problem with zone transfer on slave

[K.C. Chan]

I am getting this error on my slave dns in regards to zone transfer: " isc_file_settime(named.domain): permission denied" Does any one know what is this? Thanks.

[U.SivaKumar_2]

hi,
please give more details.
what is the primary DNS OS ?.
which is the BIND you are using in both the
servers ?.
Have u set any acl lists( access control list) in the primary DNS server ?.

regards,
U.SivaKumar

[Bill Thorsteinson]

You need an ACL for your
internal or secondary servers
like this. List your
secondaries or use a mask.

acl internal {
127.0.0.1;
192.168.1.1/24;
};


Add the following grant to
your zone definitions.

allow-transfer { internal; };

[K.C. Chan]

All, sorry for bothering you guys; it's a stupid mistake I make, it turns out to be file permission problem.

Bill, nice to know you can control zone transfer. I assumed this is done on the Primary DNS, correct? Thanks.

[Bill Thorsteinson]

Zone files need to be
restricted on both the primary
and slaves. Both are
authorative servers for the
zone, and have the full
zone.

Restricting zone transfers
prevents giving away a
list of all your servers.