Configuring Domain Name Server On AIX 7.1

最新推荐文章于 2022-06-30 10:50:32 发布

weixin_33725722

最新推荐文章于 2022-06-30 10:50:32 发布

阅读量366

点赞数

文章标签：网络运维

本文链接：https://blog.csdn.net/weixin_33725722/article/details/85079903

版权

In this article,you will be learn how to configure Domain Name Server on IBM AIX.Before you do,ensure that the bind package was installed.

[root@dbserv1 named]# named -v
named: continuing without SRC support
BIND 9.4.1
[root@dbserv1 named]# lslpp -w /usr/sbin/named
文件文件集类型
----------------------------------------------------------------------------
/usr/sbin/named bos.net.tcp.server Symlink

一.Configuring The Master DNS Server:

1.Make the rndc.conf file:

If you want to manage DNS by rndc command,ensure that the rndc.conf or rndc.key are exist.If them aren't exist,use following command to make it.

[root@dbserv1 named]# rndc-confgen >/etc/rndc.conf

2.Create /etc/named.conf：

options {
listen-on port 53 { 127.0.0.1;172.16.255.11; };
directory "/etc/named";
};
zone "." IN {
type hint;
file "named.ca";
};
zone "xzxj.edu.cn" in {
type master;
file "named.xzxj.data";
};
zone "255.16.172.in-addr.arpa" in {
type master;
file "named.xzxj.rev";
};
zone "0.0.127.in-addr.arpa" in {
type master;
file "named.local";
};
zone "localdomain" IN {
type master;
file "localdomain.zone";
};
zone "localhost" IN {
type master;
file "localhost.zone";
};
zone "255.in-addr.arpa" IN {
type master;
file "named.broadcast";
};
zone "0.in-addr.arpa" IN {
type master;
file "named.zero";
};
logging {
channel syslog_errors { // this channel will send errors or
syslog user; // or worse to syslog (user facility)
severity error;
};
channel audit_log {
file "named.log" versions 3 size 20m;
severity info;
print-time yes;
print-category yes;
};
category default { audit_log; };
category general { audit_log; };
category security { audit_log; default_syslog; };
category config { default_syslog; };
category resolver { audit_log; };
category xfer-in { audit_log; };
category xfer-out { audit_log; };
category notify { audit_log; };
category client { audit_log; };
category network { audit_log; };
category update { audit_log; };
category queries { audit_log; };
category lame-servers { audit_log; };
};

3.Append following lines to named.conf and uncomment them：

[root@dbserv1 named]# tail -10 /etc/rndc.conf>>/etc/named.conf
[root@dbserv1 named]# tail -10 /etc/named.conf
key "rndc-key" {
algorithm hmac-md5;
secret "ExxtiKY7VCbCJQew9fVsMA==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};

4.Create named home directory:

[root@dbserv1 named]#mkdir /etc/named
[root@dbserv1 named]#touch /etc/named/named.log

5.Create zones file:

The named.xzxj.data file:

[root@dbserv1 named]# cat named.xzxj.data
$TTL 86400
@ IN SOA dbserv1.xzxj.edu.cn. root (
2012070100 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS dbserv1.xzxj.edu.cn.
IN MX 10 mail.xzxj.edu.cn.
xzxj.edu.cn. IN A 172.16.255.11
mail IN A 172.16.255.11
dbserv1 IN A 172.16.255.11
dbserv2 IN A 172.16.255.13

The named.xzxj.rev file:

[root@dbserv1 named]# cat named.xzxj.rev
$TTL 86400
@ IN SOA dbserv1.xzxj.edu.cn. root (
2012070100 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS dbserv1.xzxj.edu.cn.
IN MX 70 mail.xzxj.edu.cn.
11 IN PTR mail.xzxj.edu.cn.
IN PTR dbserv1.xzxj.edu.cn.
13 IN PTR dbserv2.xzxj.edu.cn.

