On Thu, 2005-08-11 at 21:52 -0700, M E Fieu wrote:
> I had added the directory option /var/named in /etc/named.conf. And I specified the "named" login
> to have write permission to the whole /var/named folder and subfolder but the db.abc file is not
> created at all. (I used /etc/init.d/named restart to trigger the zone transfer)
I tried that, and it wouldn't work for me. But if I configured things
to write my slave DNS records into the slaves sub-directory, it did
(prepend slave zone filenames with slaves/ in your named.conf file,
etc.). Like this:
zone "lan.localhost" IN {
type slave;
file "slaves/lan.localhost.zone";
masters { 192.168.1.10; };
allow-transfer { key rndckey; };
}
> Below is my /var/log/messages log for zone transfer, my linux BIND server IP is 172.16.1.250 and
> windows DNS server IP is 172.16.1.42. It prompts transfer of 'abc.com/IN' from 172.16.1.42#53:
> failed while receiving responses: REFUSED. I don't know why as I put the allow zone transfer
> property of my abc.com zone in Windows DNS server to "ANY". Why it still refused? Any idea?
In the past, I could do that too (allow ANY to do transfer), now I can't
get that to work. Making sure that my servers were using a
common /etc/rndc.key file, and using that for authentication, instead,
allowed it to work.
> Aug 12 11:52:38 watcher named[5996]: transfer of 'abc.com/IN' from 172.16.1.42#53: failed while receiving responses: REFUSED
> Aug 12 11:52:38 watcher named[5996]: transfer of 'abc.com/IN' from 172.16.1.42#53: end of transfer
That's the same sort of error messages that I was seeing.
--
Don't reply to my address, I ignore it. I read the list.
