undefined ACL error while running named-checkconf file

babu dheen

unread,

Dec 3, 2011, 4:57:26 AM12/3/11

to bind-...@lists.isc.org

Hello,

I am running slave DNS server using BIND. Today when try to run named-checkconf file as below , i am getting highlighted error.

Kindly assist me

[root@server]# named-checkconf /etc/named.rfc1912.zones
/etc/named.rfc1912.zones:78: undefined ACL 'redhat'
/etc/named.rfc1912.zones:85: undefined ACL 'redhat'
/etc/named.rfc1912.zones:92: undefined ACL 'redhat'
/etc/named.rfc1912.zones:100: undefined ACL 'redhat'

My /etc/named.rfc1912.zones file is given below

zone "." IN {
type hint;
file "named.ca";
};

zone "227.18.217.in-addr.arpa" IN {
      type slave;
      file "slaves/svns.company.db" ;
      allow-query { redhat; };
      masters { 10.0.0.1; };
};

zone "226.18.217.in-addr.arpa" IN {
    type slave;
    file "slaves/MX.db" ;
    allow-query { redhat; };
    masters { 10.0.0.1; };
};

zone "225.18.217.in-addr.arpa" IN {
     type slave;
     file "slaves/VPN.db" ;
     allow-query { redhat; };
     masters { 10.0.0.1; };
};

zone "232.18.217.in-addr.arpa" IN {
     type slave;
     file "slaves/drns.company.db" ;
     allow-query { redhat; };
     masters { 10.0.0.1; };
};

2. My /etc/named.caching-nameserver.conf file content

acl redhat { any; };

options {
        listen-on port 53 { 127.0.0.1; 10.0.0.2; };
        directory       "/var/named";
        dump-file       "/var/named/data/cache_dump.db";
        statistics-file "/var/named/data/named_stats.txt";
        memstatistics-file "/var/named/data/named_mem_stats.txt";
        query-source    port 53;

logging {
        channel default_debug {
                file "data/named.run";
                severity dynamic;
        };

        channel my_file {
                 file "data/log.msgs";
                  severity dynamic;
        };

category queries { my_file; };
};

view localhost_resolver {
match-clients { localhost; 10.0.0.1/23; any; };

         match-destinations { localhost; };
        recursion yes;
        include "/etc/named.rfc1912.zones";

Regards

Papdheen M

Anand Buddhdev

unread,

Dec 3, 2011, 6:15:33 AM12/3/11

to babu dheen, bind-...@lists.isc.org

On 03/12/2011 10:57, babu dheen wrote:

> Hello,
>
> I am running slave DNS server using BIND. Today when try to run
> named-checkconf file as below , i am getting highlighted error.
>
> Kindly assist me
>
> [root@server]# named-checkconf /etc/named.rfc1912.zones
> /etc/named.rfc1912.zones:78: undefined ACL 'redhat'
> /etc/named.rfc1912.zones:85: undefined ACL 'redhat'
> /etc/named.rfc1912.zones:92: undefined ACL 'redhat'
> /etc/named.rfc1912.zones:100: undefined ACL 'redhat'

Isn't it kind of obvious? You are checking the syntax of the file
named.rfc1912.zones, but the ACL is refers to is defined in another
file. How will named-checkconf know that the ACL is in another file
called named.caching-nameserver.conf?

You would do better to run named-checkconf on named.caching-nameserver.conf.

Regards,

Anand Buddhdev
RIPE NCC

Anand Buddhdev

unread,

Dec 3, 2011, 6:56:19 AM12/3/11

to babu dheen, bind-...@lists.isc.org

On 03/12/2011 12:44, babu dheen wrote:

Babu,

> I am maintaining the same configuration on primary server but when i
> execute the same command refering /etc/named.rfc1912.zones file, i am
> not getting any error.

Are the files identical? Are the versions of BIND on both servers the
same? Obviously, there must be something different, which results in the
error message.

> But when i execute the same command in my slave server, i am getting
> this error.
>
> Can you tell me how to enable the debug logs in bind?

Try reading the BIND manual first. If you don't understand something
specific, ask about it on the bind-users mailing list.

Regards,

Anand

babu dheen

unread,

Dec 3, 2011, 7:00:54 AM12/3/11

to bind-...@lists.isc.org

Dear Anand,

Yes, both primary and slave running with different version. Will it cause any problem if both are running with different version?

--- On Sat, 3/12/11, Anand Buddhdev <ana...@ripe.net> wrote: