Web Server Administration Chapter 4 Name Resolution

advertisement
Web Server Administration
Chapter 4
Name Resolution
Overview








Understand the domain name service (DNS)
Identify the components of DNS
Configure zone files
Install and configure DNS in Linux
Understand name resolution in Windows
Install and configure DNS in Windows 2000
and 2003
Troubleshoot DNS
Use WINS to resolve computer names in
Windows
Understanding the DNS

DNS is used to map host names to IP addresses
on the Internet





Also called name resolution or address resolution
Whenever a host is added, a configuration file has to be manually
changed
A host represents a service on a server such as FTP or a Web
server
There can be many hosts on a single computer
A Microsoft Windows 2000 or Windows 2003
network uses DNS to resolve computer names on
a LAN

DNS in Windows is designed to be dynamic - as computers are
added to the network, DNS automatically changes
Clients


On your PC, the TCP/IP configuration
contains the address(es) of your DNS
server(s)
Whenever you use a URL, whether in a
browser, or a utility such as ping, DNS
servers are used
Domain Namespaces

The root level domain is "."


Top-level domains include com, org, fr


More have been added in 2000
Second-level domains are often owned by
companies and individuals


Significant in creating DNS files
microsoft.com, devry.edu
A subdomain is a further division of a secondlevel domain


For devry.edu, there is phx.devry.edu
Not common
Domain Namespaces




Second-level domains, such as devry.edu
have control over naming within their domain
Create hosts such as www, ftp, bb
A name such as www.devry.edu is a fully
qualified domain name (FQDN)
We could create subdomains such as phx

www.phx.devry.edu
New Top-Level Domains




.biz - businesses
.info - anyone can register
.name - must register first and last name
.pro - for professionals only


must provide proof
.aero, .museum, .coop are controlled by
organizations
Host Names



The first portion of a URL is typically a host name
Typically different from the name of the computer
Many hosts can be associated with the same Web server
How DNS Works
DNS Components

Name server – also known as DNS
server


supports name-to-address and address-toname resolution
Name resolver – also called DNS client


Can contact DNS server to lookup name
Used by browsers, e-mail clients, and client
utilities such as ping and tracert
DNS Servers that Define the
Internet


Primary and secondary servers store the
host names used on the Internet
Caching and forwarding servers search
the Internet for host names
Primary and Secondary Servers

Primary Server

Defines the hosts for the domain



Maintains the database for the domain
It has authority for the domain
Secondary Server



Gets data from primary server
Provides fault tolerance and load distribution
Required for Internet domains
Primary and Secondary Servers


If you use DNS, you will often work with your
ISP
In a simple environment, the ISP will have
the primary and secondary DNS servers


You contact them for changes
You can also split the servers


ISP has primary, you have secondary
You have primary, ISP has secondary
Primary and Secondary Servers




ISP maintains DNS
You have to send changes to ISP
You have the secondary server which
gets updates from the primary server
Your users reference your secondary
server which is faster
Primary and Secondary Servers



You have complete control over DNS
You can make changes whenever you
want
If your primary DNS goes down, the
secondary will continue to function (but
not indefinitely)
Resolve Host Names

Caching Server





Resolves host names
Caches (saves) the results
Automatically installed when DNS is installed
No configuration necessary
Forwarding Server

Caching server that has access to the Internet and
forwards traffic from other caching servers
Caching and Forwarding Servers
Zones



A zone is a part of the domain namespace
For a domain as small as technowidgets.com,
the domain name represents a single zone
For large organizations (such as IBM),
subdomains can be divided into separately
maintained zones

Each zone typically has a separate DNS
Zones

Zones must be contiguous




admin.devry.edu can be combined with devry.edu
admin.devry.edu cannot be combined with
student.devry.edu
There must be one primary DNS server in
each zone (plus a secondary server)
Each zone can have multiple secondary DNS
servers
Zone File Configuration

