<html>
<head>
<meta http-equiv="content-type" content="text/html; charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
Hello, I cannot fix a master/slave problem on RHEL7 with bind 9.9.4.
It is a server in building process, in a LAN, so I cannot use tools
like Zonecheck. Please note that my boss explicitely asked me to
anonymize the zone name. I know this is useless.<br>
<br>
I can provide named.conf files for both servers, but basically, I
disabled (commented out) all security related options, and added
"any" to all acls. The zones declaration are double checked :<br>
<br>
<pre class="bbcodeblock" dir="ltr" style="
margin: 0px;
margin-right: -99999px;
padding: 3px;
border: 1px inset;
width: 98%;
height: 226px;
text-align: left;
overflow: auto">Master :
zone "myzone.fr" {
type master;
file "/etc/named/internal/myzone.fr";
allow-transfer {my-slaves; };
};
Slave :
zone "myzone.fr" {
type slave;
file "/etc/named/slave/myzone.fr.db";
masters {172.29.16.135; };
};</pre>
<br>
When I initiate a zone transfer manually it works :<br>
<br>
<pre class="bbcodeblock" dir="ltr" style="
margin: 0px;
margin-right: -99999px;
padding: 3px;
border: 1px inset;
width: 98%;
height: 130px;
text-align: left;
overflow: auto">[root@slave etc]# dig @master axfr myzone.fr
; <<>> DiG 9.9.4-RedHat-9.9.4-38.el7_3.2 <<>> @master axfr myzone.fr
; (1 server found)
;; global options: +cmd
myzone.fr. 86400 IN SOA master.myzone.fr. dnsmaster.myzone.fr. 2017021602 28800 7200 604800 86400
...etc...</pre>
<br>
But, in normal operation (all zones loaded OK), when I look at the
master I got this :<br>
<br>
<pre class="bbcodeblock" dir="ltr" style="
margin: 0px;
margin-right: -99999px;
padding: 3px;
border: 1px inset;
width: 98%;
height: 34px;
text-align: left;
overflow: auto">xfer-out: info: client 172.29.16.133#57190 (myzone.fr): bad zone transfer request: 'myzone.fr/IN': non-authoritative zone (NOTAUTH)</pre>
<br>
And on the slave :<br>
<br>
<pre class="bbcodeblock" dir="ltr" style="
margin: 0px;
margin-right: -99999px;
padding: 3px;
border: 1px inset;
width: 98%;
height: 98px;
text-align: left;
overflow: auto">general: info: zone myzone.fr/IN: refresh: unexpected rcode (REFUSED) from master 172.29.16.135#53 (source 0.0.0.0#0)
general: info: zone myzone.fr/IN: Transfer started.
xfer-in: info: transfer of 'myzone.fr/IN' from 172.29.16.135#53: connected using 172.29.16.133#53836
xfer-in: error: transfer of 'myzone.fr/IN' from 172.29.16.135#53: failed while receiving responses: NOTAUTH
xfer-in: info: transfer of 'myzone.fr/IN' from 172.29.16.135#53: Transfer completed: 0 messages, 0 records, 0 bytes, 0.001 secs (0 bytes/sec)</pre>
<br>
I'm really lost. I've configured dozens of DNSs with no such
problems. Did I miss something obvious ?<br>
<br>
Thanks in advance,<br>
<br>
Xavier<br>
<pre class="moz-signature" cols="72">--
Xavier Humbert
CRT Supervision et Exploitation de Niveau 1
Rectorat de Nancy-Metz
03 83 86 27 39
</pre>
</body>
</html>