I have setup two BIND9 servers as slaves for an internal Windows domain. I receive messages in my logs about a Windows server not being the master for the slave domain on BIND. I have placed the allow-notify statement in the global options section of named.conf, as well as setting the IP address in the masters section of the zone. I'm confused as to why I'm still getting this error message.
View 3 RepliesI have two DNS servers, one local and one remote, and I am trying to get them to talk to each other using views.
The problem I'm having is that the remote server can talk to the local one and receive zone files, but if I update the local server internal view, the remote doesn't receive the update. Here is my config:
Quote:
key "external" {
algorithm hmac-md5;
secret "xxxxx";
};
controls {
inet 127.0.0.1 allow { localhost; };
[Code]....
I have bind configured with Internal and External views, but the slave server is transferring only the Internal zone files for both Internal and External - a diff shows no difference, and the log shows the same serial number.What am I missing in the config so the slave server properly receives updates from the master for both views?
View 2 Replies View RelatedThis morning, our NIS master server down (due to ram prob), and what happen is all the sun servers able to bind to NIS Slave, but not Linux servers.
Details:
sun_server[sab]% telnet linux01
Trying 10.x.x.x...
Connected to linux01.
Escape character is '^]'.
[Code]....
Where is the prob, in Sun or Linux? In Linux, how to make it able to failover to NIS slave?
I'm managing a residential network. Each flat is its own subnet, and can only communicate with the other flats through a router (i.e. no broadcast). 95% of these 300 subnets only contains windows computers (from lambda users).
My final goal is to be able to browse the entire network from any computer.
I set up a samba server acting as a wins server, and every computer is aware of it because it is registered in the dhcp. So name resolution is working fine for everyone.
The same samba server is set to be the "Domain master browser":
workgroup = WORKGROUP
wins support = yes
prefered master = yes
local master = yes
domain master = yes
os level = 65
When I browse the network (using "net view" or "browstat view"), I can only see the servers which are in the same subnet as the domain master browser.
Now, when in a subnet the computers arrange themselves to find a "local master browser", the only visible computers are the one in that subnet.
What I don't understand is why all the local masters don't synchronize their lists with the domain master.
So, to sum up, every subnet get the following behaviour:
-if a local master is elected, the only visible computers are the one in the same subnet.
-if no local master is elected, the only visible computers are the one in the subnet of the domain master.
-if I add another samba, configured as a local master winning all elections, then the magic is working and the lists are synchronized.
What is expected:
-every computer can see all the computer from all the subnets.
I have a Centos NIS server that is working fine with other linux clients. i need to have a Solaris 8 client bind to the NIS domain and found out that Sol8 does not support MD5 format passwords that the NIS master is generating. so i am trying to disable the MD5 encryption on the nis master and it does not seem to work. i run this command
authconfig --disablemd5 --enablenis --nisdomain=lab --updateall
and it restarts portmap and nis services ok. on the master server i then do a yppasswd username and a make passwd and it still uses the 34 char password format. what do i need to do to disable MD5 passwords in a centos nis server?
I have set up a master BIND DNS server with 2 slaves. All the services start up fine on all 3 servers, but zones and named.conf info is not being replicated. The 3 servers are tentatively installed on a Xen virtual server for testing purposes. All 3 servers are 64bit and installed with: -> CentOS release 5.4 (Final) - 2.6.18-164.10.1.el5xen -> BIND 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2
All 3 servers are fully updated. All 3 servers have static IP addresses. The services on all 3 servers start up without any apparent issues. Master server: # /etc/init.d/named restart ; tail -f /var/log/messages
[Code]...
i am trying to run bind in centos 6 and bind keeps giving me errors every time i check all of the configurations. the named.conf file works fine but the zone files keep giving me errors heres the contents of my named.conf file
Code:
options {
directory "/var/named";
listen-on port 53 { any; };
allow-query { any; };
[Code]....
How to install bind 9.7 in centos 5.6 if i installed using yum means, its defaultly installing 9.3 version.
View 2 Replies View RelatedAm running the latest CentOS5 with Bind. Bind will run for a period(time period unknown) the shutsdoown. We need to every day start the service. When the service starts there are no errors given.
View 2 Replies View Relatedsetting up Bind for web-hosting as i am using Webmin to configure it?
View 4 Replies View RelatedI had centos 5-5 server with 6G of RAM and 4 core cpu 3GHZ i installed bind 9.7.1-p2 on my server with multi thread support there are a lot of dns requests on my server , about 2500 Packets/sec and 3Mbit UDP traffic but my server response week to most of them.
