HELP: slave DNS not updating zone files from Master DNS,

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey everyone,

Really need some help here .. I can't seem to be able to get my slave DNS server to communicate from master DNS server.
I don't even know where to begin anymore .. can someone please help me to resolve this problem ... where do I start??

Thanks a bunch

Dizzutch · Posted: Tue Sep 05, 2006 8:05 pm Post subject:

i assume you're using BIND? you'll need to do some more like posting your zone files and named.conf before we can figure out what's going on. by "communicate" do you mean your slave isn't getting transfers from your master or can your slave simple not do any lookups by itself? please elaborate.

-Dizz
_________________
Help the confused! Adopt an unanswered post!
prepend [solved] to your post title when you feel your issue is resolved.
Worcester Judo

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey Dizzutch,

Your absolutely right, I do need to post more on my problem, I'm sorry for that:

First I set up a little test netwrok here at my home:

nobspangle · Posted: Tue Sep 05, 2006 9:00 pm Post subject:

could you post these four files
include "/prod/var/named/include/named.conf.common";
include "/prod/var/named/include/named.conf.master.zone2";
include "/prod/var/named/include/named.conf.common";
include "/prod/var/named/include/named.conf.slave.zone2"

Your zone files are the ones you change to add/change hosts

Dizzutch · Posted: Tue Sep 05, 2006 9:04 pm Post subject:

you gotta setup zones for each zone that the DNS server is authoritative for.
in this zone configuration you define the name, the Name servers that will handle this zone and some other information. There is a lot of information available on this online, I don't want to re-invent the wheel in a forum post, and will most likely leave out important information.
but basically what you need is to setup your zone in each named.conf (master and slave) telling the DNS server how to act.

(this is not valid BIND syntax, since I don't have access to my box at the moment)
named.conf (on master)

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey here are some additional files,

/prod/var/named/include/named.conf.common:

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Additionally here are some of my DNS log files for both master and slave:

Master DNS log file:

Dizzutch · Posted: Thu Sep 07, 2006 12:50 pm Post subject:

thanks for posting those log files. I don't see any problems with Zone transfers, can you please elaborate on the problem you are having? "slave DNS server to communicate from master DNS server." What are the steps you take to notice this problem?

-Dizz
_________________
Help the confused! Adopt an unanswered post!
prepend [solved] to your post title when you feel your issue is resolved.
Worcester Judo

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey,

Here are some of the steps that I take to notice that my slave is not updating from my master :

Steps for my Master:

Dizzutch · Posted: Thu Sep 07, 2006 1:58 pm Post subject:

looking at your logs again, it looks asif your slave is only accepting the zone transfer for the reverse zone, not the forward zone.
as you can see, at 15:59:42 your master started and ended a zone transfer for your forward zone.

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey,

Your exactly correct after reading your last post I attempted to see if I could do a reverse lookup:

-----------------------------------------------------------------------------------
Slave 172.1.5.5:
-----------------------------------------------------------------------------------
DNS State = Started!!
DNS ForwarderList = 192.168.XX.X;
DNS Mode = slave
DNS Nameserver ip = 172.1.5.5
DNS Network = 172.1.0.0
DNS Netmask = 255.255.0.0
DNS DomainName = itsa255a.org
DNS Master = 172.1.1.1

testperson@itsa225a ~ $ nslookup 172.1.55.55
Server: 172.1.5.5
Address: 172.1.5.5#53

55.55.1.172.in-addr.arpa name = abc.itsadomain.org.

**************************************************************************************************************************

So, the revcerse lookup works ... your dead on ... (I'm feeling a little better, though I probably shouldn't, right??) ... anyhow ... when I check in my /prod/var/named/db directory I notice these files only:

Dizzutch · Posted: Thu Sep 07, 2006 5:06 pm Post subject:

Hmm, I would suggest increasing your debug level and restarting the name servers to see if anything is mentioned as to why the forward zone files aren't created.
Your config looks correct. perhaps you could add an allow-notify{} clause to be sure.
_________________
Help the confused! Adopt an unanswered post!
prepend [solved] to your post title when you feel your issue is resolved.
Worcester Judo

Dizzutch · Posted: Thu Sep 07, 2006 5:09 pm Post subject:

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey again,

Okay this is gonna sound weird I realize, but I think I found my problem .. but I would rather have another individual actaully confirm that "Yeah, that was your problem" with the DNS config files.

just have to do my best to explain it to you... k ... Now in my named.conf file, I have two "include" statements namely:

*************************************************************************************************************************************************************
---------------------------------------------
name.conf for Master
---------------------------------------------

acl "bogusnet" { 0.0.0.0/8; 1.0.0.0/8; 2.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3; };
acl "zone2-net" { 127.0.0.1; 172.1.0.0/16; };
acl "zone2-ns" { 127.0.0.1; 172.1.5.5; };

options {
pid-file "/var/run/named/named.pid";
forwarders { 192.168.22.11; };
listen-on port 53 {
zone2-ns;
};
allow-query {
zone2-net;
};
blackhole { bogusnet; };
};

include "/prod/var/named/include/named.conf.common";
include "/prod/var/named/include/named.conf.master.zone2"; <----- DIFFERENT FROM SLAVE

**********************************************************************************************************************************************************
-----------------------------------------------
named.conf for Slave
------------------------------------------------

acl "bogusnet" { 0.0.0.0/8; 1.0.0.0/8; 2.0.0.0/8; 192.0.2.0/24; 224.0.0.0/3; };
acl "zone2-net" { 127.0.0.1; 172.1.0.0/16; };
acl "zone2-ns" { 127.0.0.1; 172.1.1.1; };

options {
pid-file "/var/run/named/named.pid";
forwarders { 192.168.22.11; };
listen-on port 53 {
zone2-ns;
};
allow-query {
zone2-net;
};
blackhole { bogusnet; };
};

include "/prod/var/named/include/named.conf.common";
include "/prod/var/named/include/named.conf.slave.zone2"; <----- DIFFERENT FROM MASTER

********************************************************************************************************************************************************************

I've marked what is different in each (which is a clearly marked include file). Now, its these two files that I feel I should qucikly explain what I believe to be my problem ...