Forward Lookup


These zones contain entries that map
names to IP addresses
Reverse Lookup

These zones contain entries that map IP
addresses to names
Common DNS Records
DNS record
Function
Address (A)
Associates a host to an IP address.
Canonical name
(CNAME)
Creates an alias for a specified host.
Internet (IN)
Identifies Internet records; precedes most DNS record
entries.
Mail Exchanger
(MX)
Identifies a server used for processing and delivering e-mail
for the domain.
Name server (NS)
Identifies DNS servers for the DNS domain.
Pointer (PTR)
Performs reverse DNS lookups. Resolves an IP address to a
host name.
Start of Authority
(SOA)
Identifies the DNS server with the most current information for
the DNS domain.
DNS Configuration in Linux


/etc/named.conf describes the files that
configure the zones
There are two primary files that it describes

Forward lookup is described by
named.technowidgets.com


It has the host names and how to handle e-mail
Reverse lookup is described by named.0.168.192

Can be necessary for e-mail (SMTP) and security programs
/etc/named.conf
Creating a DNS for the technowidgets.com
domain


Default setup is for localhost 127.0.0.1
In named.conf add the following line
zone "technowidgets.com" {
type master;
file “named.technowidgets.com”;
};


This allows technowidgets.com to be resolved
by /var/named/named.technowidgets.com
There can be multiple domains in a single
named.conf file
/etc/named.conf

Also, we can add the following line
zone “0.168.192.in-addr.arpa” IN {
type master;
file “named.0.168.192”;
};


This allows for reverse lookup for the domain
It uses all or part of the 192.168.0.0 network
/var/named.technowidgets.com
$TTL
86400
@
IN SOA web1.technowidgets.com. admn.technowidgets.com. (
2002072100 ; Serial
28800
; Refresh
14400
; Retry
3600000 ; Expire
86400 ) ; Minimum
IN
NS
web1
IN
A
192.168.0.100
IN
MX 10 mail.technowidgets.com.
web1
IN
A
192.168.0.100
www
IN
CNAME web1
research IN
A
192.168.0.150
IN
MX 10 mail
mail
IN
A
192.168.0.200
named.0.168.192
$TTL 86400
@
IN SOA web1.technowidgets.com. admn.technowidgets.com. (
2002072100 ; Serial
28800
; Refresh
14400
; Retry
3600000 ; Expire
86400 ) ; Minimum
IN
NS
web1
100
150
200
IN
IN
IN
PTR
PTR
PTR
web1.technowidgets.com.
research.technowidgets.com.
mail.technowidgets.com.
Starting DNS in Linux

To start DNS


To restart DNS


/etc/rc.d/init.d/named restart
To stop DNS


/etc/rc.d/init.d/named start
/etc/rc.d/init.d/named stop
Make DNS start when you boot Linux

Add the command to start DNS to
/etc/rc.d/rc.local
Configuring Client DNS in Linux


Modify /etc/resolv.config
The following line directs the client to
use the DNS server at 192.168.0.100


nameserver 192.168.0.100
The following line associates this
computer with the technowidgets.com
domain

domain technowidgets.com
Test the DNS

Configure a Windows PC to use the DNS server





Start->Settings->Network and Dial-up Connections
Right-click on Local Area Connection and select
Properties
Select Internet Protocol (TCP/IP) and click on
Properties
Change DNS to 192.168.0.10
Reboot and ping www.technowidgets.com
Name Resolution in Windows



NetBios (computer) names are broadcast to
the local network
Starting with Windows NT, WINS database
has computer name to IP address resolution
Windows 2000 introduces Dynamic DNS


DNS is required for Active Directory Services
DNS as described for Linux can also be
configured

Wizards guide you through the configuration
Finished DNS Configuration in
Windows
Troubleshooting DNS
ping

ping displays name resolution even if the computer cannot be contacted
Troubleshooting DNS
nslookup

nslookup can display information from the DNS server
Troubleshooting DNS
dig – available on Linux
Summary





DNS is an application that translates names
to IP addresses and IP addresses to names
Organized in a hierarchical structure
Servers come in many forms: primary,
secondary, caching, forwarding
To configure DNS, set up a forward and
reverse zone
Use ping, nslookup, and dig to troubleshoot
DNS
Download