<?xml version="1.0" encoding="utf-8"?><!DOCTYPE article  PUBLIC '-//OASIS//DTD DocBook XML V4.4//EN'  'http://www.docbook.org/xml/4.4/docbookx.dtd'><article><articleinfo><title>DaemonAdmin/Bind</title><revhistory><revision><revnumber>9</revnumber><date>2018-10-21 16:58:23</date><authorinitials>ClintonEbadi</authorinitials><revremark>mention puppet class, no need to mention changes made in squeeze nowadays</revremark></revision><revision><revnumber>8</revnumber><date>2015-04-15 06:37:32</date><authorinitials>ClintonEbadi</authorinitials><revremark>wheezy uses rdnc to restart bind. dust off a bit.</revremark></revision><revision><revnumber>7</revnumber><date>2013-01-06 21:35:59</date><authorinitials>ClintonEbadi</authorinitials><revremark>update a bit</revremark></revision><revision><revnumber>6</revnumber><date>2012-04-23 04:18:30</date><authorinitials>ClintonEbadi</authorinitials></revision><revision><revnumber>5</revnumber><date>2008-07-07 04:27:53</date><authorinitials>localhost</authorinitials><revremark>converted to 1.6 markup</revremark></revision><revision><revnumber>4</revnumber><date>2007-12-07 14:36:31</date><authorinitials>MichaelOlson</authorinitials><revremark>Point to Tinydns for adding hcoop subdomains</revremark></revision><revision><revnumber>3</revnumber><date>2007-10-22 14:17:08</date><authorinitials>MichaelOlson</authorinitials><revremark>Add item for new hcoop subdomains</revremark></revision><revision><revnumber>2</revnumber><date>2007-01-06 16:36:07</date><authorinitials>AdamChlipala</authorinitials><revremark>Extraneous &quot;Admin&quot; at the end was getting on my nerves.</revremark></revision><revision><revnumber>1</revnumber><date>2006-12-09 23:49:45</date><authorinitials>AdamChlipala</authorinitials></revision></revhistory></articleinfo><para>Basic setup of bind is handled by Puppet class <code>hcoop::service::bind9</code> </para><section><title>New Nameserver</title><para>When adding a new nameserver to hcoop.net, or changing the values of <code>ns[12].hcoop.net</code> <emphasis role="strong">update the glue records at our registrar</emphasis>. Otherwise, <code>hcoop.net</code> may stop resolving. </para></section><section><title>Config</title><para>We're using the stock Debian bind9 configuration. You'll need to open the <code>domain</code> input port, and allow outpit port 953 on localhost for <code>rdnc</code> to be able to control bind. </para></section><section><title>Filesystem layout</title><para>BIND data lives in <code>/etc/bind</code>.  This directory is seeded with the default files from the Debian <code>bind9</code> package.  Additionally, we add a <code>zones</code> subdirectory. </para><para><ulink url="https://wiki.hcoop.net/DaemonAdmin/Bind/DomTool#">DomTool</ulink> periodically deposits <code>/etc/bind/named.conf.local</code>, listing all of our hosted DNS zones and their master/slave statuses and configuration.  <ulink url="https://wiki.hcoop.net/DaemonAdmin/Bind/DomTool#">DomTool</ulink> also populates <code>/etc/bind/zones</code> with zonefiles referenced by <code>/etc/bind/named.conf.local</code> on any master servers. </para><section><title>Permissions</title><para><code>/etc/bind/zones</code> must be owned by user <code>bind</code> so that it can modify/create slave zone files. </para><!--rule (<hr>) is not applicable to DocBook--><para> <ulink url="https://wiki.hcoop.net/DaemonAdmin/Bind/CategorySystemAdministration#">CategorySystemAdministration</ulink> </para></section></section></article>