dns update durch dhcp -> reverse zone update: time out

rbach · 19 Sep. 2006

hallo,

in meinen kleinen privaten netzwerk hab ich einen dhcp-server (version 3.0.3-21) und einen dns server (bind version 9.3.2-17) auf einen Rechner mit SuSe 10.1 installiert.

beide erfüllen ihren zweck, aber beim update des dns servers durch den dhcp server wird die reverse zone nicht mit upgedatet.

auch mein log file hat sich verändert, noch vor kurzen sahe es so:

Code:

Sep 19 08:37:51 andreas named[7622]: client 192.168.111.1#32773: updating zone 'test-lokal.com/IN': adding an RR at 'thinkpad-2.test-lokal.com' A
Sep 19 08:37:51 andreas named[7622]: client 192.168.111.1#32773: updating zone 'test-lokal.com/IN': adding an RR at 'thinkpad-2.test-lokal.com' TXT
Sep 19 08:37:51 andreas named[7622]: journal file dyn/test-lokal.com.jnl does not exist, creating it
Sep 19 08:37:51 andreas dhcpd: Added new forward map from thinkpad-2.test-lokal.com to 192.168.111.188
Sep 19 08:37:51 andreas dhcpd: unable to add reverse map from 188.111.168.192.in-addr.arpa. to thinkpad-2.test-lokal.com: timed out
Sep 19 08:37:51 andreas dhcpd: DHCPREQUEST for 192.168.111.188 (192.168.111.1) from 00:03:47:b9:41:10 (thinkpad-2) via eth0
Sep 19 08:37:51 andreas dhcpd: DHCPACK on 192.168.111.188 to 00:03:47:b9:41:10 (thinkpad-2) via eth0
Sep 19 08:43:12 andreas dhcpd: DHCPREQUEST for 192.168.111.188 from 00:03:47:b9:41:10 (thinkpad-2) via eth0
Sep 19 08:43:12 andreas dhcpd: DHCPACK on 192.168.111.188 to 00:03:47:b9:41:10 (thinkpad-2) via eth0

aus. (beachte zeile:

Code:

Sep 19 08:37:51 andreas dhcpd: unable to add reverse map from 188.111.168.192.in-addr.arpa. to thinkpad-2.test-lokal.com: timed out

)

jetzt wird im logfile garnix mehr von named angezeigt wenn sich ein rechner vom dhcp eine ip bekommt:

Code:

Sep 19 10:54:43 andreas dhcpd: DHCPREQUEST for 192.168.111.188 from 00:03:47:b9:41:10 (thinkpad-2) via eth0
Sep 19 10:54:43 andreas dhcpd: DHCPACK on 192.168.111.188 to 00:03:47:b9:41:10 (thinkpad-2) via eth0

zu den config dateien...

meine /etc/dhcpd.conf

Code:

option domain-name "test-lokal.com";
option netbios-node-type 8;
option netbios-name-servers 192.168.111.101, 192.168.111.106;
option domain-name-servers 192.168.111.1; #192.168.111.106, 192.168.111.101;
option ntp-servers 192.168.111.6;
option routers 192.168.111.1;

#dhcp interface (SuSe)
DHCPD_INTERFACE="eth0";

#dns-server updates
ddns-update-style interim;
ddns-domainname "test-lokal.com";
update-static-leases true;
ignore client-updates;
ddns-updates on;

key dhcp_updater {
    algorithm HMAC-MD5.SIG-ALG.REG.INT;
    secret EU+q+t2wqRsY3b11nNVAAg==;
};

zone test-lokal.com. {
    primary 192.168.111.1;
    key dhcp_updater;
}

zone 111.168.192.in-addr.arpa. {
    primary 192.168.111.1;
    key dhcp_updater;
}

#netz einstellungen
subnet 192.168.111.0 netmask 255.255.255.0 {
	range 192.168.111.20 192.168.111.80;
	range 192.168.111.150 192.168.111.190;
	default-lease-time 14400;
	max-lease-time 172800;
}

meine /etc/named.conf:

Code:

options {

	# The directory statement defines the name server's working directory

	directory "/var/lib/named";

	# Write dump and statistics file to the log subdirectory.  The
	# pathenames are relative to the chroot jail.

	dump-file "/var/log/named_dump.db";
	statistics-file "/var/log/named.stats";

	# The forwarders record contains a list of servers to which queries
	# should be forwarded.  Enable this line and modify the IP address to
	# your provider's name server.  Up to three servers may be listed.

