Project

General

Profile

Actions

Support #14177

closed

dns-problems when provision a host

Added by Lukas Müller almost 9 years ago. Updated almost 9 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
-
Category:
-
Target version:
-
Triaged:
Fixed in Releases:
Found in Releases:

Description

Hello,

i have a problem with nsupdate when i would like to provision a host. Bind says "servfail". There's also a dhcp error, but i think i have to solve the dns-error first.

Here is the log:

D, [2016-03-14T11:19:15.613577 #20807] DEBUG -- : close: 10.140.79.170:50494
D, [2016-03-14T11:19:15.676633 #20807] DEBUG -- : accept: 10.140.79.170:50495
D, [2016-03-14T11:19:15.679153 #20807] DEBUG -- : Rack::Handler::WEBrick is invoked.
D, [2016-03-14T11:19:15.680212 #20807] DEBUG -- : verifying remote client 10.140.79.170 against trusted_hosts ["hostname.domain.de"]
D, [2016-03-14T11:19:15.680553 #20807] DEBUG -- : Reading config file /etc/dhcp/dhcpd.conf
D, [2016-03-14T11:19:15.680742 #20807] DEBUG -- : Reading config file /etc/dhcp/dhcpd.hosts
D, [2016-03-14T11:19:15.680902 #20807] DEBUG -- : Reading config file /var/lib/dhcpd/dhcpd.leases
D, [2016-03-14T11:19:15.681024 #20807] DEBUG -- : Loading subnets for 127.0.0.1
D, [2016-03-14T11:19:15.681194 #20807] DEBUG -- : Added a subnet: 10.140.79.0
E, [2016-03-14T11:19:15.681791 #20807] ERROR -- : Record 10.140.79.0/10.140.79.173 not found
I, [2016-03-14T11:19:15.682169 #20807]  INFO -- : 10.140.79.170 - - [14/Mar/2016 11:19:15] "GET /dhcp/10.140.79.0/10.140.79.173 HTTP/1.1" 404 42 0.0022

D, [2016-03-14T11:19:15.722658 #20807] DEBUG -- : close: 10.140.79.170:50495
D, [2016-03-14T11:19:18.256598 #20807] DEBUG -- : accept: 10.140.79.170:50497
D, [2016-03-14T11:19:18.259132 #20807] DEBUG -- : Rack::Handler::WEBrick is invoked.
D, [2016-03-14T11:19:18.297006 #20807] DEBUG -- : verifying remote client 10.140.79.170 against trusted_hosts ["hostname.domain.de"]
D, [2016-03-14T11:19:18.297736 #20807] DEBUG -- : running /usr/bin/nsupdate -k /etc/foreman.key
D, [2016-03-14T11:19:18.301837 #20807] DEBUG -- : nsupdate: executed - server 127.0.0.1
D, [2016-03-14T11:19:18.304010 #20807] DEBUG -- : nsupdate: executed - update add 173.79.140.10.in-addr.arpa.  86400 IN PTR vm1.subdomain.domain.de
D, [2016-03-14T11:19:18.333248 #20807] DEBUG -- : nsupdate: errors
Answer:

;; ->>HEADER<<- opcode: UPDATE, status: SERVFAIL, id:  33637

;; flags: qr ra; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1

;; ZONE SECTION:

;79.140.10.in-addr.arpa.                IN      SOA

;; TSIG PSEUDOSECTION:

foreman.                0       ANY     TSIG    hmac-md5.sig-alg.reg.int. 1457950758 300 16 8rC8b2DbIs0AVujhPKQ1dQ== 33637 NOERROR 0

E, [2016-03-14T11:19:18.333610 #20807] ERROR -- : Update errors: Answer:

;; ->>HEADER<<- opcode: UPDATE, status: SERVFAIL, id:  33637

;; flags: qr ra; ZONE: 1, PREREQ: 0, UPDATE: 0, ADDITIONAL: 1

;; ZONE SECTION:

;79.140.10.in-addr.arpa.                IN      SOA

;; TSIG PSEUDOSECTION:

foreman.                0       ANY     TSIG    hmac-md5.sig-alg.reg.int. 1457950758 300 16 8rC8b2DbIs0AVujhPKQ1dQ== 33637 NOERROR 0

My named.conf looks like this:

// named.conf

options {
  dnssec-validation no;
  directory "/var/named";
  dump-file "/var/named/data/cache_dump.db";
  statistics-file "/var/named/data/named_stats.txt";
};
controls {  inet 127.0.0.1 allow { localhost; } keys { foreman; }; };
include "/etc/foreman.key";
include "/etc/zones.conf";

logging
{
  category update { update_log; };
  channel update_log
  {
    file "/var/named/logs/dns-update.log" versions 2 size 20m;
    print-time yes;
    print-category yes;
    print-severity yes;
    severity info;
  };
};
zone "." {
  type forward;
  forwarders {
    IP.OF.MY.FORWARDER;
  };
};
include "/etc/named.rfc1912.zones";
include "/etc/named.root.key";

Here's my zones.conf:

 zone "79.140.10.in-addr.arpa" {
    type master;
    file "/var/named/79.140.10.rev";
    update-policy {
            grant foreman zonesub ANY;
    };
};
zone "gemsvm.bafg.de" {
    type master;
    file "/var/named/gemsvm.bafg.de";
    update-policy {
            grant foreman zonesub ANY;
    };
};

Greeting
lukas


Related issues 1 (0 open1 closed)

Related to Salt - Bug #12995: I can' t delete my hostResolved01/05/2016Actions
Actions

Also available in: Atom PDF