LinuxForum.Fans
Тема

Rndc: connect failed: 127.0.0.1#953: connection refused

Автор: sagvir 6 сообщений 9561 просмотров
#135837

Добрый вечер форумчане, заранее извеняюсь если такая тема существует. Написать проблему я решил посетив множество сайтов а так же ответов на данную ошибку, но хотелось бы разобрать именно мой пример, так как те ответы мне не помогли.
Система Debian Squeeze6 релиз,named -v: BIND 9.7.2-P3
[console]
/etc/resolv.conf
search mailserver
nameserver 127.0.0.1
/etc/hosts # For loopbacking.
127.0.0.1 localhost.localdomain localhost
192.168.2.254 mailserver.example mailserver
192.168.1.254 #dns-server который смотрит во внешку
/etc/network/interfaces
allow-hotplug eth0
iface eth0 inet static
address 192.168.1.200
netmask 255.255.255.0
network 192.168.1.0
broadcast 192.168.1.255
gateway 192.168.1.254
allow-hotplug eth1
iface eth1 inet static
address 192.168.2.254
netmask 255.255.255.0
network 192.168.2.0
broadcast 192.168.2.255
ps aux | grep named
bind 4540 0.0 0.3 144108 13200 ? Ssl 02:08 0:00 /usr/sbin/named -u bind
root 4558 0.0 0.0 8712 848 pts/0 S+ 02:11 0:00 grep named
[/console]
less /var/log/daemon.log | grep named

text

[*]ar  4 02:08:47 mailserver named[4540]: starting BIND 9.7.2-P3 -u bind
Mar  4 02:08:47 mailserver named[4540]: built with '--prefix=/usr' '--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' '--localstatedir=/var' '--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' '--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' '--with-dlz-postgres=no' '--with-dlz-mysql=no' '--with-dlz-bdb=yes' '--with-dlz-filesystem=yes' '--with-dlz-ldap=yes' '--with-dlz-stub=yes' '--with-geoip=/usr' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2' 'LDFLAGS=' 'CPPFLAGS='
Mar  4 02:08:47 mailserver named[4540]: adjusted limit on open files from 1024 to 1048576
Mar  4 02:08:47 mailserver named[4540]: found 4 CPUs, using 4 worker threads
Mar  4 02:08:47 mailserver named[4540]: using up to 4096 sockets
Mar  4 02:08:47 mailserver named[4540]: loading configuration from '/etc/bind/named.conf'
Mar  4 02:08:47 mailserver named[4540]: reading built-in trusted keys from file '/etc/bind/bind.keys'
Mar  4 02:08:47 mailserver named[4540]: using default UDP/IPv4 port range: [1024, 65535]
Mar  4 02:08:47 mailserver named[4540]: using default UDP/IPv6 port range: [1024, 65535]
Mar  4 02:08:47 mailserver named[4540]: listening on IPv4 interface lo, 127.0.0.1#53
Mar  4 02:08:47 mailserver named[4540]: listening on IPv4 interface eth1, 192.168.2.254#53
Mar  4 02:08:47 mailserver named[4540]: generating session key for dynamic DNS
Mar  4 02:08:47 mailserver named[4540]: set up managed keys zone for view _default, file 'managed-keys.bind'
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 254.169.IN-ADDR.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 100.51.198.IN-ADDR.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 113.0.203.IN-ADDR.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: D.F.IP6.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 8.E.F.IP6.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 9.E.F.IP6.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: A.E.F.IP6.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: B.E.F.IP6.ARPA
Mar  4 02:08:47 mailserver named[4540]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
Mar  4 02:08:47 mailserver named[4540]: none:0: open: /etc/bind/rndc.key: permission denied
Mar  4 02:08:47 mailserver named[4540]: couldn't add command channel 127.0.0.1#953: permission denied
Mar  4 02:08:47 mailserver named[4540]: none:0: open: /etc/bind/rndc.key: permission denied
Mar  4 02:08:47 mailserver named[4540]: couldn't add command channel ::1#953: permission denied
Mar  4 02:08:47 mailserver named[4540]: the working directory is not writable
Mar  4 02:08:47 mailserver named[4540]: zone 0.in-addr.arpa/IN: loaded serial 1
Mar  4 02:08:47 mailserver named[4540]: zone 127.in-addr.arpa/IN: loaded serial 1
Mar  4 02:08:47 mailserver named[4540]: zone 255.in-addr.arpa/IN: loaded serial 1
Mar  4 02:08:47 mailserver named[4540]: zone example/IN: loaded serial 2011030202
Mar  4 02:08:47 mailserver named[4540]: zone localhost/IN: loaded serial 2
Mar  4 02:08:47 mailserver named[4540]: managed-keys-zone ./IN: loading from master file managed-keys.bind failed: file not found
Mar  4 02:08:47 mailserver named[4540]: managed-keys-zone ./IN: loaded serial 0
Mar  4 02:08:47 mailserver named[4540]: running