The localhost.zone file:

[root@dbserv1 named]# cat localhost.zone
$TTL 86400
@ IN SOA @ root (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS @
IN A 127.0.0.1
IN AAAA ::1

The localdomain.zone file:

[root@dbserv1 named]# cat localdomain.zone
$TTL 86400
@ IN SOA localhost root (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS localhost
localhost IN A 127.0.0.1

The named.local file:

[root@dbserv1 named]# cat named.local
$TTL 86400
@ IN SOA localhost. root.localhost. (
2012070100 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS localhost.
1 IN PTR localhost.

The named.broadcast file:

[root@dbserv1 named]# cat named.broadcast
$TTL 86400
@ IN SOA localhost. root.localhost. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS localhost.

The named.zero file:

[root@dbserv1 named]# cat named.zero
$TTL 86400
@ IN SOA localhost. root.localhost. (
42 ; serial (d. adams)
3H ; refresh
15M ; retry
1W ; expiry
1D ) ; minimum
IN NS localhost.

The named.ca file:

[root@dbserv1 named]# cat named.ca
; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> -t NS .
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42043
;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 518230 IN NS l.root-servers.net.
. 518230 IN NS m.root-servers.net.
. 518230 IN NS a.root-servers.net.
. 518230 IN NS b.root-servers.net.
. 518230 IN NS c.root-servers.net.
. 518230 IN NS d.root-servers.net.
. 518230 IN NS e.root-servers.net.
. 518230 IN NS f.root-servers.net.
. 518230 IN NS g.root-servers.net.
. 518230 IN NS h.root-servers.net.
. 518230 IN NS i.root-servers.net.
. 518230 IN NS j.root-servers.net.
. 518230 IN NS k.root-servers.net.
;; ADDITIONAL SECTION:
a.root-servers.net. 604630 IN A 198.41.0.4
a.root-servers.net. 604630 IN AAAA 2001:503:ba3e::2:30
b.root-servers.net. 604630 IN A 192.228.79.201
c.root-servers.net. 604630 IN A 192.33.4.12
d.root-servers.net. 604630 IN A 128.8.10.90
e.root-servers.net. 604630 IN A 192.203.230.10
f.root-servers.net. 604630 IN A 192.5.5.241
f.root-servers.net. 604630 IN AAAA 2001:500:2f::f
g.root-servers.net. 604630 IN A 192.112.36.4
h.root-servers.net. 604630 IN A 128.63.2.53
h.root-servers.net. 604630 IN AAAA 2001:500:1::803f:235
i.root-servers.net. 604630 IN A 192.36.148.17
j.root-servers.net. 604630 IN A 192.58.128.30
j.root-servers.net. 604630 IN AAAA 2001:503:c27::2:30

After created above files,then start named:

[root@dbserv1 named]# startsrc -s named
0513-059 已启动“named 子系统”。子系统 PID 为 3670234。
[root@dbserv1 named]# l***c -ls named
Subsystem Group PID Status
named tcpip 3670234 活动的
Debug Inactive
Type Zone Source File or Host
master xzxj.edu.cn named.xzxj.data
master 255.16.172.in-addr.arpa named.xzxj.rev
master 0.0.127.in-addr.arpa named.local
master localdomain localdomain.zone
master localhost localhost.zone
master 255.in-addr.arpa named.broadcast
master 0.in-addr.arpa named.zero

6.Edit the resolv.conf:

[root@dbserv1 named]# cat /etc/resolv.conf
nameserver 172.16.255.11
domain xzxj.edu.cn
search xzxj.edu.cn

7.Testing:

[root@dbserv1 named]# host dbserv1
dbserv1.xzxj.edu.cn 是 172.16.255.11
[root@dbserv1 named]# host dbserv2
dbserv2.xzxj.edu.cn 是 172.16.255.13
[root@dbserv1 named]# dig -x 172.16.255.11
; <<>> DiG 9.4.1 <<>> -x 172.16.255.11
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 201
;; flags: qr aa rd ra; QUERY: 1, ANSWER: 2, AUTHORITY: 1, ADDITIONAL: 1
;; QUESTION SECTION:
;11.255.16.172.in-addr.arpa. IN PTR
;; ANSWER SECTION:
11.255.16.172.in-addr.arpa. 86400 IN PTR mail.xzxj.edu.cn.
11.255.16.172.in-addr.arpa. 86400 IN PTR dbserv1.xzxj.edu.cn.
;; AUTHORITY SECTION:
255.16.172.in-addr.arpa. 86400 IN NS dbserv1.xzxj.edu.cn.
;; ADDITIONAL SECTION:
dbserv1.xzxj.edu.cn. 86400 IN A 172.16.255.11
;; Query time: 1 msec
;; SERVER: 172.16.255.11#53(172.16.255.11)
;; WHEN: Sun Jul 1 15:43:50 2012
;; MSG SIZE rcvd: 126

