Novell BUSINESS CONTINUITY CLUSTERING 1.2.1 - ADMINISTRATION, Руководство администратора

Страница: 156 / 184

156 BCC 1.2.1: Administration Guide for OES 2 SP2 Linux
no
vd
ocx
(e
n)
7 Ja
nua
ry 201
0
To continue our example, the key section for the
/var/lib/named/keys.conf
file might look
like this:
key cluster1.clusters.site1.company.com . {
algorithm HMAC-MD5;
secret "SCUT8rIUoGByvcI1Iok7tY7YvcEaHaM3zusCxXmboBxVcJvUxr335HCg
lXcDQRPrJrzIKQhH4dJ4cY10ebOJFw==";
};
5 Save the file.
6 Continue with Section E.2.3, “Configuring the DNS Server Zones,” on page 156 .
E.2.3 Configuring the DNS Server Zones
To configure the DNS zones to accept authorized DNS updates:
1 On the DNS server, open a terminal console, then log in as the
root
user.
2 Open the
/etc/named.conf
file in a text editor, then add the
allow-update
keyword and key
in the zone configuration sections for regular lookups and reverse lookups.
For example, this is a sample zone section:
zone " clusters.site1.company.com " in {
file "dyn/ clusters.site1.company.com ";
type master;
allow-update {
key
cluster1.clusters.site1.company.com .;
};
};
zone "1.1.10.in-addr.arpa" in {
file "dyn/10.1.1.zone";
type master;
allow-update {
key
cluster1.clusters.site1.company.com .;
};
};
3 Save the changes.
4 Restart the DNS Server to make sure that the new configuration is imported.
Your DNS Server is now configured to accept secure dynamic updates.
5 Continue with Section E.2.4, “Testing the DNS Server,” on page 156 .
E.2.4 Testing the DNS Server
Before you continue to set up the BCC for dynamic DNS updating, verify that your DNS server
accepts secure dynamic updates.
1 Install the
bind-utils
RPM on a Linux client computer.
2
Make sure that the Linux client computer is configured to use the DNS Server you want to test.
Alternately, you can force the dig utility to query a specific DNS Server.
3
Use the dig utility to perform baseline test on any server to view its current IP address.