DDNS update

Ahoj, mam rozbehane DHCP a DNS, vsetci klienti maju nastavene DHCP a dhcpd updatuje zaznamy v dns (debian/dhcp3,bind9).

Problem: Pre "reverznu" zonu su pekne zapisane vsetky pocitace v sieti, tam je to ok. Pre zony firma.sk su ale v /etc/bind/firma.sk.zone len niektory klienti

co som si vsimol v syslog:

Mar  9 13:18:11 hts-fw named[2100]: client 192.168.1.10#2557: updating zone 'firma.sk/IN': update unsuccessful: Brinza.htsolution.sk/A: 'RRset exists (value dependent)' prerequisite not satisfied (NXRRSET)
Mar  9 13:18:11 hts-fw named[2100]: client 192.168.1.10#2560: update 'firma.sk/IN' denied

prava na /etc/bind su podla mna ok (vlastnik root/bin, drwxrwsr-x) firma.sk.zone a firma.sk.zonerev su bind/bind, rw pre vlastnika

dhcp:

#DDNS updates
ddns-updates-on;
ddns-update-style interim;
use-host-decl-names on;
update-static-leases on;
allow-client-updates;

key DHCP_UPDATER {
        algorithm hmac-md5;
        secret "hahaha";
}

zone 1.168.192.in-addr.arpa. {
        primary 127.0.0.1;
        key DHCP_UPDATER;
}

zone firma.sk. {
        primary 127.0.0.1;
        key DHCP_UPDATER;
}

v named.conf mam:

key DHCP_UPDATER {
        algorithm hmac-md5;
        secret "hahaha";
};

controls {
    inet 127.0.0.1 port 953
    allow {127.0.0.1;}
    keys {DHCP_UPDATER;};
};

zone "firma.sk" {
        type master;
        file "/etc/bind/firma.sk.zone";
        allow-update {key DHCP_UPDATER;};
};

zone "1.168.192.in-addr.arpa" {
        type master;
        file "/etc/bind/firma.sk.zonerev";
        allow-update {key DHCP_UPDATER;};
};

a nakoniec resolv.conf

domain firma.sk
nameserver 127.0.0.1

a v firma.zone su tieto zaznamy:

$ORIGIN .
$TTL 0  ; 0 seconds
firma.sk           IN SOA  router.firma.sk. root.firma.sk. (
20070326   ; serial
10800      ; refresh (3 hours)
1800       ; retry (30 minutes)
604800     ; expire (1 week)
900        ; minimum (15 minutes)
                                )
NS      router.firma.sk.
$ORIGIN firma.sk.

$TTL 300        ; 5 minutes
AAA    A       192.168.1.91
TXT     "31d26d21f4ce18e2af67939dca4dd11cd3"

$TTL 0  ; 0 seconds
comp1 A       192.168.1.123
comp2 A       192.168.1.122
comp3 A       192.168.1.121
router A      192.168.1.1
$TTL 300        ; 5 minutes
pc123-NB A       192.168.1.19
TXT     "310f7adc597e7fcb465bc55f5f85ea7b9c"

tie $TTL 0 som napisal natvrdo ja, AAA a pc-123 NB doplnil DHCP, ale dalsich 5 strojov, co je v rev. zone, tam nie su

Uz som precital asi milion navodov a stale nic :-(

Kde robim chybu, doparoma? :-)

Dotaz: DDNS update

Odpovědi