8.The named log output like this:

[root@dbserv1 /]# tail -f /etc/named/named.log
01- 7月-2012 15时39分56秒.615 general: zone 0.in-addr.arpa/IN: loaded serial 42
01- 7月-2012 15时39分56秒.616 general: zone 0.0.127.in-addr.arpa/IN: loaded serial 2012070100
01- 7月-2012 15时39分56秒.618 general: zone 255.16.172.in-addr.arpa/IN: loaded serial 2012070100
01- 7月-2012 15时39分56秒.619 general: zone 255.in-addr.arpa/IN: loaded serial 42
01- 7月-2012 15时39分56秒.620 general: zone xzxj.edu.cn/IN: loaded serial 2012070100
01- 7月-2012 15时39分56秒.621 general: zone localdomain/IN: loaded serial 42
01- 7月-2012 15时39分56秒.622 general: zone localhost/IN: loaded serial 42
01- 7月-2012 15时39分56秒.623 general: running
01- 7月-2012 15时43分43秒.753 queries: client 172.16.255.11#33573: query: dbserv1.xzxj.edu.cn IN A +
01- 7月-2012 15时43分45秒.408 queries: client 172.16.255.11#33574: query: dbserv2.xzxj.edu.cn IN A +
01- 7月-2012 15时43分50秒.134 queries: client 172.16.255.11#33575: query: 11.255.16.172.in-addr.arpa IN PTR +

9.Using rndc command:

[root@dbserv1 named]# rndc reload
server reload successful
[root@dbserv1 named]# rndc status
number of zones: 7
debug level: 0
xfers running: 0
xfers deferred: 0
soa queries in progress: 0
query logging is ON
recursive clients: 0/0/1000
tcp clients: 0/100
server is up and running

二.Configure The Slave DNS Server:

1.Make the rndc.conf file:

[root@dbserv2 named]# rndc-confgen >/etc/rndc.conf
[root@dbserv2 named]#tail -10 /etc/rndc.conf >/etc/named.conf

2.Edit the named.conf file:

[root@dbserv2 named]# cat /etc/named.conf
options {
listen-on port 53 { 127.0.0.1;172.16.255.11; };
directory "/etc/named";
};
zone "." IN {
type hint;
file "named.ca";
};
zone "xzxj.edu.cn" IN {
type slave;
file "named.xzxj.data.bak";
masters { 172.16.255.11; };
};
zone "255.16.172.in-addr.arpa" IN {
type slave;
file "named.xzxj.rev.bak";
masters { 172.16.255.11; };
};
zone "0.0.127.in-addr.arpa" in {
type master;
file "named.local";
};
logging {
channel syslog_errors { // this channel will send errors or
syslog user; // or worse to syslog (user facility)
severity error;
};
channel audit_log {
file "named.log" versions 3 size 20m;
severity info;
print-time yes;
print-category yes;
};
category default { audit_log; };
category general { audit_log; };
category security { audit_log; default_syslog; };
category config { default_syslog; };
category resolver { audit_log; };
category xfer-in { audit_log; };
category xfer-out { audit_log; };
category notify { audit_log; };
category client { audit_log; };
category network { audit_log; };
category update { audit_log; };
category queries { audit_log; };
category lame-servers { audit_log; };
};
key "rndc-key" {
algorithm hmac-md5;
secret "5xl+9GORa0hrur3AmakrXQ==";
};
controls {
inet 127.0.0.1 port 953
allow { 127.0.0.1; } keys { "rndc-key"; };
};

3.Create zone files:

The named.local file:

[root@dbserv2 named]# cat named.local
$TTL 86400
@ IN SOA localhost. root.localhost. (
2012070100 ; Serial
28800 ; Refresh
14400 ; Retry
3600000 ; Expire
86400 ) ; Minimum
IN NS localhost.
1 IN PTR localhost.