For example when i use nslookup or dig command to query Yahoo.com the response from server maybe deliver about 5 Sec or become timed out , but sometimes response time less than 1 sec!
I don't know why, perhaps kernel works week so i decided to do the following :
But the problem didn't solved
I previously had Freebsd with same version of bind and same configuration and everything worked fine.
don't find box of BIND so i was posting into this boxI have some problem when i config bind DNS for my domain and then i can't start named,this's error message
[root@server1 named]# service named restart
Stopping named: [ OK ]
Starting named:
[code]....
I installed BIND 9.7.3 from source on Centos 5.5, and chrooted it, and I'm getting an error when I run 'service named status' I get a reply, but at the end it says 'named dead but pid file exists'
Here's the entire output:
[root@ns etc]# service named status
version: 9.7.3
number of zones: 23
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is OFF
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running named dead but pid file exists Nothing is logged in /var/log/messages. Named is running and responding correctly. How can I get rid of this error?
i have xp and virtual guest centos 5.i install apache, bind, squid and webmin through xp, i can access URL...but when i start my squid, put the ip in the browser proxy settings, when i logon its ip turn to URL...I believe my bind is working. Though theres some little glitch. I dont know where.and i already put my servers bind ip to my winxp primary dns server settings.
View 1 Replies View RelatedI can't get the client server to authenticate to the openldap server. I can authenticate on the server itself though. I can su to, login and shh into the openldap server and become a ldap user. I just can't become an ldap user on the client.I didn't setup TLS/SSL. I can do that after I have it working. I'm using hashed passwords though. I don't have replication setup. I'm am tying to setup the most basic openldap environment then build from there. I have read the openldap section in the admin guide.
My setup at home.
Openldap server � light.deathnote.net -- 10.0.1.21
client server � vm-centos01.deathnote.net � 10.0.1.7 -- VM on virtualbox
Virtualbox host � L (OS MAC) � 10.0.1.2
router (apple airport extreme) / default gatway � 10.0.1.1
All computer can reach the internet and ping each other. When I installed centos I disabled SELinux.I used these guids to setup my openldap.
[URL]
Below I have included some output from the files I'm using with openldap.
[root@vm-centos01 ~]# tail /var/log/messages
Jul 2 09:25:33 vm-centos01 xfs: nss_ldap: reconnecting to LDAP server (sleeping 16 seconds)...
Jul 2 09:25:49 vm-centos01 xfs: nss_ldap: failed to bind to LDAP server ldap://light.deathnote.net: Can't contact LDAP server
Jul 2 09:25:49 vm-centos01 xfs: nss_ldap: failed to bind to LDAP server ldap://10.0.1.21/: Can't contact LDAP server
[code]....
I have a load balancer with 2 web servers behind it. The web servers rsync with cloud storage to update their apache directories 1 time every hour. Apache is just running php pages that pull/push data to a DB so they dont need to be updated that often. However I need to figure out how to implement a Master/Master MySQL setup to have my web servers point to for the PHP stuff. I need to implement it without having a single point of failure. The Load balancers are useless for failover as they only detect availability based on Ping request. So putting a master/master setup behind a Load Balancer is out. what is the best way to setup the master/master mysql in a HA setup without the use of a load balancer provided by the host?
View 2 Replies View RelatedI've been looking for a good tutorial for setting up a BIND DNS server for my local network. What I want to do is..Have BIND running on my home server receiving all DNS requests.Have certain zones (my.zone.lan) pointing to custom IP addresses (I.E. server.lan points to 192.168.{server IP})Zones that don't exist should be passed on to OpenDNS for processing.
View 6 Replies View RelatedDon't work nslookup from clients guest OS.I have LinuxMint 7 and I'm installed VirtualBox on her. I created three guests OS. Two CentOS and XP
Name
The first CentOS linux1.starline.ca
The second CentOS centos.starline.ca
The third XP xp2.starline.ca[code].....
On the clients guest OS nslookup don't work. It write : timed out; no servers could be reached .What is going on? Why nslookup don't work from clients guest OS?On client machine in the file /etc/resolv.conf have record ameserver 168.135.88.2
I have installed bind with yum install bind bind-chroot.I am having query timeouts due to no ipv6 connectivity.Is there a way to re-compile and not loose the chroot structure?Or is there another way to disable ipv6 lookups?Example of issue resulting in ipv4 query timeout:
30-Dec-2010 17:52:03.226 client x.x.x.x#53593: view internal: query: paypal.com.cms.local IN A +
30-Dec-2010 17:52:03.227 client x.x.x.x#53594: view internal: query: paypal.com.cms.local IN AAAA +
30-Dec-2010 17:52:03.228 client x.x.x.x#53595: view internal: query: paypal.com IN A +
[code]....
