<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<META NAME="Generator" CONTENT="MS Exchange Server version 6.5.7654.12">
<TITLE>Newbie help - slave servers and dns updates</TITLE>
</HEAD>
<BODY>
<!-- Converted from text/plain format -->
<P><FONT SIZE=2>Hi all,<BR>
<BR>
Please excuse my ignorance but after spending several weeks Googling for information that would have endangered several rain forests in paper form, I've decided to ask for some help.<BR>
<BR>
I successfully setup two Bind9 servers in the usual master (DNS1), slave (DNS2) configuration to serve a local internal domain for around 60 users. Updates etc are allowed via the use of the rndc.key file (identical copies on both servers). I then added on DHCP to the servers which again works fine. The final step was adding dynamic DNS updates via the DHCP servers, which also went well.<BR>
<BR>
My problem is that if I turn off the master server (DNS1) to test fail over I can't update the DNS via DHCP. I get errors like the following:<BR>
<BR>
<date/time> client <DNS2_IP>#<Random looking number>: signer "rndc-key" denied<BR>
<date/time> client <DNS2_IP>#<same number as above>: update forwarding '<my dns zone>/IN' denied<BR>
<BR>
I tried using nsupdate to manually add entries but I just get "REFUSED" errors. As soon as I bring up the master server everything works fine again.<BR>
<BR>
Is this a limitation of Bind and I've just not understood the docs or have I done something silly in a config file? I've installed this on Ubuntu Server 10.04 and Debian 6 with the same results on both.<BR>
<BR>
Any advice would be gratefully received,<BR>
<BR>
Wayne</FONT>
</P>
<FONT face=Arial><FONT size=2>
<HR>
<FONT color=#808080>Scanned by</FONT> <FONT
color=#4f1f91><STRONG>MailMarshal</STRONG></FONT></FONT><BR><FONT
color=#400080><STRONG></STRONG></FONT><FONT size=2>
<HR>
</FONT></FONT>
<FONT size=2 face=Arial>
<HR>
</FONT><FONT color=#008080><FONT size=2><FONT face=Arial><STRONG>Attention:
</STRONG><BR></FONT></FONT></FONT><FONT color=#808080>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN
style="mso-ansi-language: EN-GB" lang=EN-GB><FONT color=#408080 size=2
face=Arial>The information contained in this message is confidential and
intended for the addressee(s) only. If you have received this message in error
or there are any problems, please notify the originator immediately.
The</FONT></SPAN></P>
<P style="MARGIN: 0cm 0cm 0pt" class=MsoNormal><SPAN
style="mso-ansi-language: EN-GB" lang=EN-GB><FONT color=#408080 size=2
face=Arial>unauthorised use, disclosure, copying or alteration of this message
is strictly forbidden. Christian Vision or any of its subsidiaries will not be
liable for direct, special, indirect or consequential damages arising from
alteration of the contents of this message by a third party or as a result of
any virus being passed on. Please note that we reserve the right to monitor and
read any e-mails sent or received by the company under the Telecommunications
(Lawful Business Practice) (Interception of Communications) Regulation 2000.
Christian Vision is registered in <?XML:NAMESPACE PREFIX = ST1 /><ST1:PLACE
w:st="on"><ST1:COUNTRY-REGION w:st="on">England</ST1:COUNTRY-REGION></ST1:PLACE>
as a limited company 2842414 and </FONT></SPAN></FONT><SPAN
style="mso-ansi-language: EN-GB" lang=EN-GB><FONT color=#408080 size=2
face=Arial>as a charity 1031031</FONT></SPAN><FONT size=2><FONT face=Arial><FONT
color=#408080> </FONT></P>
<HR>
</FONT></FONT>
</BODY>
</HTML>