The named.ca file:

[root@dbserv2 named]# cat named.ca
; <<>> DiG 9.3.6-P1-RedHat-9.3.6-4.P1.el5_4.2 <<>> -t NS .
;; global options: printcmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 42043
;; flags: qr rd ra; QUERY: 1, ANSWER: 13, AUTHORITY: 0, ADDITIONAL: 14
;; QUESTION SECTION:
;. IN NS
;; ANSWER SECTION:
. 518230 IN NS l.root-servers.net.
. 518230 IN NS m.root-servers.net.
. 518230 IN NS a.root-servers.net.
. 518230 IN NS b.root-servers.net.
. 518230 IN NS c.root-servers.net.
. 518230 IN NS d.root-servers.net.
. 518230 IN NS e.root-servers.net.
. 518230 IN NS f.root-servers.net.
. 518230 IN NS g.root-servers.net.
. 518230 IN NS h.root-servers.net.
. 518230 IN NS i.root-servers.net.
. 518230 IN NS j.root-servers.net.
. 518230 IN NS k.root-servers.net.
;; ADDITIONAL SECTION:
a.root-servers.net. 604630 IN A 198.41.0.4
a.root-servers.net. 604630 IN AAAA 2001:503:ba3e::2:30
b.root-servers.net. 604630 IN A 192.228.79.201
c.root-servers.net. 604630 IN A 192.33.4.12
d.root-servers.net. 604630 IN A 128.8.10.90
e.root-servers.net. 604630 IN A 192.203.230.10
f.root-servers.net. 604630 IN A 192.5.5.241
f.root-servers.net. 604630 IN AAAA 2001:500:2f::f
g.root-servers.net. 604630 IN A 192.112.36.4
h.root-servers.net. 604630 IN A 128.63.2.53
h.root-servers.net. 604630 IN AAAA 2001:500:1::803f:235
i.root-servers.net. 604630 IN A 192.36.148.17
j.root-servers.net. 604630 IN A 192.58.128.30
j.root-servers.net. 604630 IN AAAA 2001:503:c27::2:30

4.Make named logfile:

[root@dbserv2 named]# touch /etc/named/named.log

5.Start the named server:

[root@dbserv2 named]# startsrc -s named
[root@dbserv2 named]# l***c -ls named
Subsystem Group PID Status
named tcpip 5570784 活动的
Debug Inactive
Type Zone Source File or Host
slave xzxj.edu.cn named.xzxj.data.bak
slave 255.16.172.in-addr.arpa named.xzxj.rev.bak
master 0.0.127.in-addr.arpa named.local

After started named,the master zone file will be transfer to slave server:

01- 7月-2012 15时18分21秒.625 queries: client 172.16.255.13#33816: query: xzxj.edu.cn IN SOA -E
01- 7月-2012 15时18分21秒.724 queries: client 172.16.255.13#32902: query: xzxj.edu.cn IN AXFR -
01- 7月-2012 15时18分21秒.741 xfer-out: client 172.16.255.13#32902: transfer of 'xzxj.edu.cn/IN': AXFR started
01- 7月-2012 15时18分21秒.744 xfer-out: client 172.16.255.13#32902: transfer of 'xzxj.edu.cn/IN': AXFR ended
01- 7月-2012 15时18分22秒.096 queries: client 172.16.255.13#33816: query: 255.16.172.in-addr.arpa IN SOA -E
01- 7月-2012 15时18分22秒.125 queries: client 172.16.255.13#32903: query: 255.16.172.in-addr.arpa IN AXFR -
01- 7月-2012 15时18分22秒.125 xfer-out: client 172.16.255.13#32903: transfer of '255.16.172.in-addr.arpa/IN': AXFR started
01- 7月-2012 15时18分22秒.125 xfer-out: client 172.16.255.13#32903: transfer of '255.16.172.in-addr.arpa/IN': AXFR ended
01- 7月-2012 15时19分52秒.595 queries: client 172.16.255.11#33564: query: 11.255.16.172.in-addr.arpa IN PTR +