Hello gurus, my rndc related commands in bind master with multi-views run fail,but in slave it's running correctly.
# rndc status
rndc: connection to remote host closed
This may indicate that
* the remote server is using an older version of the command protocol,
* this host is not authorized to connect,
* the clocks are not synchronized, or
* the key is invalid.
Here is the named.conf for master.
Please help,thanks in advance.
-------------
options {
     directory "/var/cache/bind";
     recursion no;
};

# ACLs begin
include "/etc/bind/tel.acl";
include "/etc/bind/uni.acl";
include "/etc/bind/edu.acl";
# ACLs end

# views for ISP begin
view "uni" {
     match-clients {
         key "unikey";
         UNI;
     };
     allow-update {key "unikey";};
     allow-transfer { key "unikey"; };
     server 202.104.186.180 { keys "unikey"; };
# zone begin uni
     zone "test.nsbeta.info" {
          type master;
          file "test.nsbeta.info.uni.db";
     };
# zone end uni
};
view "edu" {
     match-clients {
         key "edukey";
         EDU;
     };
     allow-update {key "edukey";};
     allow-transfer { key "edukey"; };
     server 202.104.186.180 { keys "edukey"; };
# zone begin edu
     zone "test.nsbeta.info" {
          type master;
          file "test.nsbeta.info.edu.db";
     };
# zone end edu
};
view "tel" {
     match-clients {
         key "telkey";
         any;
     };
     allow-update {key "telkey";};
     allow-transfer { key "telkey"; };
     server 202.104.186.180 { keys "telkey"; };
# zone begin tel
     zone "test.nsbeta.info" {
          type master;
          file "test.nsbeta.info.tel.db";
     };
# zone end tel
};
# views for ISP end

# rndc key begin
key "rndc-key" {
     algorithm hmac-md5;
     secret "SUpgZRkpZVeteRiTIxQw6w==";
};
controls {
     inet 127.0.0.1 port 953
             allow { 127.0.0.1; } keys { "rndc-key"; };
};
# rndc key end
# customized keys begin
key "edukey" {
     algorithm hmac-md5;
     secret "***";
};
key "unikey" {
     algorithm hmac-md5;
     secret "***";
};
key "telkey" {
     algorithm hmac-md5;
     secret "***";
};
# customized keys end
_______________________________________________
bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to