Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

how add bind server #51

Open
lklkxcxc opened this issue Aug 28, 2017 · 6 comments
Open

how add bind server #51

lklkxcxc opened this issue Aug 28, 2017 · 6 comments

Comments

@lklkxcxc
Copy link

login binder web console and look server list is None

@kollyma
Copy link

kollyma commented Nov 13, 2017

  1. prepare your DNS Server:
  • Enable Bind Statistics Channel
  • Create TSIG Key (example: dnssec-keygen -a HMAC-MD5 -b 128 -n HOST rndc-key )
  • add the key to the DNS Zone. Details are here: https://github.com/jforman/binder
  1. Login to the Django Admin:
  • http://:8000/admin/
  • Add key object, paste the TSIG Key
  • Add DNS server object and map it to the TSIG Key

et voila...

@MinhKMA
Copy link

MinhKMA commented Nov 14, 2018

hello kollyma,
I want to add the DNS server to binder.
I created key by commad dnssec-keygen -a HMAC-MD5 -b 128 -n HOST rndc-key . My key is:

[root@master named]# cat Krndc-key.+157+18910.private 
Private-key-format: v1.3
Algorithm: 157 (HMAC_MD5)
Key: H9ELPeHMNsNW+KyBYZ2biw==
Bits: AAA=
Created: 20181114100836
Publish: 20181114100836
Activate: 20181114100836

In tab admin, i dont know data. its it H9ELPeHMNsNW+KyBYZ2biw== in this key?
https://prnt.sc/li7q7c
Thank you for support!

@MinhKMA
Copy link

MinhKMA commented Nov 14, 2018

My problem is:
https://prnt.sc/li7tdk

@kollyma
Copy link

kollyma commented Nov 14, 2018

Hi MinhKMA

Did you configure the same key on the bind server:

key "<key-name>" {
  algorithm hmac-md5;
  secret "<key-value>";
};

Moreover you have to allow rndc commands from the remote server (binder) as well:

controls {
  inet 127.0.0.1 allow { <binder-host>; } keys { <key-name>; };
};

Follow this guide for bind configuration:
https://www.centos.org/docs//2/rhl-rg-en-7.2/s1-bind-rndc.html

@MinhKMA
Copy link

MinhKMA commented Nov 14, 2018

i have to allow rndc commands from the remote server (binder) bit it bot oke :(

@MinhKMA
Copy link

MinhKMA commented Nov 14, 2018

Hello kollyma, i have problem: Unable to get zone list. A problem was encountered decrypting your TSIG key. Ensure the key is correctly specified in the Binder Database.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants