Configure Dumas DNS and NTP Server
athos
porthos
aramis
dartagnan
dumas
basil
peabody
merlose
netmask
192.168.128.129
192.168.128.130
192.168.128.131
192.168.128.132
192.168.128.133
192.168.128.134
192.168.128.135
192.168.128.136
255.255.255.240
12 October 2012
kerberos
Ubuntu
tally server 1 Ubuntu
tally server 2 Ubuntu
voter server Windows Web Server 2008
dns, ntp
Ubuntu
Linux development
Windows development
Linux development
Table of Contents
1
Document Version History: ..................................................................................................... 1
2
DNS server .............................................................................................................................. 1
2.1
install bind9 ...................................................................................................................... 1
2.2
named.conf.local .............................................................................................................. 1
2.3
evote forward reference .................................................................................................... 2
2.4
master-rev ......................................................................................................................... 3
2.5
restart ................................................................................................................................ 4
3
NPT Server .............................................................................................................................. 4
3.1
Ubuntu NTP server.......................................................................................................... 4
3.2
Ubuntu clients .................................................................................................................. 4
3.3
Windows Server 2008 ...................................................................................................... 5
1 Document Version History:
2012
Cliff McCullough
initial version
Notes and instructions provided here are for fresh installations
Final disclaimer: These instructions are an amalgamation of what worked. I did not get
everything to work, then retest the instructions from scratch. These instructions are believed to
be correct and complete. Other than that, good luck.
2 DNS server
configure dumas
2.1
install bind9
1. dumas$ sudo apt-get install bind9
2.2 named.conf.local
create /etc/bind/named.conf.local
Page 1 of 5
Configure Dumas DNS and NTP Server
12 October 2012
You have two options:
1. edit the file manually
a. athos$ sudo vi /etc/bind/named.conf.local
b. edit to match Listing 1.
2. copy the file from the configs folder
a. ssh the file named.conf.local from the configs folder to basil.
b. scp named.conf.local (initiated by dumas) to dumas.
c. move the file to /etc/bind.
Listing 1. named.conf.local
//
04 June 2012
//
// Do any local configuration here
//
// Consider adding the 1918 zones here, if they are not used in your
// organization
//include "/etc/bind/zones.rfc1918";
zone "128.168.192.in-addr.arpa" IN {
type master;
file "/etc/bind/evote-rev";
allow-transfer{ none; };
allow-update{ none; };
};
zone "evote" IN {
type master;
file "/etc/bind/evote-for";
allow-transfer{ none; };
allow-update{ none; };
};
2.3 evote forward reference
create /etc/bind/evote-for
You have two options:
1. edit the file manually
a. athos$ sudo vi /etc/bind/evote-for
b. edit to match Listing 2.
2. copy the file from the configs folder
a. ssh the file evote-for from the configs folder to basil.
b. scp evote-for (initiated by dumas) to dumas.
c. move the file to /etc/bind.
Page 2 of 5
Configure Dumas DNS and NTP Server
12 October 2012
Listing 2. evote-for
; Master zone file for .evote forward references
; 18 Septeber 2012
$TTL 2d;
default TTL 2 days
$ORIGIN evote.
@
IN
SOA
dumas.evote. admin.evote (
2012091801 ;serial number - year month day index
6h
;refresh periods for slave servers
6h
;retry wait time for slave is master fails
1w
;slave stop working if cannot contact master
1h
;minimum ttl for negative answers
)
IN
NS
;evote network
athos
6000
porthos
6000
aramis
6000
dartagnan
6000
dumas
6000
basil
6000
peabody
6000
merlose
6000
dumas.evote.
IN
IN
IN
IN
IN
IN
IN
IN
;kerberos
_kerberos._udp.eVote.
_kerberos._tcp.eVote.
_kerberos-adm._tcp.eVote.
_kpasswd._udp.eVote.
A
A
A
A
A
A
A
A
192.168.128.129
192.168.128.130
192.168.128.131
192.168.128.132
192.168.128.133
192.168.128.134
192.168.128.135
192.168.128.136
IN
IN
IN
IN
SRV
SRV
SRV
SRV
1
1
1
1
0
0
0
0
88
88
749
464
athos.evote.
athos.evote.
athos.evote.
athos.evote.
2.4 master-rev
create /etc/bind/evote-rev
You have two options:
1. edit the file manually
a. athos$ sudo vi /etc/bind/evote-rev
b. edit to match
2. copy the file from the configs folder
a. ssh the file evote-rev from the configs folder to basil.
b. scp evote-rev (initiated by dumas) to dumas.
c. move the file to /etc/bind.
Page 3 of 5
Configure Dumas DNS and NTP Server
12 October 2012
Listing 3. evote-rev
; Master zone file for .evote reverse references
; 18 September 2012
$TTL 2d;
default TTL 2 days
@
IN
SOA
dumas.evote. admin.evote (
2012091801 ;serial number - year month day index
6h
;refresh periods for slave servers
6h
;retry wait time for slave is master fails
1w
;slave stop working if cannot contact master
1h
;minimum ttl for negative answers
)
IN
NS
;evote network
129
IN
130
IN
131
IN
132
IN
133
IN
134
IN
135
IN
136
IN
2.5
dumas.evote.
PTR
PTR
PTR
PTR
PTR
PTR
PTR
PTR
athos.evote.
porthos.evote.
aramis.evote.
dartagnan.evote.
dumas.evote.
basil.evote.
peabody.evote.
merlose.evote.
restart
1. dumas$ sudo /etc/init.d/bind9 restart
3 NPT Server
3.1 Ubuntu NTP server
configure dumas
1. dumas$ sudo apt-get install ntp
2. dumas$ sudo vi /etc/ntp.conf
a. add after line 41
i.
restrict 192.168.128.128 mask 255.255.255.240 nomodify notrap
3. dumas$ sudo /etc/init.d/ntp restart
4. see results
a. dumas$ sudo ntpq -p
b. delay and offset values should be non-zero
c. jitter should be less than 100
3.2 Ubuntu clients
configure athos, porthos, aramis
Page 4 of 5
Configure Dumas DNS and NTP Server
12 October 2012
1. host$ sudo apt-get install ntp
2. host$ sudo vi /etc/ntp.conf
a. comment out all other servers, i.e. lines 19 through 22, and line 25
b. add after line 25
i.
server 192.168.128.133
ii.
- or - server dumas.evote
c. add after line 42
i.
restrict 192.168.128.128 mask 255.255.255.240 nomodify notrap
3. host$ sudo /etc/init.d/ntp restart
4. see results
a. host$ sudo ntpq -p
b. server dumas.evote, or its ip address, should be the only entry Note that the UCCS
DNS may screw this result.
c. delay and offset values should be non-zero
d. jitter should be less than 100
3.3 Windows Server 2008
configure dartagnan and peabody
1.
2.
3.
4.
5.
click on the clock lower right
select change date and time settings
select Internet Time tab | Change settings button
in the server window, enter 192.168.128.133.
click Update now
Page 5 of 5