Comments on: Howto setup DHCP Server and Dynamic DNS with BIND in Debian

By: Ryan

Ryan — Mon, 15 Feb 2010 06:51:14 +0000

I finally figured out what was wrong. you need the set the journal file for each of your dns zones in named.conf.local. add the line:
journal “/var/lib/bind/example.com.jnl”; and it will start working.

you also need to add the line:
ddns-rev-domainname “in-addr.arpa.”;
to your dhcpd.conf in order for it to update your reverse zones

-Ryan

By: Ryan

Ryan — Fri, 12 Feb 2010 20:35:10 +0000

Hey all, i’ve been trying to get this working for several weeks without success. I do not know why it’s not working and haven’t found any log information about it. It has occurred to me that this whole process seems redundant to have the dpcp server tell the client to inform the dns server of it’s name. It would seem that it would be simpler to have the dhcp server inform the DNS server of the client hostname and the IP it just assigned. I understand dnsmasq preforms this in it’s function as dpcp/dns server, however I already have a full implementation of Bind9 and dhcp3-server. Is there anyway to configure dhcp3-server to inform Bind9 directly of name/ip assignments?

I’d also to confirm that the dynamic DNS described in the article should work with windows clients set to “Register this connection’s address in DNS” and not just linux clients.

thanks for the tutorial and any additional information will be appreciated.
-Ryan

By: @pastor_ni

@pastor_ni — Tue, 06 Oct 2009 03:12:32 +0000

Hi buddy, also you can change the file permission with sudo chmod 644 rndc.key

By yummy man!

By: TheCarcass

TheCarcass — Sat, 15 Aug 2009 10:41:12 +0000

People

After make a Alex dong talks, a change de onwer to dhcpd of rndc.key file and dhcp server start.

tks a lot

By: TheCarcass

TheCarcass — Sat, 15 Aug 2009 10:35:54 +0000

Alex Dong

I change a appamor profile and the error persist after reload apparmor profile, rndc.

Sugestions?

By: Alex Dong

Alex Dong — Tue, 07 Jul 2009 06:21:42 +0000

@pastor_ni: you have to make one last minor change to /etc/apparmor.d/usr.sbin.dhcpd3:

/etc/bind/ rw,
/etc/bind/** rw,

This allows access to the rndc-key files.

http://ubuntuforums.org/showthread.php?t=1198162

By: Alaattin Kahramanlar

Alaattin Kahramanlar — Sat, 06 Jun 2009 07:39:14 +0000

in named.conf.local :
include “/etc/bind/rndc.key”;
should be :
include “/etc/bind/rndc-key”;

And also /etc/bind9 doesn’t exist, whether you need to create a smylink or use /etc/bind

However, nice article.

By: jagadee

jagadee — Mon, 09 Mar 2009 06:36:41 +0000

Nice article. Helps a lot to someone who tries to integrate DHCP and DNS for getting hostnames to dynamic IP addresses

By: l33tmyst

l33tmyst — Wed, 31 Dec 2008 17:03:42 +0000

@Pastor_Ni, try logging in as root with
su
and then run
rndc reload.

By: pastor_ni

pastor_ni — Fri, 17 Oct 2008 15:18:21 +0000

nice tutorial, but i have a problem:
sudo /etc/init.d/dhcp3-server restart
sudo /etc/init.d/bind9 restart
sudo rndc reload
can’t open /etc/bind/rndc.key: Permission denied

By: nan

nan — Thu, 25 Sep 2008 15:58:44 +0000

hi, newbie here. i just installed ubuntu desktop in vmware and i am wondering if this tutorial will work with what i have. pls let me know so i can try it. thanks.

By: Big Kahuna

Big Kahuna — Thu, 21 Aug 2008 03:46:00 +0000

No mention of the fact that you need to have DHCP3-Server, not just plain old DHCPD, for this to work.

By: Tyler

Tyler — Fri, 01 Aug 2008 16:24:59 +0000

dnsmasq is a much simpler solution for admins with small networks. It’s a combined DHCP/DNS server which automatically resolves queries for the hostnames of DHCP clients, has static DHCP/DNS entry support, etc.

That said, I do have a large network with 2nd and 3rd-level domains and multiple offices, and we use BIND/DHCPD. Thanks for writing this!

By: Admin

Admin — Tue, 29 Jul 2008 19:00:07 +0000

@gp

updated article

By: gp

gp — Mon, 28 Jul 2008 14:32:44 +0000

or edit it, so it gets:
query-source address *;

By: gp

gp — Mon, 28 Jul 2008 14:32:03 +0000

query-source address * port 53;

you should edit the article ASAP and add that they should remove this line…

http://www.google.com/search?q=dns+poisoning+kaminsky&ie=utf-8&oe=utf-8&aq=t&rls=org.mozilla:en-US:official&client=firefox-a