Bonjour à tous,
J’ai besoin d’aide pour la configuration de mon serveur DNS. J’ai mis en place un serveur dns (bind 9) , un serveur dhcp (isc-dhcp-server) et un client sur la même machine. Lorsque je fais le test de configuration de bind9 avec /etc/init.d/bind9 status -l il m’affiche une erreur
root@groupe5-srv-dns:/etc/bind# /etc/init.d/bind9 restart
[ ok ] Restarting bind9 (via systemctl): bind9.service.
root@groupe5-srv-dns:/etc/bind# /etc/init.d/bind9 status -l
● bind9.service - BIND Domain Name Server
Loaded: loaded (/lib/systemd/system/bind9.service; enabled)
Drop-In: /run/systemd/generator/bind9.service.d
└─50-insserv.conf-$named.conf
Active: active (running) since mar. 2018-01-09 09:28:54 GMT; 5s ago
Docs: man:named(8)
Process: 2090 ExecStop=/usr/sbin/rndc stop (code=exited, status=1/FAILURE)
Main PID: 2095 (named)
CGroup: /system.slice/bind9.service
└─2095 /usr/sbin/named -f -u bind
janv. 09 09:28:55 groupe5-srv-dns named[2095]: managed-keys-zone: loaded serial 76
janv. 09 09:28:55 groupe5-srv-dns named[2095]: zone 127.in-addr.arpa/IN: loaded serial 1
janv. 09 09:28:55 groupe5-srv-dns named[2095]: zone 0.in-addr.arpa/IN: loaded serial 1
janv. 09 09:28:55 groupe5-srv-dns named[2095]: zone 255.in-addr.arpa/IN: loaded serial 1
janv. 09 09:28:55 groupe5-srv-dns named[2095]: zone groupe5.org/IN: loaded serial 2
janv. 09 09:28:55 groupe5-srv-dns named[2095]: zone localhost/IN: loaded serial 2
janv. 09 09:28:55 groupe5-srv-dns named[2095]: zone 43.168.192.in-addr.arpa/IN: loaded serial 1
janv. 09 09:28:55 groupe5-srv-dns named[2095]: all zones loaded
janv. 09 09:28:55 groupe5-srv-dns named[2095]: running
janv. 09 09:28:55 groupe5-srv-dns named[2095]: zone 43.168.192.in-addr.arpa/IN: sending notifies (serial 1)
Voici mes fichiers de configuration
## GNU nano 2.2.6 Fichier : named.conf
// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local
include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";
include "/etc/bind/rndc.key";
## /etc/bind/named.conf.local
zone "groupe5.org" in {
type master;
file "/etc/bind/db.groupe5.org";
allow-update {key rndc-key;};
allow-query { any; };
};
zone "43.168.192.in-addr.arpa" in {
type master;
file "/etc/bind/db.192";
allow-update {key rndc-key;};
allow-query { any; };
};
## /etc/bind/named.conf.options
options {
directory "/var/cache/bind";
// If there is a firewall between you and nameservers you want
// to talk to, you may need to fix the firewall to allow multiple
// ports to talk. See http://www.kb.cert.org/vuls/id/800113
// If your ISP provided one or more IP addresses for stable
// nameservers, you probably want to use them as forwarders.
// Uncomment the following block, and insert the addresses replacing
// the all-0's placeholder.
forwarders {
192.168.43.111;
8.8.8.8;
8.8.4.4;
// 212.27.40.240;
// 212.27.40.241;
};
//========================================================================
// If BIND logs error messages about the root key being expired,
// you will need to update your keys. See https://www.isc.org/bind-keys
//========================================================================
dnssec-validation auto;
auth-nxdomain no; # conform to RFC1035
version none;
forward only;
// listen-on-v6 { any; };
};
## GNU nano 2.2.6 Fichier : db.groupe5.org
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA groupe5-srv-dns.groupe5.org. root.groupe5-srv-dns.groupe5.org. (
2 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS groupe5-srv-dns.groupe5.org.
groupe5-srv-dns IN A 192.168.43.111
groupe5-srv-dhcp IN A 192.168.43.110
groupe5-client-linux IN A 192.168.43.16
client-win IN A 192.168.43.17
## GNU nano 2.2.6 Fichier : db.192
;
; BIND data file for local loopback interface
;
$TTL 604800
@ IN SOA groupe5-srv-dns.groupe5.org. root.groupe5-srv-dns.groupe5.org. (
1 ; Serial
604800 ; Refresh
86400 ; Retry
2419200 ; Expire
604800 ) ; Negative Cache TTL
;
@ IN NS groupe5-srv-dns.
111 IN PTR groupe5-srv-dns.groupe5.org.
110 IN PTR groupe5-srv-dhcp.groupe5.org.
16 IN PTR groupe5-client-linux.groupe5.org.
17 IN PTR client-win.groupe5.org.
Merci d’avance