'succesful' nsupdate of remote server not persistent across nameserver restart?
jasonsu at mail-central.com
jasonsu at mail-central.com
Sun Apr 24 19:04:15 UTC 2016
I'm doing an nsupdate to a remote server from my desktop
cat nsupdate.txt
server ns01.example.com
debug yes
zone example.net.
update add test.example.net. 500 in TXT "TEST STRING"
show
send
nsupdate -k ./jason-key ./nsupdate.txt
On the nameserver, logs show what appears to be 'success',
Apr 24 11:47:07 ns01 named[23053]: 24-Apr-2016 11:47:07.949 update-security: info: client 10.0.0.17#4218/key jason-key: view internal: signer "jason-key" approved
Apr 24 11:47:08 ns01 named[23053]: 24-Apr-2016 11:47:07.949 update: info: client 10.0.0.17#4218/key jason-key: view internal: updating zone 'example.net/IN': adding an RR at 'test.example.net' TXT "TEST STRING"
checking with dig, it's NOT in 'TXT' where I expected it
dig TXT example.net +short
(empty)
instead it's in 'AXFR'
dig AXFR example.net
; <<>> DiG 9.10.3-P4 <<>> AXFR example.net
;; global options: +cmd
example.net. 5 IN SOA ns01.example.com. ns-admin.example.com. 1461435298 7200 1800 604800 5
example.net. 5 IN NS ns01.example.com.
example.net. 5 IN A 127.0.0.1
test.example.net. 500 IN TXT "TEST STRING"
example.net. 5 IN SOA ns01.example.com. ns-admin.example.com. 1461435298 7200 1800 604800 5
;; Query time: 1 msec
;; SERVER: 10.0.0.53#53(10.0.0.53)
;; WHEN: Sun Apr 24 11:48:58 PDT 2016
;; XFR size: 5 records (messages 1, bytes 213)
The journal HAS been modified
cd <named chroot>
grep -rlni acme .
./namedb/master/internal.example.net.zone.jnl
After a bind restart, which iiuc is supposed to flush the journal to files,
systemctl stop named.service
systemctl start named.service
checking with dig, the update's missing
dig AXFR example.net
; <<>> DiG 9.10.3-P4 <<>> AXFR example.net
;; global options: +cmd
example.net. 5 IN SOA ns01.example.com. ns-admin.example.com. 1461435297 7200 1800 604800 5
example.net. 5 IN NS ns01.example.com.
example.net. 5 IN A 127.0.0.1
example.net. 5 IN SOA ns01.example.com. ns-admin.example.com. 1461435297 7200 1800 604800 5
;; Query time: 2829 msec
;; SERVER: 10.0.0.53#53(10.0.0.53)
;; WHEN: Sun Apr 24 11:52:32 PDT 2016
;; XFR size: 4 records (messages 1, bytes 178)
cd <named chroot>
grep -rlni acme .
(empty)
What am I failing to do to make this update persistent across flush/restart, as intended?
Jason
More information about the bind-users
mailing list