касаясь конфиг файлов bind:

text
named.conf
options {
        directory "/etc/bind";
listen-on port 53 {
                192.168.2.254;
                127.0.0.1;
        };
        forwarders {
               192.168.1.254;
        };
  };
zone "." IN  {
        type hint;
        file "/etc/bind/db.root";
};
zone "localhost" IN {
        type master;
        file "/etc/bind/db.local";
};

zone "127.in-addr.arpa" IN { type master; file "/etc/bind/db.127"; };

zone "0.in-addr.arpa" IN { type master; file "/etc/bind/db.0"; };

zone "255.in-addr.arpa" IN { type master; file "/etc/bind/db.255"; }; include "/etc/bind/named.conf.local"; #include "/etc/bind/named.conf.default-zones"; include "/etc/bind/myzones.conf";

файлы myzones.conf

text
zone "example" {
type master;
file "/etc/bind/db.example";
};
#db.example
$TTL 604800
@ IN SOA localhost. root.localhost. (
2011030202 ; Serial
3600 ; Refresh
900 ; Retry
604800 ; Expire
86400 ) ; minimum
;
@ IN NS localhost.
@ IN A 192.168.2.254

вроде все данные, остальные зоны стандартные,ничего не изменял, помогите разобраться почему ОШИБКА при rndc reload !rndc: connect failed: 127.0.0.1#953: connection refused!

#135956

если уж решили всё валить в кучу (в один файл named.conf)
то будьте добры, скопируйте туда содержимое файла rndc.key

#136043

А с какой опцией можно вставить rndc.key в named.conf? controls {};?) кстати надо будет все конфигурационные файлы перенести в /var/named, а то я как то коряво в /etc/bind оставил)

#136335

или в named.conf добавть include <путь к ключу> и проверить права.

#136455

Да спс) права поставил chmod 644 и rndc server reload successful,только вот nslookup имя_моего_компа
Server: 127.0.0.1
Address: 127.0.0.1#53

