Difference between revisions of "Cluster der kan alt/Install DNS server"

From Teknologisk videncenter
Jump to: navigation, search
(→‎Step six: Verify domain and DNS entries)
(→‎5. Create a “rev.0.0.10.in-addr.arpa” file for reverse lookup)
 
(17 intermediate revisions by 4 users not shown)
Line 1: Line 1:
−
==Installer DNS Server==
+
== Install DNS Server ==
−
Install DNS server by download and install the package
+
 
−
<source lang=cli>
+
Install DNS server
−
apt-get install bind9
+
<source lang="text">
 +
sudo apt-get install bind9
 
</source>
 
</source>
  
−
==Configure DNS (Bind9)==
+
== Configure DNS Server  ==
−
First we will edit these 3 files.
+
 
−
*/etc/bind/named.conf.local
+
=== 1. Add domain zone ===
−
*/etc/bind/named.conf.options
+
 
−
*/etc/resolvconf/resolv.conf.d/base
+
Edit /etc/bind/named.conf.local
−
   
+
<source lang="cli">
−
Second we will create these 2 files.
+
sudo nano /etc/bind/named.conf.local
−
*/etc/bind/zones/dka.local.db
 
−
*/etc/bind/zones/rev.0.0.10.in-addr.arpa
 
−
 
−
===First step: add domain zone – dka.local===
 
−
Enter the named.conf.local file
 
−
<source lang=cli>
 
−
nano /etc/bind/named.conf.local
 
 
</source>
 
</source>
−
Add the entire to the file
+
Add the text below to the bottom of the file
−
<source lang=cli>
+
<source lang="cli">
−
# Our Domain zone
+
# Domain Zone
 
zone "dka.local." {
 
zone "dka.local." {
 
         type master;
 
         type master;
Line 33: Line 27:
 
         file "/etc/bind/zones/rev.0.0.10.in-addr.arpa.db";
 
         file "/etc/bind/zones/rev.0.0.10.in-addr.arpa.db";
 
};
 
};
 +
</source>
  
−
</source>
+
=== 2. Add DNS servers from your ISP  ===
  
−
===Secund step: Add the DNS servers from your ISP===
 
 
Enter the named.conf.options file
 
Enter the named.conf.options file
−
<source lang=cli>
+
<source lang="cli">
−
nano /etc/bind/named.conf.options
+
sudo nano /etc/bind/named.conf.options
 
</source>
 
</source>
−
Delete or comment the following
+
Comment out the following lines
−
<source lang=cli>
+
<source lang="text">
 
         dnssec-validation auto;
 
         dnssec-validation auto;
  
 
         auth-nxdomain no;    # conform to RFC1035
 
         auth-nxdomain no;    # conform to RFC1035
 
         listen-on-v6 { any; };
 
         listen-on-v6 { any; };
−
};
 
 
</source>
 
</source>
−
Add the following to the bottom of the file
+
Add the following to the bottom of the file, just above '};'
−
<source lang=cli>
+
<source lang="cli">
 
         forwarders {
 
         forwarders {
−
                 172.16.4.66;
+
                 172.16.4.77; # Mercantec DNS
 
         };
 
         };
  
Line 59: Line 52:
 
         listen-on { any; };
 
         listen-on { any; };
  
−
allow-query { 127.0.0.1; 172.16.4.66/24; 10.0.0.0/24;};
+
        allow-query { 127.0.0.1; 172.16.4.77/24; 10.0.0.0/24; };
−
};
+
</source>
 +
 
 +
'''NOTE:''' Be aware of which IP segment you are in. 172.16.4.77 = Hovedforløb 172.16.2.50,172.16.2.51 = Grundforløb
 +
 
 +
=== 3. Modify the resolv.conf file  ===
  
−
</source>
+
Edit /etc/resolvconf/resolv.conf.d/base file, and add the following lines. Replace 'dka.local' with your own domain.
−
*NOTE: Be aware of which IP segment you are in. 172.16.4.66 = Hovedforløb 172.16.2.50,172.16.2.51 = Grundforløb
 
  
−
===Third step: Modify the resolv.conf file ===
+
<source lang="cli">
−
Enter the resolv.conf.d/base file
+
nameserver 127.0.0.1
−
<source lang=cli>
 
