☰

警告：managed-keys-zone/admins：未找到“.”的 DNSKEY RRSIG：成功

tag-icon • tag-icon domain-name-system centos7 bind
警告：managed-keys-zone/admins：未找到“.”的 DNSKEY RRSIG：成功

我刚刚安装完我的主名称服务器（ns1），但仍然有警告...

warning: managed-keys-zone/admins: No DNSKEY RRSIGs found for '.': success 
warning: managed-keys-zone/others: No DNSKEY RRSIGs found for '.': success

我的配置：

//
// named.conf
//
//
// Ansible managed
//
acl "acl-allow-transfer" {
  192.168.2.100;
};
acl "acl-all-admins" {
  192.168.10.0/24;
};
acl "acl-no-admin" {
  localhost;
  192.168.1.0/24;
};
acl "acl-allow-recursion" {
  localhost;
  192.168.10.0/24;
};
acl "acl-allow-query" {
  localhost;
  192.168.10.0/24;
  192.168.1.0/24;
};

options {
  listen-on port 53 { any; };
  listen-on-v6 port 53 { ::1; };
  directory   "/var/named";
  dump-file   "/var/named/data/cache_dump.db";
  statistics-file "/var/named/data/named_stats.txt";
  memstatistics-file "/var/named/data/named_mem_stats.txt";
  allow-query     { acl-allow-query; };
  allow-transfer { acl-allow-transfer; };

  empty-zones-enable no;

  recursion yes;
  allow-recursion { acl-allow-recursion; };
  # Forwarders are openDNS servers
  forwarders { 8.8.8.8; };

  dnssec-enable no;
  dnssec-validation no;
  dnssec-lookaside no;  

  allow-update { none; };

  allow-update-forwarding { none; };

  allow-notify { none; };

  rrset-order { order random; };

  /* Path to ISC DLV key */
  bindkeys-file "/etc/named.iscdlv.key";

  managed-keys-directory "/var/named/dynamic";

  pid-file "/run/named/named.pid";
  session-keyfile "/run/named/session.key";
};

logging {
  channel default_debug {
    file "/var/log/named.log" versions 30 size 2m;
    severity info;
    print-severity yes;
    print-time yes;
  };
};


view admins {

  match-clients { acl-all-admins; };

  zone "intra.mycomp.fr" IN {
    type master;
    file "masters/admins.intra.mycomp.fr";
  };
  zone "fixe.mycomp.fr" IN {
    type master;
    file "masters/fixe.mycomp.fr";
  };
  zone "mobile.mycomp.fr" IN {
    type master;
    file "masters/mobile.mycomp.fr";
  };

  zone « 1.168.192.in-addr.arpa" IN {
    type master;
    file "masters/1.168.192.in-addr.arpa";
  };
  zone "10.168.192.in-addr.arpa" IN {
    type master;
    file "masters/10.168.192.in-addr.arpa";
  };

  include "/etc/named.root.key";
  include "/etc/named.rfc1912.zones";

};
view others {

  match-clients { acl-no-admin; };

  zone "intra.mycomp.fr" IN {
    type master;
    file "masters/others.intra.mycomp.fr";
  };
  zone "fixe.mycomp.fr" IN {
    type master;
    file "masters/fixe.mycomp.fr";
  };
  zone "mobile.mycomp.fr" IN {
    type master;
    file "masters/mobile.mycomp.fr";
  };

  zone « 1.168.192.in-addr.arpa" IN {
    type master;
    file "masters/1.168.192.in-addr.arpa";
  };

  include "/etc/named.root.key";
  include "/etc/named.rfc1912.zones";

};

有想法吗？

非常感谢你的帮助 ！

皮埃尔

答案1

您可以删除 /etc/named.conf 文件中的以下行

包括“/etc/named.root.key”；

修改完成后一定要重启named.service：

#systemctl 重新启动命名

相关内容