Apricot 2003 DNS Workshop


The Slides and the Files

Below are the slides in the order they were presented and the example files that where presented in relation to the lab work.

Wednesday Morning Introduction to DNS pdf, powerpoint (ppt) or HTML
Wednesday Afternoon Installing Bind pdf, powerpoint (ppt) or HTML

Lab work: Configuring a resolver

Configuring a resolver pdf, powerpoint (ppt) or HTML
named.conf is the configuration file
named.root contains the root hints file
localhost. contains authoritative localhost data
0.0.127.in-addr.arpa. contains authoritative reverse mapping for 127.0.0/24 addresses
Thursday Morning DNS Registries pdf only
Thursday Afternoon Trouble shooting tools pdf, powerpoint (ppt) or HTML
RDNC and TSIG

(we only did RNDC..)

pdf, powerpoint (ppt) or HTML

Lab work: Configuring a master server with a forward zone

Thursday notes description of the network setup and a general explanation of the process
ns1.conf The configuration file for the master server
ns2.conf The configuration file for the slave server
named.root hint file (same as above)
overue.bill Example forward zone file
rndc.ns1.conf rndc configuration that matches ns1.conf
rndc.ns2.conf rndc configuration that matches ns2.conf (the slave)
Logging in BIND Link to the logging statements for the bind configuration
Friday Morning Notifies in bind Link to the notify section in bind
RDNC and TSIG

(Today we did TSIG)

pdf, powerpoint (ppt) or HTML

Lab work: Continuing master/slave configuration

Friday notes Explanation and notes from Friday
TSIG in BIND Link to the TSIG section in the bind documentation
ns1.conf (logging) The master configuration file with logging added (see the notes for details)
ns1.conf (TSIG) The master configuration file with TSIG configured.
Ed's masters and slave configuration Contains a dump of the configuration after TSIG and logging where added. These are slightly different configuration files from the annotated ones above.
Friday Afternoon Reverse Tree pdf, powerpoint(ppt) or HTML

Lab work: Setting up a domain tree

Friday notes Explanation and notes from Friday ... (the same as above)
Workshop root hints The hints file for your recursive server
Ed's recursive server configuration Contains the dump of the configuration for the recursive server on 192.168.115.3
The reverse zone configuration. Contains a dump of the configuration with the master server authoritative for both 115.10.in-addr.arpa and 1.115.in-addr.arpa. Without any delegation yet.
Saturday Morning Reverse Zone Configuration Continuation of yesterdays work
Saturday Morning 2nd DNSSEC pdf, powerpoint(ppt) or HTML
Saturday notes Some notes on what we did.
The DNSSEC demo A directory containing a setup for the DNSSEC demo that we did. Note that you have to modify directory.conf if you want to run this at home.
Sunday Morning Dynamic Updates pdf, powerpoint(ppt) or html
Secure dynamic
update setup
A directory containing a setup for the secure dynamic update demo.
secure dynamic
update tar ball
The tar ball containing the distribution of the files above.

The Sources

Other References

The ISC web site where you can find more on bind and openreg
The RIPE NCC DISI project where you find tutorial material and tools for DNSSEC
www.dnssec.org A DNSSEC portal
Secure dynamic update Link to a page containing a HOWTO on secure dynamic update
Net::DNS and Net::DNS::SEC A link to two Perl libs that may be handy when building tools (note that there may be more recent versions and that these links may have expired.


Olaf Kolkman