Ubuntu10.04 bind9 configuration Master/Slave zone data transmission problems

Source: Internet
Author: User

When configuring DNS master-slave zone data transfer on ubuntu10.04 today, the slave server cannot learn the configuration of the master server. When viewing/var/log/messages

Aug 1 06:42:45 Ubuntu kernel: [5397.159601] type = 1503 audit (1406900565.661: 37 ): operation = "mknod" pid = 2351 parent = 1 profile = "/usr/sbin/named" requested_mask = "C:" denied_mask = "C :: "fsuid = 121 ouid = 121 name ="/etc/bind/slaves/tmp-Gyllksio7F"

Confused ....

Display when viewing/var/log/syslog

Aug 1 06:45:47 Ubuntu named [2350]: Reloading configuration succeeded
Aug 1 06:45:47 Ubuntu named [2350]: Any newly configured zones are now loaded
Aug 1 06:45:47 Ubuntu named [2350]: Zone langbing.com/in: Transfer started.
Aug 1 06:45:47 Ubuntu named [2350]: transfer of 'langbing. com/in' from 192.168.1.103 #53: connected using 192.168.1.104 #35568
Aug 1 06:45:47 Ubuntu named [2350]: dumping master file:/etc/bind/slaves/tmp-ckgypeoets: open: Permission denied
Aug 1 06:45:47 Ubuntu named [2350]: transfer of 'langbing. com/in' from 192.168.1.103 #53: failed while loading responses: Permission denied
Aug 1 06:45:47 Ubuntu named [2350]: transfer of 'langbing. COM/In 'from 192.168.1.103 #53: transfer completed: 0 messages, 7 records, 0 bytes, 0.009 secs (0 bytes/sec)

It turns out to be a permission issue.

But the directory has been given writable permissions, but is still told not to write permissions, online to find a blog (http://blog.sina.com.cn/s/blog_541a3cf10101c70b.html) the original write directory is protected by the apparmor Service (I don't know what it is ...), You must add the write permission to the directory in the/etc/apparmor. d/usr. sbin. Named directory.

/Etc/bind/Slave/** RW, /Etc/bind/Slave/RW,
Restart apparmor service/etc/init. d/apparmor restart
Run rndc reconfig to display Aug 1 06:49:28 Ubuntu named [2559]: Reloading configuration succeeded
Aug 1 06:49:28 Ubuntu named [2559]: Any newly configured zones are now loaded
Aug 1 06:49:28 Ubuntu named [2559]: Zone langbing.com/in: Transfer started.
Aug 1 06:49:28 Ubuntu named [2559]: transfer of 'langbing. com/in' from 192.168.1.103 #53: connected using 192.168.1.104 #45509
Aug 1 06:49:28 Ubuntu named [2559]: Zone langbing.com/in: transferred serial 10
Aug 1 06:49:28 Ubuntu named [2559]: transfer of 'langbing. COM/In 'from 192.168.1.103 #53: transfer completed: 1 messages, 7 records, 203 bytes, 0.052 secs (3903 Bytes/sec)
Aug 1 06:49:28 Ubuntu named [2559]: Zone langbing.com/in: sending notifies (serial 10)


OK...

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.