Re: DNSSEC, views & trusted keys...

2010-09-09 Thread Phil Mayers
On 09/10/2010 03:05 AM, Mark Andrews wrote: In message<4c891404.3000...@imperial.ac.uk>, Phil Mayers writes: On 09/09/2010 03:45 PM, Timothe Litt wrote: There is other advice in the ARM that says to put 'your organization's public keys in the trusted-keys list'. That doesn't help - and in f

Re: installing on SLES 10sp3

2010-09-09 Thread Mark Andrews
Many Linux boxes have additional security subsystems added like SELinux and you need to comply with both the filesystem and SELinux's configuration. Also named drops root permissions. Both of these issues are documented in the faq. http://

Re: DNSSEC, views & trusted keys...

2010-09-09 Thread Mark Andrews
In message <4c891404.3000...@imperial.ac.uk>, Phil Mayers writes: > On 09/09/2010 03:45 PM, Timothe Litt wrote: > > > > > There is other advice in the ARM that says to put 'your organization's > > public keys in the trusted-keys list'. That doesn't help - and in fact, > > confuses me even more s

Re: installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
wllarso wrote: > I'm not any sort of Linux expert but this started my mind thinking. > > Take a look at the BIND FAQ, it comes with the sources. There are some > Linux specific comments about file and directory permissions. Bind > running under Linux drops special 'root' permissions when it starts

Re: installing on SLES 10sp3

2010-09-09 Thread wllarso
I'm not any sort of Linux expert but this started my mind thinking. Take a look at the BIND FAQ, it comes with the sources. There are some Linux specific comments about file and directory permissions. Bind running under Linux drops special 'root' permissions when it starts up. Also, there are s

Re: installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
David Forrest wrote: On Thu, 9 Sep 2010, Lyle Giese wrote: David Forrest wrote: On Thu, 9 Sep 2010, Lyle Giese wrote: I am trying to install bind 9.7.1-P2 from source on a SLES 10 SP3 server. When I run named from the command line, it runs, but fails to open and write any of the zone file

Re: installing on SLES 10sp3

2010-09-09 Thread David Forrest
On Thu, 9 Sep 2010, Lyle Giese wrote: David Forrest wrote: On Thu, 9 Sep 2010, Lyle Giese wrote: I am trying to install bind 9.7.1-P2 from source on a SLES 10 SP3 server. When I run named from the command line, it runs, but fails to open and write any of the zone files it downloaded. name

Re: installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
David Forrest wrote: On Thu, 9 Sep 2010, Lyle Giese wrote: I am trying to install bind 9.7.1-P2 from source on a SLES 10 SP3 server. When I run named from the command line, it runs, but fails to open and write any of the zone files it downloaded. named -c /etc/named.conf (yes I am runnin

Re: DNSSEC, views & trusted keys...

2010-09-09 Thread Phil Mayers
On 09/09/2010 03:45 PM, Timothe Litt wrote: There is other advice in the ARM that says to put 'your organization's public keys in the trusted-keys list'. That doesn't help - and in fact, confuses me even more since example.net has TWO different public keys - one for each view. And trusted-key

Re: installing on SLES 10sp3

2010-09-09 Thread David Forrest
On Thu, 9 Sep 2010, Lyle Giese wrote: I am trying to install bind 9.7.1-P2 from source on a SLES 10 SP3 server. When I run named from the command line, it runs, but fails to open and write any of the zone files it downloaded. named -c /etc/named.conf (yes I am running this a root) I had

Re: installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
Lyle Giese wrote: I am not running named as named, but as root(no -u on command line). But in testng I did change the permissions on this directory to 777 with no change in behaviour and changed it back to 755. Lyle Giese LCR Computer Services, Inc. dhottin...@harrisonburg.k12.va.us wrote:

Re: installing on SLES 10sp3

2010-09-09 Thread dhottinger
Does name own the directory? Quoting Lyle Giese : I am trying to install bind 9.7.1-P2 from source on a SLES 10 SP3 server. When I run named from the command line, it runs, but fails to open and write any of the zone files it downloaded. named -c /etc/named.conf (yes I am running this a roo

installing on SLES 10sp3

2010-09-09 Thread Lyle Giese
I am trying to install bind 9.7.1-P2 from source on a SLES 10 SP3 server. When I run named from the command line, it runs, but fails to open and write any of the zone files it downloaded. named -c /etc/named.conf (yes I am running this a root) The error is Sep 9 10:40:05 linuxps named[3054

Re: Slave DNS zone problem

2010-09-09 Thread Dave Sparro
On 9/9/2010 4:43 AM, Rock July wrote: Hi All, I have a problem with one of my DNS. This DNS is configured as slave and have two masters (hosting different domains). Recently, I changed the IP of one of the master DNS then all domains under that master DNS cannot be resolved on the slave DNS altho

DNSSEC, views & trusted keys...

2010-09-09 Thread Timothe Litt
I have 9.7.1-P2 running and since it's supposed to be 'for humans', I guess I'm trying to determing if I am one. It's not going as well as hoped... :-) I have a domain - example.net, with two views, the usual 'internal' and 'external'; a third is planned. The master maintaining all the sub-domai

RE: Slave DNS zone problem

2010-09-09 Thread Philippe.Simonet
Hi just a small check : try connectivity and zone xfer by hand, just to see if an ACL in not blocking it : on the slave : dig @master.com zone.com axfr Philippe From: bind-users-bounces+philippe.simonet=swisscom@lists.isc.org [mailto:bind-users-bounces+philippe.simonet=swisscom@li

Slave DNS zone problem

2010-09-09 Thread Rock July
Hi All, I have a problem with one of my DNS. This DNS is configured as slave and have two masters (hosting different domains). Recently, I changed the IP of one of the master DNS then all domains under that master DNS cannot be resolved on the slave DNS although the zone files keeps on updating