dynamicke updaty DNS

Jarda Ille linux na vetrni.net
Středa Leden 16 20:34:43 CET 2008


Zdravím,
už pár týdnů se trápím s nefunkčností dynamických záznamů v DNS 
(přebíráno z DHCP). Dopředné záznamy jsou OK, ale reverzní se nepřidají. 
Určitě to bude pitomost, ale ....

V logu DHCP serveru je:
Jan 15 17:21:35 srv2 dhcpd: DHCPDISCOVER from 00:50:8d:ed:09:05 via eth0 
Jan 15 17:21:36 srv2 dhcpd: DHCPOFFER on 192.168.1.34 to 
00:50:8d:ed:09:05 (jarda-pc) via eth0 Jan 15 17:21:36 srv2 dhcpd: Added 
new forward map from jarda-pc.vetrni.net. to 192.168.1.34 Jan 15 
17:21:36 srv2 dhcpd: unable to add reverse map from 
34.1.168.192.in-addr.arpa. to jarda-pc.vetrni.net.: not authorized

Moje konfigurace:
options {
    directory "/var/lib/named";
    dump-file "/var/log/named/named_dump.db";
    statistics-file "/var/log/named/named.stats";
    notify no;
    include "/etc/named.d/forwarders.conf";
    cleaning-interval 20;
    interface-interval 2;
    recursion yes;
    auth-nxdomain yes;
};


zone "." in {
    type hint;
    file "root.hint";
};

zone "localhost" in {
    type master;
    file "localhost.zone";
};

zone "0.0.127.in-addr.arpa" in {
    type master;
    file "127.0.0.zone";
};



zone "vetrni.net" in {
    file "master/vetrni.net";
    type master;
    allow-transfer {         any;         };
    allow-update {         key DHCP_UPDATER;         };
};

zone "1.168.192.in-addr.arpa" in {
    file "master/1.168.192.in-addr.arpa";
    type master;
    allow-transfer {        any;        };
    allow-update {        key DHCP_UPDATER;        };
};

logging {
    channel log_file {
        syslog syslog;
        severity info;
        print-category yes;
        print-severity yes;
        print-time no;
        };
    category xfer-out {
        log_file;
        };
    category notify {
        log_file;
        };
    category lame-servers {
        log_file;
        };
    category dispatch {
        log_file;
        };
    category security {
        log_file;
        };
    category unmatched {
        log_file;
        };
    category update {
        log_file;
        };
    category config {
        log_file;
        };
    category default {
        log_file;
        };
    category database {
        log_file;
        };
    category client {
        log_file;
        };
    category dnssec {
        log_file;
        };
    category general {
        log_file;
        };
    category resolver {
        log_file;
        };
    category network {
        log_file;
        };
    category xfer-in {
        log_file;
        };
};

key DHCP_UPDATER {
    algorithm hmac-md5;
    secret "xxxxxxxxx";
    };
key rndc-key {
    algorithm hmac-md5;
    secret "xxxxxxxxx";
    };

controls {
    inet 127.0.0.1 port 953 allow { 127.0.0.1; } keys { rndc-key; };
    };

Konfigurace DHCP:
allow unknown-clients;
option domain-name "vetrni.net";
option domain-name-servers 192.168.1.3;
option ntp-servers 192.168.1.3;
option lpr-servers 192.168.1.3;
option netbios-name-servers 192.168.1.3;
authoritative;
allow client-updates;
do-forward-updates on;
ddns-updates on;
ddns-update-style interim;
ddns-domainname "vetrni.net.";
ddns-rev-domainname "in-addr.arpa.";
update-static-leases on;
default-lease-time 86400;
use-host-decl-names on;

# Domácí sít
subnet 192.168.1.0 netmask 255.255.255.0 {
    option broadcast-address 192.168.1.255;
    option routers 192.168.1.1;
    authoritative;
    allow unknown-clients;
    range 192.168.1.31 192.168.1.40;
    default-lease-time 3600;
    max-lease-time 172800;
    }
key DHCP_UPDATER {
  secret xxxxxxxxxxx;
  algorithm hmac-md5;
}
zone vetrni.net. {
    primary 192.168.1.3;
    key DHCP_UPDATER;
    }
zone in-addr.arpa. {
    primary 192.168.1.3;
    key DHCP_UPDATER;
    }


-- 
---
S pozdravem / with kind regards
 
                 Jarda Ille
 
Phone:  +420 389 771 035
        +420 776 085 061
Skype:  vilik13
ICQ:    111819075
E-mail: jarda na vetrni.net
        vilik13 na gmail.com

Adresa: Nad koupalištěm 353
        382 11 Větřní





Další informace o konferenci Linux