Re: Checking for zone expiration?
Warren, I wrote a tool to do this a while back -- http://code.google.com/p/dns-slave-expire-checker/ Cool stuff and very useful. I took it for a tiny spin, and here are my EUR 0.02 :) 1. Doesn't seem to grok all RRtypes in slave zones, due probably to missing functionality of dnspython; the following diagnostic on a zone containing a KEY RR: Unable to parse /var/named/jpmens.org: /var/named/jpmens.org:107: generic rdata does not start with \# 2. The program should perhaps ignore non-zone files (e.g. *.key, *.jnl, *.jbk), although that can be influenced with `-f'... In particular, directories ought to either be skipped or descended into. 3. Parsing of large zone files takes quite a while... (dnspython) 4. I spent a bit of time debugging becausse a slave zone wouldn't parse: dnspython raised a dns.zone.NoSOA exception. Only *after* debugging, did I read the FM to discover that zone file-names are origin names; maybe add this a bit more prominently to the top of the fine manual? :) Regards, -JP ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Checking for zone expiration?
On May 21 2012, Alan Batie wrote: We had a rather key zone mysteriously expire on a slave this morning - the log files show a transfer a couple weeks ago, but it hadn't been updated so there was no reason for one since and there were no log entries about failed connection attempts. On 21.05.12 22:27, Chris Thompson wrote: Do you have try-tcp-refresh no in your named.conf options? If so, and the slave had lost connectivity with the master, the SOA lookups failing would not have triggered a transfer attempt and so you would not see any xfer-in errors. Isn't there anything other that will trigger transfer attempt, or is it useless in such case? -- Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/ Warning: I wish NOT to receive e-mail advertising to this address. Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu. If Barbie is so popular, why do you have to buy her friends? ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Bind9.9.1 Dependences
How can I find out which Unix files/libraries bind requires before I do the compile? Thanks John Manson CAO/HIR/NI Data-Communications | U.S. House of Representatives | Washington, DC 20515 Desk: 202-226-4244 | Team: 202-225-5552 | john.man...@mail.house.gov ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Bind9.9.1 Dependences
How can I find out which Unix files/libraries bind requires before I do the compile? Thanks I am not sure of the question but here is my best response: assume you need openssl, libiconv, gnu gettext, libxml2 you may also want libidn and a few others. Does this help? Dennis -- -- http://pgp.mit.edu:11371/pks/lookup?op=vindexsearch=0x1D936C72FA35B44B +-+---+ | Dennis Clarke | Solaris and Linux and Open Source | | dcla...@blastwave.org | Respect for open standards. | +-+---+ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
RE: Bind9.9.1 Dependences
Yes It would help if you could add the version of each listed below. What are the 'few others? Thanks -Original Message- From: Dennis Clarke [mailto:dcla...@blastwave.org] Sent: Tuesday, May 22, 2012 12:14 PM To: Manson, John Cc: 'bind-users@lists.isc.org' Subject: Re: Bind9.9.1 Dependences How can I find out which Unix files/libraries bind requires before I do the compile? Thanks I am not sure of the question but here is my best response: assume you need openssl, libiconv, gnu gettext, libxml2 you may also want libidn and a few others. Does this help? Dennis -- -- http://pgp.mit.edu:11371/pks/lookup?op=vindexsearch=0x1D936C72FA35B44B +-+---+ | Dennis Clarke | Solaris and Linux and Open Source | | dcla...@blastwave.org | Respect for open standards. | +-+---+ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
RE: Bind9.9.1 Dependences
