dns 安装错误 集锦

tail -f /var/log/messages
Mar  2 21:42:36 pkfeiyang named[8184]: the working directory is not writable

解决
 chmod 777 named/

max open files (1024) is smaller than max sockets (4096)

ulimit -n 65535

nslookup pkfeiyang.cn
Server:  127.0.0.1
Address: 127.0.0.1#53

*** Can't find pkfeiyang.cn: No answer
不能解析修改named.conf 监听端口
options {
        listen-on port 53 { 192.168.1.215; };
。。。。。。
}

dig mx  pkfeiyang.cn

;; ANSWER SECTION:
pkfeiyang.cn.  86400 IN MX 10 mail.pkfeiyang.cn.

;; AUTHORITY SECTION:
pkfeiyang.cn.  86400 IN NS pkfeiyang.cn.

;; ADDITIONAL SECTION:
mail.pkfeiyang.cn. 86400 IN A 192.168.1.215

 nslookup pkfeiyang.cn
Server:  192.168.1.215
Address: 192.168.1.215#53
错误

** server can't find pkfeiyang.cn: REFUSED

修改 named.conf
改localhost 为any

后把allow-update { none; };改为allow-query { any; };解决该问题。

 

options {
        listen-on port 53 { 192.168.1.215; };
        allow-query     { any; };
        allow-query-cache { any; };
...
}

view localhost_resolver {
        match-clients      { any; };  
        match-destinations { any; };
        recursion yes;
        include "/etc/named.rfc1912.zones";
};

错误
Setting defaults...hostname: No address associated with name
No results returned for A lookup of
Checked nameservers:
 192.168.1.215
 192.168.1.207
 202.106.0.20

DNS ERROR resolving
It is suggested that the hostname be resolveable via DNS
Change hostname [Yes]   可以输入no 当内网dns 有问题时
错误

ERROR: Installation can not proceeed.  Please fix your /etc/hosts file
  to contain:

  127.0.0.1 localhost.localdomain localhost

  Zimbra install grants mysql permissions only to localhost and
  localhost.localdomain users.  But Fedora/RH installs leave lines such
  as these in /etc/hosts:

  127.0.0.1     myhost.mydomain.com myhost localhost.localdomain localhost
解决

vi /etc/hosts

127.0.0.1               localhost.localdomain localhost
::1             localhost6.localdomain6 localhost6
192.168.1.215   mail.pkfeiyang.cn mail

问题：
29-Apr-2011 21:55:26.291 automatic empty zone: view view_edu: 8.B.D.0.1.0.0.2.IP6.ARPA
29-Apr-2011 21:55:26.292 command channel listening on 127.0.0.1#953
29-Apr-2011 21:55:26.292 ignoring config file logging statement due to -g option
29-Apr-2011 21:55:26.294 managed-keys-zone ./IN/localhost_resolver: loading from master file 7ceafabd8156336551aeae23ee060ed.mkeys failed: file not found
解决：
view localhost_resolver {
        match-clients      { any; };  
        match-destinations { any; };
        recursion yes;
        include "/etc/named.rfc1912.zones";
};

解決方式可以於 /var/lib/named目錄下產生一個 managed-keys.bind 便可以排除這個錯誤訊息的產生，操作方式如下所示：

ns1: ~ # touch /var/lib/named/managed-keys.bind
./sbin/named-checkzone -d unicom.pkfeiyang.zone -v

错误：
./sbin/rndc status
29-Apr-2011 22:47:34.932 invalid command from 127.0.0.1#41396: bad auth
rndc: connection to remote host closed
This may indicate that
* the remote server is using an older version of the command protocol,
* this host is not authorized to connect,
* the clocks are not synchronized, or
* the key is invalid.
解决：
重新生成rndc
生成rndc-key：
# cd /usr/local/named/etc/
# ../sbin/rndc-confgen > rndc.conf

修改name.conf 和 vi etc/rndc.conf  中 rndc-key 一致就可以了

 ./sbin/rndc reload
29-Apr-2011 22:51:02.221 received control channel command 'reload'
29-Apr-2011 22:51:02.221 loading configuration from '/usr/local/named/etc/named.conf'
29-Apr-2011 22:51:02.223 reading built-in trusted keys from file '/usr/local/named/etc/bind.keys'
29-Apr-2011 22:51:02.224 using default UDP/IPv4 port range: [1024, 65535]
29-Apr-2011 22:51:02.225 using default UDP/IPv6 port range: [1024, 65535]
29-Apr-2011 22:51:02.233 ignoring config file logging statement due to -g option
29-Apr-2011 22:51:02.234 reloading configuration succeeded
29-Apr-2011 22:51:02.234 reloading zones succeeded
server reload successful
[root@gfs3 named]# ./sbin/rndc status
version: 9.8.0
number of zones: 57
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is ON
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running

错误
* server can't find : SERVFAIL

修改域名配置
 cat cnc/pkfeiyang.cn
$TTL 3600
@ IN SOA         ns.feiyang.cn.    root.ns.feiyang.cn. (
                  2008080901;       Serial
                  3600      ;       Refresh ( seconds )
                  900       ;       Retry ( seconds )
                  68400     ;       Expire ( seconds )
                  15        ;       Minimum TTL for Zone ( seconds )
                  )
@         IN     NS      ns.feiyang.cn.

很多写法上都加上了ns前缀，来制定dns，此处写法去掉前边的ns，就ok了。