−
nano /etc/resolvconf/resolv.conf.d/base
 
−
</source>
 
−
Add the following lines
 
−
<source lang=cli>
 
 
nameserver 10.0.0.1
 
nameserver 10.0.0.1
 +
nameserver 172.16.4.77
 
domain dka.local
 
domain dka.local
 
search dka.local
 
search dka.local
 +
</source>
  
 +
You may want to lock down the resolv.conf file, making it immutable.
 +
 +
<source lang="cli">
 +
sudo chattr -f +i /etc/resolv.conf
 
</source>
 
</source>
 +
Any problems with the resolv.conf file, look [http://ubuntuforums.org/showthread.php?t=1978656%7C here]
  
−
===Fourth step: Define zones===
+
=== 4. Define zones ===
−
First make the directory /etc/bind/zones
+
 
−
<source lang=cli>
+
First make the directory /etc/bind/zones  
−
mkdir /etc/bind/zones
+
<source lang="cli">
 +
sudo mkdir /etc/bind/zones
 
</source>
 
</source>
−
Second make the file dka.local.db
+
 
−
<source lang=cli>
+
Second make the file dka.local.db (replace with your own domain)
−
nano /etc/bind/zones/dka.local.db
+
<source lang="cli">
 +
sudo nano /etc/bind/zones/dka.local.db
 
</source>
 
</source>
−
Add the following text to the newly created file
+
 
−
<source lang=cli>
+
Add the following text to the newly created file <source lang="cli">
 
; BIND data file for local loopback interface
 
; BIND data file for local loopback interface
 
;
 
;
Line 101: Line 101:
 
@      IN      NS      ns.dka.local.
 
@      IN      NS      ns.dka.local.
 
ns      IN      A      10.0.0.1
 
ns      IN      A      10.0.0.1
−
ubuntu  IN      A      10.0.0.21
+
cluster IN      A      10.0.0.1
 +
node1  IN      A      10.0.0.11
 +
node2  IN      A      10.0.0.12
 +
node3  IN      A      10.0.0.13
 +
node4  IN      A      10.0.0.14
 
</source>
 
</source>
−
NOTES:
 
−
*The TTL or time to live is set for 3 days
 
−
*The ns.mydomain.com nameserver is defined
 
−
*Ubuntudesktop, pc and gateway are entered as an A record
 
−
*An alias of www is assigned to ubuntudesktop using CNAME
 
  
−
===Step five: Create a “rev.0.0.10.in-addr.arpa” file for reverse lookup===
+
'''Note:''' TTL is set for 1 week.
−
Create the rev.0.0.10.in-addr.arpa file
+
 
−
<source lang=cli>
+
=== 5. Create a “rev.0.0.10.in-addr.arpa.db” file for reverse lookup ===
−
nano /etc/bind/zones/rev.0.0.10.in-addr.arpa
+
 
−
</source>
+
Create the rev.0.0.10.in-addr.arpa.db file <source lang="cli">
−
Add the following text
+
sudo nano /etc/bind/zones/rev.0.0.10.in-addr.arpa.db
−
<source lang=cli>
+
</source> Add the following text <source lang="cli">
 
$TTL 3D
 
$TTL 3D
 
@      IN      SOA    ns.dka.local. admin.dka.local. (
 
@      IN      SOA    ns.dka.local. admin.dka.local. (
Line 125: Line 124:
 
)
 
)
 
         IN      NS      ns.dka.local.
 
         IN      NS      ns.dka.local.
−
10     IN      PTR    node1.dka.local
+
1      IN      PTR    ns.dka.local.
−
10     IN      PTR    node2.dka.local
+
1      IN      PTR    cluster.dka.local.
−
10     IN      PTR    node3.dka.local
+
11     IN      PTR    node1.dka.local.
−
10     IN      PTR    node4.dka.local
+
12     IN      PTR    node2.dka.local.
 +
13     IN      PTR    node3.dka.local.
 +
14     IN      PTR    node4.dka.local.
 
