linux 中 dns动态更新问题

linux 中 dns动态更新问题

我配置了dns和dhcp想要 dns动态更新
dns服务启动成功
dhcp服务启动成功
但是我查看 servers named status 时
有如下信息:
rndc: connection to remote host closed
This may indicate that the remote server using an loder version of
the command protocal, this host is not authorized to connect,
or the key is invalid.
我没有找出问题我 想知道 哪里有问题
你设置了KEY,可能KEY没匹配上吧,重新生成一个KEY看看
我配上了。
我说一下我的,配置 。
我在机器上创建了一个用户 useradd lidan, passwd XXXXX
dnssec-keygen -a HMAC-MD5 -b 128 -n USER lidan
ll 查看 了  -rw------- 1 root root 48 Jan 14 18:26 Klidan.+157+37662.key
  -rw------- 1 root root 81 Jan 14 18:26 Klidan.+157+37662.private
/etc/named.conf配置
options {
   directory "/var/named";
     };
  zone "." IN {
   type hint;
   file "named.ca";
  };
  zone "localhost" IN {
   type master;
   file "localhost.zone";
     };
  zone "0.0.127.in-addr.arpa" IN {
   type master;
   file "named.local";
    };
  key lidan {
   algorithm HMAC-MD5.SIG-ALG.REG.INT;
   secret 密钥 ;
  };
  zone "hello.lidan" IN {
   type master;
   file "hello.lidan";
   allow-update { key lidan; };
   };
  zone "1.168.192.in-addr.arpa" IN {
   type master;
   file "192.168.1.1";
   allow-update { key lidan; };
};

/etc/dhcpd.conf配置
dhcpd.conf
   option domain-name "hello.lidan";
  option domain-name-servers 192.168.1.1;
  default-lease-time 600;
  max-lease-time 800;
  ddns-update-style interim;
  subnet 192.168.1.0 netmask 255.255.255.0 {
   range 192.168.1.100 192.168.1.200;
      option routers 192.168.1.1;
  }
  key lidan {
   algorithm HMAC-MD5.SIG-ALG.REG.INT;
   secret 密钥 ;
  }
  zone hello.lidan. {
   primary 192.168.1.1;
   key lidan;
  }
  zone 1.168.192.in-addr.arpa. {
   primary 192.168.1.1;
   key lidan;
  } 
重新启动服务 server named restart 成功
server dhcpd restart 成功
但是 server  named status 就会有rndc: connection to remote host closed
This may indicate that the remote server using an loder version of
the command protocal, this host is not authorized to connect,
or the key is invalid.
谢谢
请各位帮我解决一下
我用的 是 redhat 企业版4
补充一句我查看 /var/log/message
invalid command from 127.0.0.1#32771:bad auth
哥们儿,我也在弄这玩意儿。有空一起学习下。QQ13091050