[CentOS] bind issue on centos 5

Thu Jul 5 09:18:14 UTC 2007
Indunil Jayasooriya <indunil75 at gmail.com>

> /var/named/chroot/etc
> named.conf  rndc.conf  rndc.key <any other config file for Bind>


YES, I copied named.conf rndc.conf rndc.key to /var/named/chroot/etc.

[root at mailgw ~]# cd /var/named/chroot/etc/
[root at mailgw etc]# pwd
/var/named/chroot/etc
[root at mailgw etc]# ls -al
total 56
drwxr-x--- 2 root named 4096 Jul  5 13:26 .
drwxr-x--- 6 root named 4096 Apr 11 15:41 ..
-rw-r--r-- 1 root root   347 May 14 16:59 localtime
-rw-r--r-- 1 root named 1681 Jul  5 12:46 named.conf
-rw-r--r-- 1 root named 1114 Jul  5 10:28 rndc.conf
-rw-r--r-- 1 root named  113 Apr 27 15:28 rndc.key

You can see above files and their permission .

Here is my named.conf. pls see below


[root at mailgw etc]# cat named.conf
//
// named.conf for Red Hat caching-nameserver
//

options {
        directory "/var/named";
        dump-file "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        /*
         * If there is a firewall between you and nameservers you want
         * to talk to, you might need to uncomment the query-source
         * directive below.  Previous versions of BIND always asked
         * questions using port 53, but BIND 8.1 uses an unprivileged
         * port by default.
         */
         // query-source address * port 53;
};

//
// a caching only nameserver config
//
controls {
        inet 127.0.0.1 allow { localhost; } keys { rndckey; };
};

zone "." IN {
        type hint;
        file "named.root";
};

//zone "localdomain" IN {
//        type master;
//        file "localdomain.zone";
//        allow-update { none; };
//};

//zone "localhost" IN {
//        type master;
//        file "localhost.zone";
//        allow-update { none; };
//};

//zone "0.0.127.in-addr.arpa" IN {
//        type master;
//        file "named.local ";
//        allow-update { none; };
//};

//zone "
0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
//        type master;
//        file "named.ip6.local";
//        allow-update { none; };
//};

//zone "255.in-addr.arpa" IN {
//        type master;
//        file "named.broadcast";
//        allow-update { none; };
//};

//zone " 0.in-addr.arpa" IN {
//        type master;
//        file "named.zero";
//        allow-update { none; };
//};


zone "example77.com " IN {
        type master;
        file "master/example77.com.zone";
};

include "/etc/rndc.key";


here is my rndc.conf file. pls see below

[root at mailgw etc]# cat rndc.conf
/*
 * Copyright (C) 2004  Internet Systems Consortium, Inc. ("ISC")
 * Copyright (C) 2000, 2001  Internet Software Consortium.
 *
 * Permission to use, copy, modify, and distribute this software for any
 * purpose with or without fee is hereby granted, provided that the above
 * copyright notice and this permission notice appear in all copies.
 *
 * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
 * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF
MERCHANTABILITY
 * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
 * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING
FROM
 * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT,
NEGLIGENCE
 * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
 * PERFORMANCE OF THIS SOFTWARE.
 */

/* $Id: rndc.conf ,v 1.7.2.1 2004/03/09 06:09:27 marka Exp $ */

/*
 * Sample rndc configuration file.
 */

options {
        default-server  localhost;
        default-key     "rndckey";
};

server localhost {
        key     "rndckey";
};

include "/etc/rndc.key";

here is my rndc.key. pls see below.

[root at mailgw etc]# cat rndc.key
key "rndckey" {
        algorithm       hmac-md5;
        secret
"pS6vJwWxIHVKPO6uOwwzd41Q8ubhGYcm69pJWNh3oeADrdSLo7dHIH24nxep";
};



and also, I added 2 syslinks to /etc. Pls see below.
[root at mailgw etc]# pwd
/etc
[root at mailgw etc]# ln -s /var/named/chroot/etc/rndc.conf rndc.conf
[root at mailgw etc]# ln -s /var/named/chroot/etc/named.conf named.conf

[root at mailgw etc]# ls -al /etc/named.conf
lrwxrwxrwx 1 root root 32 Jul  5 10:33 /etc/named.conf ->
/var/named/chroot/etc/named.conf