I installed bind & did not install chroot. I set up a fictional domain kelly.local. I am able to resolve FQDN (example: angus.kelly.local) in both dig & nslookup & ping on linux boxes.
I want to be able to resolve bare host names (example: angus) using bind. I get mixed results.
(1) linux boxes resolve bare host names & FQDNs just fine using nslookup & ping, but not dig. dig gives error:
; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_5.3 <<>> angus
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 15241
[Code]....
I have updated bind using yum on a Centos 5.3 server, after restarting, I have this error now.
Error in named configuration:
zone localhost/IN: loaded serial 42
/var/named/mydomain.hosts:20: unknown RR type 'SPF'
My version of is : bind.x86_64 30:9.3.6-16.P1.el5
when client goes to bind to NFS share on remote server - they are getting access denied when using the mount command; [SERVER] - CentOS 5.3 /etc/exports /mnt/data 192.168.5.199(rw) - implying the client I want to have access
[Code]...
I am setting up a cluster of servers which use Centos Directory Server for control of logins, etc and kerberos for authentication. The basic setup is working fine, I have been able to manually create accounts using the directory console and these accounts seem to work. Now what I want to do is automate the process of creating new accounts. I am writing a perl script which can be run by one of the server administrators, they supply a small number of arguments and it should create a new user in the directory server, and also create a principal in the kerberos.
I want them to be able to do this using their logged-in kerberos credentials, i.e., without having to enter and re-enter their passwords. My first attempt was to use perl modules Net::LDAP and Authen::SASL. I could not get this working so fell back to using ldap command line tools, but even these I cannot seem to get working! When using mozldap tools, as specified in the admin manual, I get the following:
$ /usr/lib64/mozldap/ldapmodify -h ldaphost.mycompany.com -D uid=eharmic,ou=mydept,dc=mycompany -o mech=GSSAPI -o authid=eharmic < ../ldapmod.txt
Bind Error: Invalid credentials
Bind Error: additional info: SASL(-14): authorization failure:
Using openldap tools I strike exactly the same problem:
$ ldapmodify -Y GSSAPI -H LDAP://ldaphost.mycompany.com -D uid=eharmic,ou=mydept,dc=mycompany -U eharmic < ../ldapmod.txt
SASL/GSSAPI authentication started
ldap_sasl_interactive_bind_s: Invalid credentials (49)
additional info: SASL(-14): authorization failure:
I believe I have set up the mapping correctly:
dn: cn=MyMapping,cn=mapping,cn=sasl,cn=config
objectClass: top
objectClass: nsSaslMapping
cn: MyMapping
nsSaslMapRegexString: ^(.+)@MYCOMPANY.COM
nsSaslMapBaseDNTemplate: ou=mydept,dc=mycompany
nsSaslMapFilterTemplate: (uid=1)
It must be getting reasonably far because after doing the above I can see the LDAP service ticket in my "klist" output.
How do I know the reply was from caching-nameserver, master nameserver or slave nameserver in BIND DNS.? Can I trace the nameserver that replied my dns query? Like I have a master nameserver, a slave nameserver and a caching nameserver in my network. Is it possible to know that which of these servers replied my dns query? Also can i trace back that replying server exactly?
View 3 Replies View RelatedI meet this problem after i reformat the CentOS 5...I havent do any configuration, the named service start failed ? why ....
View 2 Replies View RelatedI am bit new to Linux and have setup caching-only name server with Centos 5.5. when i do dig server, it provide resolutions. but when i use the server IP as DNS on my windows client, it says, "connection refused" on the NSlookup output. (IP table didn't enable) My server Ip is 192.168.1.253 and bellow is the configuration of "/var/named/chroot/etc/named.conf"
options {
listen-on port 53 { 127.0.0.1; 192.168.1.253; };
listen-on-v6 port 53 { ::1; };
directory "/var/named";
dump-file "/var/named/data/cache_dump.db";
statistics-file "/var/named/data/named_stats.txt";
memstatistics-file "/var/named/data/named_mem_stats.txt"; .....
I updated bind to version bind-9.3.4-6.0.3.P1.el5_2 today, and then I started getting "Starting named: named: user 'named' unknown" messages. Selinux is enabled.
ID named shows:
uid=25(named) gid=25(named) groups=25(named) context=root:system_r:unconfined_t:SystemLow-SystemHigh
what is bind vs bind-chroot vs caching-nameserver ?what is the different between eatch others ?
View 7 Replies View RelatedI'm looking for sm-notify, which should be part of nfs-utils, but isn't.
I need this for NFS over TCP failover. Where can i find it?