How can I find out which Unix files/libraries bind requires before I do the compile? I have successfully built Bind 9.9.1 on Ubuntu 12.04 LTS (Precise Pangolin). Since Ubuntu comes with a previous version of the Bind 9 utilities installed, I uninstall the following packages: apt-get purge bind9-host dnsutils libbind9-80 libdns81 libisc83 libisccc80 libisccfg82 liblwres80 To be able to build bind9, I install the following tools for building software packages: apt-get install build-essential autoconf libtool pkg-config Bind9 has a dependency on OpenSSL: apt-get install libssl-dev After that you should be able to download Bind 9.9.1, configure, make, and make install. See bind-9.9.1/README for info on options to configure. Hopefully this provides some general guidance regardless of distribution. I have a script and some ancillary files that I can send you if you are in fact using Ubuntu 12.04 LTS. Jeffry A. Spain Network Administrator Cincinnati Country Day School ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Bind9.9.1 Dependences
How can I find out which Unix files/libraries bind requires before I do the compile? configure will complain if you're missing anything critical. BIND 9 has relatively few dependencies other than a C compiler and POSIX-compliant system libraries. You need openssl if you want to use crypto; libxml2 if you want XML-based statistics; perl if you want to run the tests, and some of the tests specifically want Net::DNS. I can't think of anything else, offhand. (I'm assuming you mean BIND 9. BIND 10 has a longer list.) -- Evan Hunt -- e...@isc.org Internet Systems Consortium, Inc. ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
Re: Bind9.9.1 Dependences
How can I find out which Unix files/libraries bind requires before I do the compile? configure will complain if you're missing anything critical. BIND 9 has relatively few dependencies other than a C compiler and POSIX-compliant system libraries. You need openssl if you want to use crypto; libxml2 if you want XML-based statistics; perl if you want to run the tests, and some of the tests specifically want Net::DNS. I can't think of anything else, offhand. (I'm assuming you mean BIND 9. BIND 10 has a longer list.) Here is what I see : root@testy:~# rndc -s 127.0.0.1 -p 953 -k /usr/local/mm/etc/rndc.key status version: 9.8.3 CPUs found: 1 worker threads: 1 number of zones: 19 debug level: 0 xfers running: 0 xfers deferred: 0 soa queries in progress: 0 query logging is OFF recursive clients: 0/0/1000 tcp clients: 0/100 server is up and running root@testy:~# readelf -d /usr/local/mm/sbin/named Dynamic section at offset 0x9d380 contains 34 entries: TagType Name/Value 0x0001 (NEEDED) Shared library: [liblwres.so.80] 0x0001 (NEEDED) Shared library: [libdns.so.81] 0x0001 (NEEDED) Shared library: [libbind9.so.80] 0x0001 (NEEDED) Shared library: [libisccfg.so.82] 0x0001 (NEEDED) Shared library: [libcrypto.so.0.9.8] 0x0001 (NEEDED) Shared library: [libisccc.so.80] 0x0001 (NEEDED) Shared library: [libisc.so.83] 0x0001 (NEEDED) Shared library: [libpthread.so.0] 0x0001 (NEEDED) Shared library: [libxml2.so.2] 0x0001 (NEEDED) Shared library: [libdl.so.2] 0x0001 (NEEDED) Shared library: [libz.so.1] 0x0001 (NEEDED) Shared library: [libiconv.so.2] 0x0001 (NEEDED) Shared library: [libm.so.6] 0x0001 (NEEDED) Shared library: [libc.so.6] 0x000f (RPATH) Library rpath: [/usr/local/mm/lib] 0x000c (INIT) 0x412cd8 0x000d (FINI) 0x489878 0x0004 (HASH) 0x400240 0x0005 (STRTAB) 0x4079c8 0x0006 (SYMTAB) 0x401a58 0x000a (STRSZ) 19400 (bytes) 0x000b (SYMENT) 24 (bytes) 0x0015 (DEBUG) 0x0 0x0003 (PLTGOT) 0x69d960 0x0002 (PLTRELSZ) 21648 (bytes) 0x0014 (PLTREL) RELA 0x0017 (JMPREL) 0x40d848 0x0007 (RELA) 0x40cdf8 0x0008 (RELASZ) 2640 (bytes) 0x0009 (RELAENT)24 (bytes) 0x6ffe (VERNEED)0x40cd88 0x6fff (VERNEEDNUM) 3 0x6ff0 (VERSYM) 0x40c590 0x (NULL) 0x0 Most of those NEEDed items are from the bind package so that is a non-issue. libcrypto.so.0.9.8 is from openssl and libxml2.so.2 is what it is. libz.so.1 and libiconv.so.2 are pretty obvious. I thinks that is all that one would want or need. Dennis -- -- http://pgp.mit.edu:11371/pks/lookup?op=vindexsearch=0x1D936C72FA35B44B +-+---+ | Dennis Clarke | Solaris and Linux and Open Source | | dcla...@blastwave.org | Respect for open standards. | +-+---+ ___ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users