** server can't find mailserver: NXDOMAIN
в логах cat /var/log/daemon.log | grep named

Показать
Mar 5 22:06:32 mailserver named[7763]: adjusted limit on open files from 1024 to 1048576
Mar 5 22:06:32 mailserver named[7763]: found 4 CPUs, using 4 worker threads
Mar 5 22:06:32 mailserver named[7763]: using up to 4096 sockets
Mar 5 22:06:32 mailserver named[7763]: loading configuration from '/etc/bind/named.conf'
Mar 5 22:06:32 mailserver named[7763]: using default UDP/IPv4 port range: [1024, 65535]
Mar 5 22:06:32 mailserver named[7763]: using default UDP/IPv6 port range: [1024, 65535]
Mar 5 22:06:32 mailserver named[7763]: listening on IPv4 interface lo, 127.0.0.1#53
Mar 5 22:06:32 mailserver named[7763]: listening on IPv4 interface eth1, 192.168.2.254#53
Mar 5 22:06:32 mailserver named[7763]: generating session key for dynamic DNS
Mar 5 22:06:32 mailserver named[7763]: set up managed keys zone for view _default, file 'managed-keys.bind'
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 254.169.IN-ADDR.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 2.0.192.IN-ADDR.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 100.51.198.IN-ADDR.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 113.0.203.IN-ADDR.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: D.F.IP6.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 8.E.F.IP6.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 9.E.F.IP6.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: A.E.F.IP6.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: B.E.F.IP6.ARPA
Mar 5 22:06:32 mailserver named[7763]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA
Mar 5 22:06:32 mailserver named[7763]: command channel listening on 127.0.0.1#953
Mar 5 22:06:32 mailserver named[7763]: command channel listening on ::1#953
Mar 5 22:06:32 mailserver named[7763]: the working directory is not writable
Mar 5 22:06:32 mailserver named[7763]: zone 0.in-addr.arpa/IN: loaded serial 1
Mar 5 22:06:32 mailserver named[7763]: zone 127.in-addr.arpa/IN: loaded serial 1
Mar 5 22:06:32 mailserver named[7763]: zone 255.in-addr.arpa/IN: loaded serial 1
Mar 5 22:06:32 mailserver named[7763]: /var/lib/named/etc/bind/db.example:1: unknown RR type 'example'
Mar 5 22:06:32 mailserver named[7763]: zone example/IN: loading from master file /var/lib/named/etc/bind/db.example failed: unknown class/type
Mar 5 22:06:32 mailserver named[7763]: zone example/IN: not loaded due to errors.
Mar 5 22:06:32 mailserver named[7763]: zone localhost/IN: loaded serial 2
Mar 5 22:06:32 mailserver named[7763]: managed-keys-zone ./IN: loading from master file managed-keys.bind failed: file not found
Mar 5 22:06:32 mailserver named[7763]: managed-keys-zone ./IN: loaded serial 0
Mar 5 22:06:32 mailserver named[7763]: running
Mar 5 22:09:08 mailserver named[7763]: received control channel command 'reload'
Mar 5 22:09:08 mailserver named[7763]: loading configuration from '/etc/bind/named.conf'
Mar 5 22:09:08 mailserver named[7763]: using default UDP/IPv4 port range: [1024, 65535]
Mar 5 22:09:08 mailserver named[7763]: using default UDP/IPv6 port range: [1024, 65535]
Mar 5 22:09:08 mailserver named[7763]: set up managed keys zone for view _default, file 'managed-keys.bind'
Mar 5 22:09:08 mailserver named[7763]: the working directory is not writable
Mar 5 22:09:08 mailserver named[7763]: reloading configuration succeeded
Mar 5 22:09:08 mailserver named[7763]: /var/lib/named/etc/bind/db.example:1: unknown RR type 'example'
Mar 5 22:09:08 mailserver named[7763]: zone example/IN: loading from master file /var/lib/named/etc/bind/db.example failed: unknown class/type
Mar 5 22:09:08 mailserver named[7763]: zone example/IN: not loaded due to errors.
Mar 5 22:09:08 mailserver named[7763]: managed-keys-zone ./IN: loading from master file managed-keys.bind failed: file not found
Mar 5 22:09:08 mailserver named[7763]: managed-keys-zone ./IN: loaded serial 0
Mar 5 22:09:08 mailserver named[7763]: reloading zones succeeded

не понятно почему он 953 порт слушает ведь

text
netstat -nlp | grep :53
tcp        0      0 192.168.2.254:53        0.0.0.0:*               LISTEN      7763/named      
tcp        0      0 127.0.0.1:53            0.0.0.0:*               LISTEN      7763/named      
udp        0      0 192.168.2.254:53        0.0.0.0:*                           7763/named      
udp        0      0 127.0.0.1:53            0.0.0.0:*                           7763/named      
udp        0      0 0.0.0.0:5353            0.0.0.0:*                           2074/avahi-daemon: 
udp6       0      0 :::5353                 :::*                                2074/avahi-daemon:
text
 netstat -lp
Active Internet connections (only servers)
Proto Recv-Q Send-Q Local Address           Foreign Address         State       PID/Program name
tcp        0      0 *:sunrpc                *:*                     LISTEN      1406/portmap    
tcp        0      0 mailserver.examp:domain *:*                     LISTEN      7763/named      
tcp        0      0 localhost.locald:domain *:*                     LISTEN      7763/named      
tcp        0      0 *:ssh                   *:*                     LISTEN      2461/sshd       
tcp        0      0 localhost.localdoma:ipp *:*                     LISTEN      2317/cupsd      
tcp        0      0 localhost.localdoma:953 *:*                     LISTEN      7763/named      

О блин а тут по 953..как на 53 перевести named ?)

Войдите или зарегистрируйтесь, чтобы ответить.