?
Solved

unable to create A or PTR records using nsupdate for ddns

Posted on 2011-10-08
8
Medium Priority
?
1,624 Views
Last Modified: 2012-06-22
Dear Experts:

configured ddns using dhcp and bind packages static and dynamic zones are placed separately and also services are running fine , when try to add the A and PTR records using nsupdate iam not able to do so, please find the below log for your reference and help me to resolve. Thanks in advance.

$ sudo nsupdate -l
> update add ind.shriramdb.com 300 in a 192.168.1.96
> show
Outgoing update query:
;; ->>HEADER<<- opcode: UPDATE, status: NOERROR, id:      0
;; flags: ; ZONE: 0, PREREQ: 0, UPDATE: 0, ADDITIONAL: 0
;; UPDATE SECTION:
ind.shriramdb.com.      300     IN      A       192.168.1.96

> send
update failed: REFUSED


 netstat -tanup
(No info could be read for "-p": geteuid()=1000 but you should be root.)
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 192.168.1.244:53        0.0.0.0:*               LISTEN      -
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      -
tcp        0      0 0.0.0.0:22              0.0.0.0:*               LISTEN      -
tcp        0      0 127.0.0.1:953           0.0.0.0:*               LISTEN      -
tcp        0      0 192.168.1.244:22        223.178.150.5:1143      ESTABLISHED -
tcp6       0      0 :::53                   :::*                    LISTEN      -
tcp6       0      0 :::22                   :::*                    LISTEN      -
udp        0      0 192.168.1.244:53        0.0.0.0:*                           -
udp        0      0 127.0.0.1:53            0.0.0.0:*                           -
udp        0      0 0.0.0.0:67              0.0.0.0:*                           -
udp        0      0 192.168.1.244:123       0.0.0.0:*                           -
udp        0      0 127.0.0.1:123           0.0.0.0:*                           -
udp        0      0 0.0.0.0:123             0.0.0.0:*                           -
udp6       0      0 :::53                   :::*                                -
udp6       0      0 fe80::250:56ff:fe9a:123 :::*                                -
udp6       0      0 ::1:123                 :::*                                -
udp6       0      0 :::123                  :::*                                -
--------------------------------------                                                                                                                


0
Comment
Question by:D_wathi
  • 5
  • 3
8 Comments
 
LVL 21

Expert Comment

by:Papertrip
ID: 36936303
Do you have the following line in the zone config block you are trying to update?
update-policy local;

Open in new window

0
 
LVL 21

Expert Comment

by:Papertrip
ID: 36936332
Do you have the following line in the zone config block you are trying to update?
Could have phrased that better...

Do you have the following line in the zone config block for the zone you are trying to update?
update-policy local;

Open in new window

0
 

Author Comment

by:D_wathi
ID: 36937121
Sir, thanks for the reply, when added  update-policy local;  
--------------------/etc/bind/named.conf.local-------------------
//## dynamic zones (updated by DDNS) ##

zone "dyn.shriramdb.com" {
        type master;
        file "/var/cache/bind/dynamic/db.dyn.shriramdb.com";
        update-policy local;
        allow-update { key "ddns-key"; };
};

zone "rev.1.168.192.in-addr.arpa" {
        type master;
        notify no;
        file "/var/cache/bind/dynamic/rev.1.168.192.in-addr.arpa";
        update-policy local;
        allow-update { key "ddns-key"; };
-------------------------------------------------------------------------------------------------
Bind does not start , for your reference posted below the /var/log/syslog
Oct  9 03:43:56 lampsrv named[7647]: adjusted limit on open files from 1024 to 1048576
Oct  9 03:43:56 lampsrv named[7647]: found 4 CPUs, using 4 worker threads
Oct  9 03:43:56 lampsrv named[7647]: using up to 4096 sockets
Oct  9 03:43:56 lampsrv named[7647]: loading configuration from '/etc/bind/named.conf'
Oct  9 03:43:56 lampsrv named[7647]: /etc/bind/named.conf.local:33: zone 'dyn.shriramdb.com': 'allow-update' is ignored when 'update-policy' is present
Oct  9 03:43:56 lampsrv named[7647]: /etc/bind/named.conf.local:41: zone 'rev.1.168.192.in-addr.arpa': 'allow-update' is ignored when 'update-policy' is present
Oct  9 03:43:56 lampsrv named[7647]: loading configuration: failure
Oct  9 03:43:56 lampsrv named[7647]: exiting (due to fatal error)
-------------------------------------------------
Please help to resolve this.

0
What Security Threats Are We Predicting for 2018?

Cryptocurrency, IoT botnets, MFA, and more! Hackers are already planning their next big attacks for 2018. Learn what you might face, and how to defend against it with our 2018 security predictions.

 
LVL 21

Expert Comment

by:Papertrip
ID: 36937130
The error says it all, you can't have both in the same zone config.

I said to add only 'update-policy local;' to only the zones you have to update yourself (not DDNS zones).  You are trying to add a record to shriramdb.com, yet you added update-policy to dyn.shriramdb.com.
0
 
LVL 21

Accepted Solution

by:
Papertrip earned 2000 total points
ID: 36937238
If you want to be able to update a zone from the localhost and the dhcpd server, you can use allow-update instead.

allow-update { localhost; key "ddns-key"; };

Open in new window


I recommend keeping the zones that dhcpd updates separate from "normal" dynamic zones, although that is not required.
0
 

Author Comment

by:D_wathi
ID: 36937241
Sir, Thank you very much. it is working now. Again great support thanks a lot.
0
 
LVL 21

Expert Comment

by:Papertrip
ID: 36937265
Awesome.

I look forward to your next question :)
0
 

Author Closing Comment

by:D_wathi
ID: 36941778
really really great support.
0

Featured Post

Granular recovery for Microsoft Exchange

With Veeam Explorer for Microsoft Exchange you can choose the Exchange Servers and restore points you’re interested in, and Veeam Explorer will present the contents of those mailbox stores for browsing, searching and exporting.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Most DNS problems are VERY easily troubleshot and identifiable if you can follow the steps a DNS query takes. I would like to share the step-by-step a DNS query takes from the origin to the destination. _____________________________________________…
I have seen several blogs and forum entries elsewhere state that because NTFS volumes do not support linux ownership or permissions, they cannot be used for anonymous ftp upload through the vsftpd program.   IT can be done and here's how to get i…
Integration Management Part 2
If you're a developer or IT admin, you’re probably tasked with managing multiple websites, servers, applications, and levels of security on a daily basis. While this can be extremely time consuming, it can also be frustrating when systems aren't wor…
Suggested Courses

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question