关于DNS slave server的

cxfcxf

自己创建了DNSserver
zone "example.org" IN {
        type master;
        file "example.zone";
        allow-update { none; };
};

zone "0.168.192.in-addr.arpa" IN {
        type master;
        file "arpa-example.zone";
        allow-update { none; };
};
建议文件zone在/var/named/chroot/var/named/下面 软连接到/var/named下
测试DNS服务器正常

然后创建slave server
zone "example.org" IN {
        type slave;
        masters { 192.168.0.1; };
        file "slave-example.org.zone";
};

zone "0.168.192.in-addr.arpa" IN {
        type slave;
        masters { 192.168.0.1; };
        file "salve-192.168.0.zone";
};

问题来了。。
我start DNS server的时候是成功的
但是
Oct 26 14:35:25 client named[3897]: dumping master file: tmp-XXXXNmRE5o: open: permission denied
Oct 26 14:35:25 client named[3897]: transfer of '0.168.192.in-addr.arpa/IN' from 192.168.0.1#53: failed while receiving responses: permission denied
Oct 26 14:35:25 client named[3897]: transfer of '0.168.192.in-addr.arpa/IN' from 192.168.0.1#53: end of transfer
Oct 26 14:35:25 client named[3897]: dumping master file: tmp-XXXXK4KqQs: open: permission denied
Oct 26 14:35:25 client named[3897]: transfer of 'example.org/IN' from 192.168.0.1#53: failed while receiving responses: permission denied
Oct 26 14:35:25 client named[3897]: transfer of 'example.org/IN' from 192.168.0.1#53: end of transfer
说是权限问题吧
然后我把slave server的var/named文件夹g+r
在主DNS上 把那2个文件ZONE文件o+r
但是还是说 permission denied
请教如何解决？？

yongjian

not sure if this is because of the files have been locked...

cxfcxf

locked???how to unlock it??

kissingwolf

Your slave bind server set
1. /var/named/chroot/var/named ,user owner "named" ,group owner "named" ?
2. /var/named/chroot/var/named is rwxr-xr-x ?

cxfcxf

for kevin
[root@client ~]# ll /var/named/chroot/var/
total 6
drwxrwx---  4 root  named 1024 Oct 25 15:18 named
drwxrwx---  3 root  named 1024 Oct 25 15:17 run
drwxrwx---  2 named named 1024 Mar 14  2003 tmp

[root@server ~]# ll /var/named/chroot/var/named/
total 24
-rw-r--r--  1 root  root   561 Oct 26 14:24 arpa-example.zone
drwxrwx---  2 named named 1024 Aug 26  2004 data
-rw-r--r--  1 root  root   311 Oct 26 14:27 example.zone

and i got the debug info
Oct 27 11:17:57 client named[3103]: transfer of '0.168.192.in-addr.arpa/IN' from 192.168.0.1#53: failed while receiving responses: permission denied
Oct 27 11:17:57 client named[3103]: transfer of '0.168.192.in-addr.arpa/IN' from 192.168.0.1#53: end of transfer
Oct 27 11:17:57 client named[3103]: dumping master file: tmp-XXXXT4IcUY: open: permission denied
Oct 27 11:17:57 client named[3103]: transfer of 'example.org/IN' from 192.168.0.1#53: failed while receiving responses: permission denied
Oct 27 11:17:57 client named[3103]: transfer of 'example.org/IN' from 192.168.0.1#53: end of transfer
Oct 27 11:17:57 client kernel: audit(1130383077.852:0): avc:  denied  { write } for  pid=3106 exe=/usr/sbin/named name=named dev=sda5 ino=36885 scontext=root:system_r:named_t tcontext=system_ubject_r:named_zone_t tclass=dir

kissingwolf

把 selinux 关掉！

cxfcxf

谢谢kevin 问题解决了。。是selinux的设置问题=。=
对SELINUX不是很了解。。啃文档去。。