Dns 从“指定”中创建区域；“拒绝许可”；在不同的vm中运行后端bind9

我在10.10.70.25虚拟机中安装了bind9，并在10.10.70.81虚拟机中运行了openstack

bind9的rndc.key与指定的相同

指定的rndc.key位于/home/syed/bind/rndc.key

下面是我的/home/syed/bind/rndc.conf（10.10.70.81）

下面是my/etc/alleat/alleat.conf的bind9部分

[backend:agent:bind9]

#
# From designate.agent
#

# RNDC Host (string value)
rndc_host = 10.10.70.25

# RNDC Port (integer value)
rndc_port = 953

# RNDC Config File (string value)
rndc_config_file = /home/syed/bind/rndc.conf

# RNDC Key File (string value)
rndc_key_file = /home/syed/bind/rndc.key

# Path where zone files are stored (string value)
zone_file_path = /etc/bind

# Host to query when finding zones (string value)
query_destination = 127.0.0.1

下面是我在bind9（10.10.70.25）中的named.conf

当我跑的时候

rndc -c  /home/syed/bind/rndc.conf -k /home/syed/bind/rndc.key status

它显示“服务器已启动并正在运行”

当我跑的时候

rndc -c  /home/syed/bind/rndc.conf -k /home/syed/bind/rndc.key status

openstack区域创建--电子邮件admin@syedinttest5.orgcorp.syedintett5.org

我的权限被拒绝了

Command: sudo designate-rootwrap /etc/designate/rootwrap.conf rndc -s 10.10.70.25 -p 953 -c /home/syed/bind/rndc.conf -k /home/syed/bind/rndc.key addzone corp.syedinttest11.org  { type slave; masters { 10.10.70.81 port 5354;}; file "slave.corp.syedinttest11.org.faaf39d3-3745-49b4-a840-aefea6570ae4"; };
Exit code: 1
Stdout: u''
Stderr: u"rndc: 'addzone' failed: permission denied\n"
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Traceback (most recent call last):
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service   File "/opt/stack/designate/designate/pool_manager/service.py", line 462, in _create_zone_on_target
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service     backend.create_zone(context, zone)
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service   File "/opt/stack/designate/designate/backend/impl_bind9.py", line 98, in create_zone
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service     self._execute_rndc(rndc_op)
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service   File "/opt/stack/designate/designate/backend/impl_bind9.py", line 144, in _execute_rndc
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service     raise exceptions.Backend(e)
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Backend: Unexpected error while running command.
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Command: sudo designate-rootwrap /etc/designate/rootwrap.conf rndc -s 10.10.70.25 -p 953 -c /home/syed/bind/rndc.conf -k /home/syed/bind/rndc.key addzone corp.syedinttest11.org  { type slave; masters { 10.10.70.81 port 5354;}; file "slave.corp.syedinttest11.org.faaf39d3-3745-49b4-a840-aefea6570ae4"; };
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Exit code: 1
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Stdout: u''
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Stderr: u"rndc: 'addzone' failed: permission denied\n"

1。如何解决错误

---

2.如果我想设置bind9服务器，它是否总是从机指定的MDN？？？

在“named.conf.options”文件中，我做了一个条目

允许新区域是

解决了我的问题，但现在它抛出了不同的错误：

命名为[18183]：转储主文件：/etc/bind/tmp-L5fXBpKyNe:open:permission denied

bind9不需要后端代理。确保pools.yaml文件正确配置了bind9的IP地址和端口。

Command: sudo designate-rootwrap /etc/designate/rootwrap.conf rndc -s 10.10.70.25 -p 953 -c /home/syed/bind/rndc.conf -k /home/syed/bind/rndc.key addzone corp.syedinttest11.org  { type slave; masters { 10.10.70.81 port 5354;}; file "slave.corp.syedinttest11.org.faaf39d3-3745-49b4-a840-aefea6570ae4"; };
Exit code: 1
Stdout: u''
Stderr: u"rndc: 'addzone' failed: permission denied\n"
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Traceback (most recent call last):
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service   File "/opt/stack/designate/designate/pool_manager/service.py", line 462, in _create_zone_on_target
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service     backend.create_zone(context, zone)
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service   File "/opt/stack/designate/designate/backend/impl_bind9.py", line 98, in create_zone
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service     self._execute_rndc(rndc_op)
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service   File "/opt/stack/designate/designate/backend/impl_bind9.py", line 144, in _execute_rndc
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service     raise exceptions.Backend(e)
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Backend: Unexpected error while running command.
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Command: sudo designate-rootwrap /etc/designate/rootwrap.conf rndc -s 10.10.70.25 -p 953 -c /home/syed/bind/rndc.conf -k /home/syed/bind/rndc.key addzone corp.syedinttest11.org  { type slave; masters { 10.10.70.81 port 5354;}; file "slave.corp.syedinttest11.org.faaf39d3-3745-49b4-a840-aefea6570ae4"; };
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Exit code: 1
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Stdout: u''
2018-02-12 04:15:46.282 TRACE designate.pool_manager.service Stderr: u"rndc: 'addzone' failed: permission denied\n"