First Let's look at ..... include "/prod/var/named/include/named.conf.master.zone2";
------------------------------------------------------------------------------------------------------------------
zone "p.org" in { <--------- PROBLEM ?????
type slave;
masters { 172.1.1.1; };
file "/prod/var/named/db/slave.forward.zone2";
allow-update { zone2-ns; };
allow-query { zone2-net; };

allow-transfer { zone2-ns;
172.1.5.5;
};
notify yes;
check-names ignore;
};

zone "1.172.in-addr.arpa." in {
type slave;
masters { 172.1.1.1; };
file "/prod/var/named/db/slave.reverse.zone2";
allow-update { zone2-ns; };
allow-query { zone2-net; };

allow-transfer { zone2-ns;
172.1.5.5; };

notify yes;
check-names ignore;
};

**********************************************************************************************************************************************************
--------------------------------------------------------------------------------------------------------------------
And Now the slave: include "/prod/var/named/include/named.conf.slave.zone2";
---------------------------------------------------------------------------------------------------------------------
zone "itsadomain.org" in { <---------PROBLEM???
type slave;
masters { 172.1.5.5; };
file "/prod/var/named/db/slave.forward.zone2";
allow-update { zone2-ns; };
allow-query { zone2-net; };
notify yes;
check-names ignore;
};

zone "1.172.in-addr.arpa." in {
type slave;
masters { 172.1.5.5; };
file "/prod/var/named/db/slave.reverse.zone2";
allow-update { zone2-ns; };
allow-query { zone2-net; };
notify yes;
check-names ignore;
};

************************************************************************************************************************************************************
I think the reason why my forward zone files are not updating is because their listed differently in my slave and master config files (for some reason??). To clarify further, my slave has a different domian name, itsadomain.org .... yet in my Master its listed as p.org . It is my assumption that in my slave "include" file ( /prod/var/named/include/named.conf.slave.zone2;) ... needs to have a forward zone listed the same as the master's forward zone( p.org)???..... (You'll notice the questions marks here ).

Anyway, if someone could clarify for me ... if in fact my assumption is correct ... if that was my problem ... maybe if you could shed some light on if this is in fact usually manually configured (i.e. edited by user to be the same?? OR Is the masters zone names passed to the slave somehow, and the user does not have to configure these?? ).

Anyway, the only thing I can say for sure is that when I edit the slave forward zone to be equal to the masters .. then updates finally start to occurr.

I apologize for the long post ... just trying to be as clear as possible.
Thanks again
Take Care

Dizzutch · Posted: Tue Sep 12, 2006 8:25 pm Post subject:

yeah, because the slave won't handle the notifies from a zone for which it has no config.
sorry i didn't see this earlier, the info was there all along.

-Dizz
_________________
Help the confused! Adopt an unanswered post!
prepend [solved] to your post title when you feel your issue is resolved.
Worcester Judo

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

No problem Dizzhutch .. just thanks for helping out .... but do you know if these files are supposed to be edited by the user ... what I mean is ... in order for me to get my slave updating from my Master .. I literally had to edit (vi) my named.conf.slave.zone2 config file.

Its probably a stupid question any way ... but the master doesn't the master notify the slave of the proper zone file names too??

Thanks again

Dizzutch · Posted: Tue Sep 12, 2006 8:57 pm Post subject:

wherer did you get the BIND package? if you get it from portage it's not setup like this by default. Most people will update the settings by hand. but there are some GUIs available here and there.
no, the master only notifies about changes in the zone...the config is up to the user.
_________________
Help the confused! Adopt an unanswered post!
prepend [solved] to your post title when you feel your issue is resolved.
Worcester Judo

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey all,

It appears as though my Master DNS is sending notifies to my slave DNS, but my slave does little to nothing with them. What I mean is when I do add a new host to my Master DNS .. it appears to send the notify (according to the log outpu, anyhowt) but then when I attempt to do an nslookup on the slave for that new host, I get nothing (actually NXDOMAIN).

Has anybody had problems with a slave DNS server before, with notifies/updates to zone files not going through.

Thanks again ... let me know if you require more info
Take Care

Dizzutch · Posted: Mon Sep 18, 2006 7:23 pm Post subject:

could we see the logs? (server sending notoofy, and slave recieving notify)?
_________________
Help the confused! Adopt an unanswered post!
prepend [solved] to your post title when you feel your issue is resolved.
Worcester Judo

nobspangle · Posted: Mon Sep 18, 2006 7:40 pm Post subject:

NiceGuy, have you updated your config so that both the slave and master are talking about the same zone?

Also make sure you are incrementing your serial number when you make changes on the master.

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey Dizzutch,

Here are the log files,

***************************
Master:
**************************

Dizzutch · Posted: Mon Sep 18, 2006 7:57 pm Post subject:

can you post both master and slave configs for the itsadomain.org domain?

at 14:43:00 the master loads serial 2006091329

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey Dizzhutch,

**********************************************************
Master config
**********************************************************

Dizzutch · Posted: Mon Sep 18, 2006 8:48 pm Post subject:

you need to add a

NiceGuy · Guru Joined: 12 Jun 2006 Posts: 451 Location: Canada

Hey Dizzhutch,

I added the "allow-transfer {172.1.1.1; }; " conditions but stilll get no updates. Here is the generated log output.

************************
Master
*************************