>Hi list,
>
>I have got the following issue. I have added the following settings in
>named.conf but am unable to get it working. If I read the man page it
>seems that what I have put in is completely correct.
>
>REason to put it in is that I want the DHCP server to automatically update
>the DNS zone.
>
>the error I get is:
>
>Nov 30 14:09:31 hulk named[6848]: reloading configuration failed: failure
>Nov 30 14:09:45 hulk named[6848]: /etc/namedb/named.conf:20: expected
>'allow' near ';'
>Nov 30 14:09:45 hulk named[6848]: reloading configuration failed:
>unexpected token
>
>head -n 25 /etc/named/named.conf
># generated with dnssec-keygen -a HMAC-MD5 -b 128 -n USER DHCP_UPDATER
>key DHCP_UPDATER {
> algorithm HMAC-MD5.SIG-ALG.REG.INT;
> secret hashedstring==;
> };
>
>acl "home" {10.202.77.0/24;127.0.0.1;};
>
>options {
> // Relative to the chroot directory, if any
> directory "/etc/namedb";
> pid-file "/var/run/named/pid";
> dump-file "/var/dump/named_dump.db";
> statistics-file "/var/stats/named.stats";
> allow-query {"home"; };
>
>};
>
>controls {
> inet 127.0.0.1 port 953;
>allow { 127.0.0.1;10.202.77.110; } keys { "DHCP_UPDATER"; };
>};
>
>Line 20 is where controls start.
>
>Any help much appreciated.
>
>rgds,
>
>Patrick
Patrick,
When you update your named.conf file, make sure you run a syntax check
before (re)starting named. Here's how you do it:
named-checkconf /path/to/your/named.conf && echo $?
If echo returns zero, then you're good to go. Otherwise, fix whatever
problem is displayed.
In your case, you need to remove one semi-colomn (";") to fix your
problem. Here's what your control statement should look like:
controls {
inet 127.0.0.1 port 953 allow { 127.0.0.1;10.202.77.110; }
keys { "DHCP_UPDATER"; };
};
Cheers,
David
--
David Robillard
UNIX systems administrator & Oracle DBA
CISSP, RHCE & Sun Certified Security Administrator
Montreal: +1 514 966 0122
_______________________________________________
freebsd-questions@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
