Bind Zone Transfer Problem
Todd Zullinger
tmz at pobox.com
Tue Jul 4 01:05:19 UTC 2006
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Charles Curley wrote:
> I seem to be having a problem with zone transfer.
>
> I have bind running inside my local domain (an experimental network
> that the outside world never sees).
>
> I set up the master as follows:
>
>
> // We are authoritative for this zone.
> zone "localdomain" IN {
> type master;
> file "localdomain";
> allow-transfer {
> # 192.168.1.12;
> 192.168.1.32;
> 192.168.1.4;
> };
> allow-update { none; };
> };
>
> For the same zone, the slave is as follows:
>
>
> // We are authoritative for this zone.
> zone "localdomain" IN {
> type slave;
> file "localdomain";
> masters { 192.168.1.3; };
> };
>
> The transfer appears to start. The master reports, e.g:
>
> Jul 3 17:46:14 charlesc named[27334]: client 192.168.1.4#48326: transfer of 'localdomain/IN': AXFR started
>
> It never reports that the transfer ends.
Actually, it does seem to state "end of transfer." But it's not
succeeding. :)
> Jul 3 17:46:16 dragon named[14083]: zone localdomain/IN: Transfer started.
> Jul 3 17:46:16 dragon named[14083]: transfer of 'localdomain/IN' from 192.168.1.3#53: connected using 192.168.1.4#48326
> Jul 3 17:46:16 dragon named[14083]: dumping master file: tmp-EYbYqUHud2: open: permission denied
> Jul 3 17:46:16 dragon named[14083]: transfer of 'localdomain/IN' from 192.168.1.3#53: failed while receiving responses: permission denied
> Jul 3 17:46:16 dragon named[14083]: transfer of 'localdomain/IN' from 192.168.1.3#53: end of transfer
>
> What am I doing wrong?
I'd take a stab at SELinux being the cause. Do you have that running
in Enforcing mode on either box by chance?
- --
Todd OpenPGP -> KeyID: 0xD654075A | URL: www.pobox.com/~tmz/pgp
======================================================================
Authority has every reason to fear the skeptic, for authority can
rarely survive in the face of doubt.
-- Robert Lindner
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.4 (GNU/Linux)
Comment: When crypto is outlawed bayl bhgynjf jvyy unir cevinpl.
iG0EARECAC0FAkSpvs8mGGh0dHA6Ly93d3cucG9ib3guY29tL350bXovcGdwL3Rt
ei5hc2MACgkQuv+09NZUB1rklACgqk/njUg1HAg1n0eWpBFtD6g1eZkAnjFaH7ga
HAq2G9NJplsdLCEFPxAY
=e4Kg
-----END PGP SIGNATURE-----
More information about the fedora-list
mailing list