</source>
 
</source>
  
−
===Step six: Verify domain and DNS entries===
+
=== 6. Verify domain and DNS entries ===
−
Restart the network service
+
 
−
<source lang=cli>
+
Restart the network service <source lang="cli">
−
sudo /etc/init.d/networking restart
+
sudo service bind9 restart
−
</source>
+
</source>  
  
−
Dig
+
Dig  
  
−
<source lang=cli>
+
<source lang="cli">
 
$ dig dka.local
 
$ dig dka.local
−
</source>
+
</source>  
  
−
Nslookup
+
Nslookup  
  
−
<source lang=cli>
+
<source lang="cli">
 
nslookup ns
 
nslookup ns
−
</source>
+
</source> {{Source cli}}
−
{{Source cli}}
 

Latest revision as of 09:54, 30 October 2014

Install DNS Server

Install DNS server 

sudo apt-get install bind9

Configure DNS Server

1. Add domain zone

Edit /etc/bind/named.conf.local 

sudo nano /etc/bind/named.conf.local

Add the text below to the bottom of the file 

# Domain Zone
zone "dka.local." {
        type master;
        file "/etc/bind/zones/dka.local.db";
};

# For reverse DNS
zone "0.0.10.in-addr.arpa" {
        type master;
        file "/etc/bind/zones/rev.0.0.10.in-addr.arpa.db";
};

2. Add DNS servers from your ISP

Enter the named.conf.options file 

sudo nano /etc/bind/named.conf.options

Comment out the following lines 

        dnssec-validation auto;

        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };

Add the following to the bottom of the file, just above '};' 

        forwarders {
                172.16.4.77; # Mercantec DNS
         };

        auth-nxdomain no;    # conform to RFC1035
        listen-on-v6 { any; };
        listen-on { any; };

        allow-query { 127.0.0.1; 172.16.4.77/24; 10.0.0.0/24; };

NOTE: Be aware of which IP segment you are in. 172.16.4.77 = Hovedforløb 172.16.2.50,172.16.2.51 = Grundforløb

3. Modify the resolv.conf file

Edit /etc/resolvconf/resolv.conf.d/base file, and add the following lines. Replace 'dka.local' with your own domain. 

nameserver 127.0.0.1
nameserver 10.0.0.1
nameserver 172.16.4.77
domain dka.local
search dka.local

You may want to lock down the resolv.conf file, making it immutable. 

sudo chattr -f +i /etc/resolv.conf

Any problems with the resolv.conf file, look here

4. Define zones

First make the directory /etc/bind/zones 

sudo mkdir /etc/bind/zones

Second make the file dka.local.db (replace with your own domain) 

sudo nano /etc/bind/zones/dka.local.db
Add the following text to the newly created file 
; BIND data file for local loopback interface
;
$TTL    604800
@       IN      SOA     ns.dka.local. root.dka.local. (
                              8         ; Serial
                         604800         ; Refresh
                          86400         ; Retry
                        2419200         ; Expire
                         604800 )       ; Negative Cache TTL
;
@       IN      NS      ns.dka.local.
ns      IN      A       10.0.0.1
cluster IN      A       10.0.0.1
node1   IN      A       10.0.0.11
node2   IN      A       10.0.0.12
node3   IN      A       10.0.0.13
node4   IN      A       10.0.0.14

Note: TTL is set for 1 week.

5. Create a “rev.0.0.10.in-addr.arpa.db” file for reverse lookup

Create the rev.0.0.10.in-addr.arpa.db file 
sudo nano /etc/bind/zones/rev.0.0.10.in-addr.arpa.db
Add the following text 
$TTL 3D
@       IN      SOA     ns.dka.local. admin.dka.local. (
                2007062001
                28800
                604800
                604800
                86400
)
        IN      NS      ns.dka.local.
1       IN      PTR     ns.dka.local.
1       IN      PTR     cluster.dka.local.
11      IN      PTR     node1.dka.local.
12      IN      PTR     node2.dka.local.
13      IN      PTR     node3.dka.local.
14      IN      PTR     node4.dka.local.

6. Verify domain and DNS entries

Restart the network service 
sudo service bind9 restart

Dig 

$ dig dka.local

Nslookup 

nslookup ns
Retrieved from "http://mars.merhot.dk/w/index.php?title=Cluster_der_kan_alt/Install_DNS_server&oldid=28412"