ messages in thread
From: Alexey Borovskoy @ 2003-10-24 7:03 UTC (permalink / raw)
To: community
* 21 Октябрь 2003 10:47 "Anatol B. Bazjukin"
<anatol@VB3397.spb.edu>
Добрый вечер.
> zone "test.ru" {
> type master;
> file "/var/lib/bind/zone/test.ru.hosts";
> allow-update {key rndc-key; }; };
>
> zone "168.168.192.in-addr.arpa" {
> type master;
> file "/var/lib/bind/zone/192.168.168.rev";
> allow-update { key rndc-key; };
> };
Поставьте пакет bind-slave и перенесите файл обратной зоны из
/var/lib/bind/zone/ в /var/lib/bind/zone/slave (bind-slave
содержит каталог для обратных зон).
--
Алексей.
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Comm] DNS
2003-10-20 21:47 [Comm] DNS ïðîáëåìà Anatol B. Bazjukin
2003-10-24 7:03 ` [Comm] DNS Alexey Borovskoy
@ 2003-10-24 10:48 ` Anatol B. Bazjukin
1 sibling, 0 replies; 3+ messages in thread
From: Anatol B. Bazjukin @ 2003-10-24 10:48 UTC (permalink / raw)
To: Anatol B. Bazjukin
Alexey, спасибо за ответ.
Но ожидая ответа, я внимательно просмотрел dhcp.conf и обнаружил глупейшую
ошибку:
zone 168.168.192.in-addr-arpa. { primary 192.168.168.3 ; key rndc-key}
^ ^
У корректоров это называется "замыленный глаз".
--
Best regards,
Anatol mailto:anatol@vb3397.spb.edu
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2003-10-24 10:48 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2003-10-20 21:47 [Comm] DNS ïðîáëåìà Anatol B. Bazjukin
2003-10-24 7:03 ` [Comm] DNS Alexey Borovskoy
2003-10-24 10:48 ` Anatol B. Bazjukin
ALT Linux Community general discussions
This inbox may be cloned and mirrored by anyone:
git clone --mirror http://lore.altlinux.org/community/0 community/git/0.git
# If you have public-inbox 1.1+ installed, you may
# initialize and index your mirror using the following commands:
public-inbox-init -V2 community community/ http://lore.altlinux.org/community \
mandrake-russian@linuxteam.iplabs.ru community@lists.altlinux.org community@lists.altlinux.ru community@lists.altlinux.com
public-inbox-index community
Example config snippet for mirrors.
Newsgroup available over NNTP:
nntp://lore.altlinux.org/org.altlinux.lists.community
AGPL code for this site: git clone https://public-inbox.org/public-inbox.git