See comments below. Hope this helps,
Bill Shirley > -----Original Message----- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED]]On Behalf Of > [EMAIL PROTECTED] > Sent: Wednesday, October 02, 2002 3:05 AM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: [expert] DHCP and Dynamic DNS updates > > > hi all, > > I'm not sure what to look for next, after my googling session > everything looks fine to me, but still this doesn't want > to update my DNS entries from my DHCP server. > > My setup: > > Mandrake 9.0 > Running DNS and DHCP on the same machine. > > I want to allow DHCP to update my DNS entries: > > I've setup my config files as explained in the dhcpd.conf man pages. > > ----------- begin named.conf ------------------ > options { > // DNS tables are located in the /var/named directory > directory "/var/named"; > pid-file "/var/run/named/named.pid"; > > // Forward any unresolved requests to our ISP's > name server > forwarders { > 192.22.168.1; > 192.22.168.1; > // __ISPN1__; > // __ISPN2__; > }; > /* > * If there is a firewall between you and > nameservers you want > * to talk to, you might need to uncomment the > query-source > * directive below. Previous versions of BIND > always asked > * questions using port 53, but BIND 8.1 uses an > unprivileged > * port by default. > */ > // query-source address * port 53; > }; > > > zone "." { > type hint; > file "root.hints"; > }; > // All our DNS information is stored in /var/named/domain.name.db > > zone "darkrealm.net" { > type master; > file "darkrealm.net.db"; > // some security > allow-transfer { > 127.0.0.1; > }; > allow-update { > key DHCP_UPDATER; > }; > //allow-update { 192.168.0.1; }; > }; > > > > zone "0.0.127.in-addr.arpa" { > notify no; > type master; > file "127.0.0.rev"; > allow-transfer { 127.0.0.1; }; > }; > > > zone "0.168.192.in-addr.arpa" { > notify no; > type master; > file "192.168.0.rev"; > allow-transfer { > 127.0.0.1; > }; > allow-update { > key DHCP_UPDATER; > }; > //allow-update { 192.168.0.1; }; > }; > > > > key DHCP_UPDATER { > algorithm HMAC-MD5.SIG-ALG.REG.INT; > secret rTJd8JjdDQMQsM6iY57CRQ==; > }; > I don't see anything wrong with your setup, however, my "key" statement comes before any "zone" statement in the conf file. I set this up a long time ago, but IIRC, it makes a difference. > logging { > channel update_debug { > file "/var/log/update-debug.log"; > severity debug 3; > print-category yes; > print-severity yes; > print-time yes; > }; > channel security_info { > file "/var/log/named-auth.info"; > severity info; > print-category yes; > print-severity yes; > print-time yes; > }; > > category update { > update_debug; > }; > category security { > security_info; > }; > }; > ------------ end named.conf --------------------- > > i also get a permission denied error on my two logging files: > /var/log/named-auth.info with perms 600 user root group root > /var/log/update-debug.log with perm 600 user root group root > > and yes the files are there, i've had to create them (so they told me > in man pages ) > On my system, named runs as user named. Therefore: [root@elmo dns]# ls -ld /var/log/named drwxr-x--- 2 root named 4096 Oct 6 04:02 /var/log/named/ [root@elmo dns]# ls -l /var/log/named total 32 -rw-r----- 1 named named 0 Oct 6 04:02 auth.log -rw-r----- 1 named named 31 Sep 29 04:02 auth.log.1.gz -rw-r----- 1 named named 31 Sep 22 04:02 auth.log.2.gz -rw-r----- 1 named named 31 Sep 15 04:02 auth.log.3.gz -rw-r----- 1 named named 31 Sep 8 04:02 auth.log.4.gz -rw-r----- 1 named named 0 Oct 6 04:02 update-debug.log -rw-r----- 1 named named 206 Oct 4 20:33 update-debug.log.1.gz -rw-r----- 1 named named 39 Sep 22 04:02 update-debug.log.2.gz -rw-r----- 1 named named 39 Sep 15 04:02 update-debug.log.3.gz -rw-r----- 1 named named 39 Sep 8 04:02 update-debug.log.4.gz > ------------ begin dhcpd.conf -------------------- > # default file for dhcpd > # replace 192.168.0.1 by the IP adress of the server (same server for > # all services in this config file) > > server-identifier megatron; > default-lease-time 36000; > max-lease-time 144000; > #ddns-update-style ad-hoc; > ddns-update-style interim; > > not authoritative; > > subnet 192.168.0.0 netmask 255.255.255.0 { > range 192.168.0.100 192.168.0.254; > option domain-name "darkrealm.net"; > option domain-name-servers 192.168.0.1; > option nis-servers 192.168.0.1; > option lpr-servers 192.168.0.1; > option netbios-name-servers 192.168.0.1; > option routers 192.168.0.1; > option subnet-mask 255.255.255.0; > option time-servers 192.168.0.1; > ddns-updates on; > ddns-domainname "darkrealm.net"; > ddns-rev-domainname "in-addr.arpa"; > } > > key DHCP_UPDATER { > algorithm HMAC-MD5.SIG-ALG.REG.INT; > secret rTJd8JjdDQMQsM6iY57CRQ==; > } > > > zone DARKREALM.NET. { > primary 192.168.0.1; > key DHCP_UPDATER; > } > > zone 0.168.192.in-addr.arpa. { > primary 192.168.0.1; > key DHCP_UPDATER; > } > > ------------- end dhcpd.conf -------------------- > > anyone have some experience with this, please just point me > in the right direction. > > > thanks > > > adriaan putter > > > _ > ( ) Ascii ribbon campaign against html email > X > / \ > > >
Want to buy your Pack or Services from MandrakeSoft? Go to http://www.mandrakestore.com
