linux named服务配置问题请教
techup
|
1#
techup 发表于 2008-06-26 18:15
linux named服务配置问题请教
想在linux 下实现dns动态解释
照着网上http://www.xker.com/page/e2007/0802/29092.html设置 在service named restart 出现问题如下: [root@localhost etc]# service named restart 停止 named： 启动 named：/etc/named.conf:39: unknown option ' algorithm' /etc/named.conf:41: unknown option ' secret' Jun 25 09:04:13.810 starting BIND 9.2.4 -g Jun 25 09:04:13.812 using 1 CPU Jun 25 09:04:13.835 loading configuration from '/etc/named.conf' Jun 25 09:04:13.835 none:0: open: /etc/named.conf: permission denied Jun 25 09:04:13.836 loading configuration: permission denied Jun 25 09:04:13.836 exiting (due to fatal error) Error in configuration file /etc/named.conf : [失败] [root@localhost etc]# 配置/etc/named.conf 如下: [root@localhost etc]# vi named.conf // // named.conf for Red Hat caching-nameserver // options { directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; /* * If there is a firewall between you and nameservers you want * to talk to, you might need to uncomment the query-source * directive below. Previous versions of BIND always asked * questions using port 53, but BIND 8.1 uses an unprivileged * port by default. */ // query-source address * port 53; }; // // a caching only nameserver config // "named.conf" 75L, 1562C 1,1 顶端 // // named.conf for Red Hat caching-nameserver // options { directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; /* * If there is a firewall between you and nameservers you want * to talk to, you might need to uncomment the query-source * directive below. Previous versions of BIND always asked * questions using port 53, but BIND 8.1 uses an unprivileged * port by default. */ // query-source address * port 53; }; // // a caching only nameserver config // controls { inet 127.0.0.1 allow { localhost; } keys { rndckey; }; }; zone "." IN { type hint; file "named.ca"; }; zone "localdomain" IN { type master; file "localdomain.zone"; allow-update { none; }; }; /* 算法函数*/ key myddns { /* 指明生成密钥的算法 */ algorithm HMAC-MD5.SIG-ALG.REG.INT; /* 指明密钥*/ secret VbJf6KC3Q4eU2KeFGopFhQ==;}; [root@localhost etc]# cat named.conf // // named.conf for Red Hat caching-nameserver // options { directory "/var/named"; dump-file "/var/named/data/cache_dump.db"; statistics-file "/var/named/data/named_stats.txt"; /* * If there is a firewall between you and nameservers you want * to talk to, you might need to uncomment the query-source * directive below. Previous versions of BIND always asked * questions using port 53, but BIND 8.1 uses an unprivileged * port by default. */ // query-source address * port 53; }; // // a caching only nameserver config // controls { inet 127.0.0.1 allow { localhost; } keys { rndckey; }; }; zone "." IN { type hint; file "named.ca"; }; zone "localdomain" IN { type master; file "localdomain.zone"; allow-update { none; }; }; /* 算法函数*/ key myddns { /* 指明生成密钥的算法 */ algorithm HMAC-MD5.SIG-ALG.REG.INT; /* 指明密钥*/ secret VbJf6KC3Q4eU2KeFGopFhQ==;}; # 正向解释IP->DNS zone "trytest.com" IN { type master; file "trytest.com"; allow-update { Kroot.+157+14564.key; }; }; # 反向解释DNS->IP zone "0.0.127.in-addr.arpa" IN { type master; file "trytest.ddns.ip"; allow-update { Kroot.+157+14564.key; }; }; zone "0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN { type master; file "named.ip6.local"; allow-update { none; }; }; zone "255.in-addr.arpa" IN { type master; file "named.broadcast"; allow-update { none; }; }; zone "0.in-addr.arpa" IN { type master; file "named.zero"; allow-update { none; }; }; include "/etc/rndc.key"; 请问怎么将算法可以使用? 还有后面报权限的问题又是什么原因? 请高手指教!!感激不尽!! |