架设主从DNS服务器出错!请高手帮忙

局域网内架设ＤＮＳ主从服务器，主服务器ＩＰ为１９２．１６８．１１．１
从服务器ＩＰ为１９２．１６８．１１．４１且从服务器/var/named/chroot/var/named目权限为７５０
出错信息如下，请高手解答
Dec 14 16:57:41 wpeng named[3649]: zone localdomain/IN: loaded serial 42
Dec 14 16:57:41 wpeng named[3649]: zone localhost/IN: loaded serial 42
Dec 14 16:57:41 wpeng named[3649]: running
Dec 14 16:57:41 wpeng named[3649]: zone 11.168.192.in-addr.arpa/IN: refresh: unexpected rcode (SERVFAIL) from master 192.168.11.1#53
Dec 14 16:57:42 wpeng named[3649]: zone intranet.grandford.com/IN: refresh: unexpected rcode (SERVFAIL) from master 192.168.11.1#53
Dec 14 16:57:42 wpeng kernel: audit(1166133462.292:0): avc:  denied  { write } for  pid=3650 exe=/usr/sbin/named name=named dev=hda6 ino=1514900 scontext=root:system_r:named_t tcontext=system_ubject_r:named_zone_t tclass=dir
Dec 14 16:57:42 wpeng named[3649]: dumping master file: tmp-XXXX1sOaiM: open: permission denied
Dec 14 16:57:42 wpeng named[3649]: transfer of '8.168.192.in-addr.arpa/IN' from 192.168.11.1#53: failed while receiving responses: permission denied
Dec 14 16:57:42 wpeng named[3649]: transfer of '8.168.192.in-addr.arpa/IN' from 192.168.11.1#53: end of transfer
Dec 14 16:57:42 wpeng kernel: audit(1166133462.301:0): avc:  denied  { write } for  pid=3650 exe=/usr/sbin/named name=named dev=hda6 ino=1514900 scontext=root:system_r:named_t tcontext=system_ubject_r:named_zone_t tclass=dir
Dec 14 16:57:42 wpeng named[3649]: dumping master file: tmp-XXXXVXtDK4: open: permission denied
Dec 14 16:57:42 wpeng named[3649]: transfer of 'intranet.silvertech.com.cn/IN' from 192.168.11.1#53: failed while receiving responses: permission denied
Dec 14 16:57:42 wpeng named[3649]: transfer of 'intranet.silvertech.com.cn/IN' from 192.168.11.1#53: end of transfer

---

permission denied

要簡單的話：
chown -R named /var/named

最好是修改 slave 的 config:
從 file "xxxx"; 改為 file "slaves/xxxx"

---

也有可能是options里设置了 allow-transfer { none; }; ,而zone里没有设置 allow-transfer { ip_slave; };

---

TAG标签 : 高手 帮忙 服务器 named Dec wpeng of from transfer