	#forwarders { 192.0.2.1; 192.0.2.2; };

	# Enable the next entry to prefer usage of the name server declared in
	# the forwarders section.

	#forward first;

	# The listen-on record contains a list of local network interfaces to
	# listen on.  Optionally the port can be specified.  Default is to
	# listen on all interfaces found on your system.  The default port is
	# 53.

	#listen-on port 53 { 127.0.0.1; };

	# The listen-on-v6 record enables or disables listening on IPv6
	# interfaces.  Allowed values are 'any' and 'none' or a list of
	# addresses.

	listen-on-v6 { any; };

	# The next three statements may be needed if a firewall stands between
	# the local server and the internet.

	#query-source address * port 53;
	#transfer-source * port 53;
	#notify-source * port 53;

	# The allow-query record contains a list of networks or IP addresses
	# to accept and deny queries from. The default is to allow queries
	# from all hosts.

	#allow-query { 127.0.0.1; };

	# If notify is set to yes (default), notify messages are sent to other
	# name servers when the the zone data is changed.  Instead of setting
	# a global 'notify' statement in the 'options' section, a separate
	# 'notify' can be added to each zone definition.

	notify no;
	include "/etc/named.d/forwarders.conf";
};


zone "." in {
	type hint;
	file "root.hint";
};

zone "localhost" in {
	type master;
	file "localhost.zone";
};

zone "0.0.127.in-addr.arpa" in {
	type master;
	file "127.0.0.zone";
};

include "/etc/named.conf.include";

key dhcp_updater {
    algorithm HMAC-MD5.SIG-ALG.REG.INT;
    secret EU+q+t2wqRsY3b11nNVAAg==;
};

zone "test-lokal.com" in {
	file "dyn/test-lokal.com";
	type master;
	allow-update { key dhcp_updater; };
	allow-transfer { any; };
};

zone "111.168.192.in-addr.arpa" in {
	file "dyn/111.168.192.in-addr.arpa";
	type master;
	allow-update { key dhcp_updater; };
};

meine /var/lib/named/dyn/test-lokal.com:

Code:

$ORIGIN .
$TTL 172800	; 2 days
test-lokal.com		IN SOA	andreas.test-lokal.com. root.andreas.test-lokal.com. (
				2006091405 ; serial
				10800      ; refresh (3 hours)
				3600       ; retry (1 hour)
				604800     ; expire (1 week)
				86400      ; minimum (1 day)
				)
			NS	andreas.test-lokal.com.
			MX	10 mail.test-lokal.com.
$ORIGIN test-lokal.com.
andreas			A	192.168.111.1
testrechner		A	192.168.111.10
testrechner2		A	192.168.111.11
$ORIGIN .
$TTL 172800	
thinkpad-2		A	192.168.111.188
			TXT	"318cc2246b267ae04dcf639a2cfb128384"

der eintrag:

Code:

$ORIGIN .
$TTL 172800	
thinkpad-2		A	192.168.111.188
			TXT	"318cc2246b267ae04dcf639a2cfb128384"

wurde automatisch hinzugefügt.

in meiner reverse zone (/var/lib/named/dyn/111.168.192.in-addr.arpa) hat sich nix geändert.

was kann ich tun damit auch die reverse zone automatisch upgedatet wird?

danke schonma für die antworten.

mfg,
rbach

edit:
er scheint nichtmal mehr updaten zu wollen (er erstellt das jnl file nicht neu wenn man es von hand löscht)

baumpaul · 24 Sep. 2006

Schau mal in den /var/log/messages ob bind die Reverse-Zone überhaupt läd, bzw
ob diese generell funktionert.
Darüber hast du noch nichts gepostet, glaube ich...
Dann sind da immer wieder die Datei und Verzeichnisrechte ....
Da hat es für die Geschichte mit dem AutoUpdate bei Suse immer wieder Probleme gegeben.
Ich habe das auf den meisten Distros von 8.2 > 9.3 gemacht und immer habe ich eingreifen müssen,
bzw stand in der Doku unter /usr/share/doc/packages das es ein Problem gibt.

dns update durch dhcp -> reverse zone update: time out

rbach

baumpaul