[root at mailgw etc]# ls -al /etc/rndc.conf
lrwxrwxrwx 1 root root 31 Jul  5 10:32 /etc/rndc.conf ->
/var/named/chroot/etc/rndc.conf

And, Below symlink was added by default.
[root at mailgw etc]# ls -al /etc/rndc.key
lrwxrwxrwx 1 root named 31 Apr 27 15:28 /etc/rndc.key ->
/var/named/chroot//etc/rndc.key


Then, I did cd to /var/named/chroot/var/named/ as follows.
[root at mailgw etc]# cd /var/named/chroot/var/named/

I do not want to plce my zone files @ var/named/chroot/var/named/slaves
So, I created a directory called master as follows.

[root at mailgw named]# mkdir master
And, Changed permision as follows.
[root at mailgw named]# chown -R named:named master/
[root at mailgw named]# chmod -R 770 master/
[root at mailgw named]# ls -al
total 36
drwxr-x--- 5 root  named 4096 Jul  5 10:36 .
drwxr-x--- 5 root  named 4096 Mar 14  2003 ..
drwxrwx--- 2 named named 4096 Aug 26  2004 data
drwxrwx--- 2 named named 4096 Jul  5 10:36 master
drwxrwx--- 2 named named 4096 Jul  5 10:36 slaves

Then ,
[root at mailgw named]# cd master/
[root at mailgw master]# pwd
/var/named/chroot/var/named/master
[root at mailgw master]# touch example77.com.zone

[root at mailgw master]# chown named:named example77.com.zone

And, I included my zone info to that file. here it is.

[root at mailgw master]# cat example77.com.zone
$TTL    86400
@       IN      SOA     gateway.example77.com. root.example77.com. (
                        2006101604 ; Serial
                        1800       ; Refresh
                        300        ; Retry
                        360000     ; Expire
                        86400 )    ; Minimum

                IN      NS      gateway.example77.com.

                IN      MX      10      gateway.example77.com.
                IN      MX      20      mail.example77.com.

                IN      A       192.168.0.3

gateway      IN      A       192.168.0.3
mail            IN      A       192.168.0.2



Fiannly, I restarted named , pls see below.

[root at mailgw master]# /etc/init.d/named restart
Stopping named:                                            [  OK  ]
Starting named:                                            [  OK  ]

But, I ckecked /var/log/messeges. I get below errors.

master/example77.com.zone:11: example77.com\032: bad owner name (check-names
)
Jul  5 14:32:42 mailgw named[8047]: zone example77.com\032/IN: loading
master file master/example77.com.zone: bad owner name (check-names)

It says bad owner name (check-names). what it is. These are whtat I got
evrerything in /var/log/messages. pls see below.

[root at mailgw master]# tail -f /var/log/messages
Jul  5 14:32:40 mailgw named[7993]: exiting
Jul  5 14:32:42 mailgw named[8047]: starting BIND 9.3.3rc2 -u named -t
/var/named/chroot
Jul  5 14:32:42 mailgw named[8047]: found 2 CPUs, using 2 worker threads
Jul  5 14:32:42 mailgw named[8047]: loading configuration from
'/etc/named.conf'
Jul  5 14:32:42 mailgw named[8047]: listening on IPv4 interface lo,
127.0.0.1#53
Jul  5 14:32:42 mailgw named[8047]: listening on IPv4 interface eth0,
203.143.26.131#53
Jul  5 14:32:42 mailgw named[8047]: command channel listening on
127.0.0.1#953
Jul  5 14:32:42 mailgw named[8047]: master/example77.com.zone:11:
example77.com\032: bad owner name (check-names)
Jul  5 14:32:42 mailgw named[8047]: zone example77.com\032/IN: loading
master file master/example77.com.zone: bad owner name (check-names)
Jul  5 14:32:42 mailgw named[8047]: running


Whar exalty has happened.

I think you are alreday runnig bind 9.3.3 under chroot jail on centOS 5.

Pls help me to solve this issue. This is a MUST for me . So I need your
help.

Pls NOTE that domain I have given above is example77.com. I can not give my
real doamin name due to security reason. We can go ahead with that doamin
name. when it gets up and running, I can change it to my real dmain name.







-- 
Thank you
Indunil Jayasooriya
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.centos.org/pipermail/centos/attachments/20070705/fbd2b724/attachment-0005.html>