devopszones

DNS_Master_Slave_replication_Not_Happening_Permission_Denied

DNS records are not getting replicated to the slave Server. While troubleshooting found following errors. 

Error:
[root@master log]# tail -f update.log
04-Apr-2016 07:14:14.526 client x.x.x.x#56170: updating zone 'example.com/IN': update failed: RO-00031.example.com: prerequisite name is out of zone (NOTZONE)
04-Apr-2016 07:14:52.525 client x.x.x.x#63268: updating zone 'example.com/IN': update failed: RO-00031.example.com: prerequisite name is out of zone (NOTZONE)
[root@master log]# tail -f default.log
04-Apr-2016 07:14:52.579 client x.x.x.x#63268: update 'example.com/IN' denied
04-Apr-2016 07:15:56.173 client x.x.x.x#59965: update 'example.com/IN' denied
04-Apr-2016 07:17:03.504 client x.x.x.x#64167: update 'example.com/IN' denied
[root@master log]# tail -f security.log
04-Apr-2016 07:22:52.238 client 131.176.86.2#35082: query (cache) '16.97.3.10.in-addr.arpa/PTR/IN' denied
04-Apr-2016 07:23:10.669 client 213.14.52.132#49912: query (cache) '32.57.16.172.in-addr.arpa/PTR/IN' denied
04-Apr-2016 07:23:16.160 client 113.183.64.147#59741: query (cache) 'example.net.co/A/IN' denied
04-Apr-2016 07:23:16.483 client 113.183.64.147#59779: query (cache) 'example.net.co/A/IN' denied

Resolution:
1. Checked if my "allow-transfer { x.x.x.x; };" configurations are okay? The settings were correct in my case.
2. Checked the permission of named directory on slave. Changed them to following.

[root@slave log]#chmod 775 /var/named/chroot/var/named

Test: 
1. Updated some records on master server and reload named daemon.
2. Check the records are being transferred as expected.