User Functions
Don't have an account yet? Sign up as a New User
Who's Online
Guest Users: 13
|
| View previous topic :: View next topic |
| Author |
Message |
BlackF1re Knows DNS is the answer

Joined: 24 Aug 2009 Posts: 30
|
Posted: Tue Sep 22, 2009 3:13 am Post subject: Using hosts.conf file instead of DNS... |
|
|
Hi all.
I have an Xsan with the following settings:
Metadata controllers: Mac Os X Server 10.5.6, xsan 2.11
Apple Clients: 2x Powermac G5 10.4.11, xsan 1.4.2, 1x Mac Pro 10.5.6, xsan 2.11
Stornext Clients: 1x windows xp 32, 1x windows vista business 64, 1x linux red hat
I have serious problems with settings DNS in a place where there are already two of them. Setting my DNS on the public network caused me a lot of troubles like:
- Xsan Admin opened after 2 min i clicked on the icon, random failed authentication, random failed mount of the xsan volumes, and so on.
So, to do a workaround, can i use the hosts.conf file inside the /etc dir on clients and metadata controllers.
i've read to put the hosts.conf priority over DNS i have to edit the resolv.conf file putting this string:
order hosts, bind
is this a bad idea? |
|
| Back to top |
|
 |
ACSA Xsan Master

Joined: 28 Jan 2007 Posts: 104
|
Posted: Tue Sep 22, 2009 12:10 pm Post subject: |
|
|
No, I've done it a couple of times when getting a DNS for the private network was more or less a political suicide...
But keep in mind that hosts are more maintenance intensive....
Greetings
Arnold |
|
| Back to top |
|
 |
aaron Site Admin

Joined: 19 Mar 2005 Posts: 405
|
Posted: Tue Sep 22, 2009 1:36 pm Post subject: |
|
|
Personally, I'd rather get DNS correct than use /etc/hosts. It is too easy to forget about those obscure files.
Besides, if you fix DNS on your network, who knows what else will begin to work? _________________ Aaron Freimark
http://www.tekserve.com/vcard/af.vcf |
|
| Back to top |
|
 |
JesusAli Xsan Master

Joined: 25 Jul 2008 Posts: 151
|
Posted: Tue Sep 22, 2009 2:09 pm Post subject: |
|
|
I don't have time to index them right now, but there are a couple VERY useful threads on this forum, and articles with screen shots detailing how DNS should be set up.
An important note, you only need to setup DNS for the Metadata Controllers. They need forward and reverse lookup entries. That's all.
That's all we did in my place, and it's been working perfectly.
Each client needs to know where the MDC is. That's all. That's why you have the entries.
The clients don't need to know where other clients are. So you don't need those entries. |
|
| Back to top |
|
 |
BlackF1re Knows DNS is the answer

Joined: 24 Aug 2009 Posts: 30
|
Posted: Wed Sep 23, 2009 2:34 am Post subject: |
|
|
| aaron wrote: | Personally, I'd rather get DNS correct than use /etc/hosts. It is too easy to forget about those obscure files.
Besides, if you fix DNS on your network, who knows what else will begin to work? |
The problem is the DNS is correct, with the master zone configured properly, and everything is perfect (like a lot of other San i have configured in the past), but for some obscure reasons, this time, when i press that "save" and "start DNS" buttons, weird things start to happening like i said before
That's why this time i have to try with hosts.conf and resolv.conf |
|
| Back to top |
|
 |
JesusAli Xsan Master

Joined: 25 Jul 2008 Posts: 151
|
Posted: Wed Sep 23, 2009 4:25 am Post subject: |
|
|
| Quote: | | I have serious problems with settings DNS in a place where there are already two of them. |
So are you trying to setup DNS on a 3rd machine (in addition to the 2 other DNS's you mention)?
At my location, we have one outside DNS server which is provided by our backbone internet provider.
Then we have one internal DNS machine on an Apple Xserve which is bound (BIND?) to the outside server.
So when a user in our building types in a website name, it queries our internal DNS, and says, do you know where this is? And the Xserve says, no, this is an outside address, here, I'll pass along your request to the outside DNS address...
So, when we setup the Xsan at my location, we made the entries for our MDC's directly on the internal DNS, in Apple Server Admin.
At this time, and in the same interface, we also made a zone for the Private Network and put in entries for the private network for the MDCs.
Is it possible that adding a 3rd machine listing DNS entries is what is causing your problems? |
|
| Back to top |
|
 |
aaron Site Admin

Joined: 19 Mar 2005 Posts: 405
|
Posted: Wed Sep 23, 2009 4:56 am Post subject: |
|
|
| BlackF1re wrote: | | The problem is the DNS is correct, with the master zone configured properly, and everything is perfect |
Here's a worksheet to prove you are right. When I underline a character, substitute the result of that previous step.
- DNS Server A IP address: ________________
- DNS Server B IP address: ________________
- MDC-A Public IP address: ________________
- MDC-A Private IP address: ________________
- MDC-B Public IP address: ________________
- MDC-B Private IP address: ________________
- Contents of DNS in MDC-A's Public Interface in Network Pref Pane: ______________________ (should match a & b with nothing more)
- Contents of DNS in MDC-B's Public Interface in Network Pref Pane: ______________________ (should match a & b with nothing more)
- Result of dig +short @a -x c: ______________________
- Result of dig +short @a -x d: ______________________
- Result of dig +short @a -x e: ______________________
- Result of dig +short @a -x f: ______________________
- Result of dig +short @b -x c: ______________________ (should match 3)
- Result of dig +short @b -x d: ______________________ (should match 4)
- Result of dig +short @b -x e: ______________________ (should match 5)
- Result of dig +short @b -x f: ______________________ (should match 6)
- Result of dig +short @a 3: ______________________ (should match c)
- Result of dig +short @a 4: ______________________ (should match d)
- Result of dig +short @a 5: ______________________ (should match e)
- Result of dig +short @a 6: ______________________ (should match f)
- Result of dig +short @b 3: ______________________ (should match c)
- Result of dig +short @b 4: ______________________ (should match d)
- Result of dig +short @b 5: ______________________ (should match e)
- Result of dig +short @b 6: ______________________ (should match f)
_________________ Aaron Freimark
http://www.tekserve.com/vcard/af.vcf |
|
| Back to top |
|
 |
BlackF1re Knows DNS is the answer

Joined: 24 Aug 2009 Posts: 30
|
Posted: Thu Sep 24, 2009 11:08 am Post subject: |
|
|
Really nice worksheet.
I'll try to explain in details.
At first, we decided to keep separate the Xsan network from the pre-existing network.
Previous cfg:
DNS Server A IP address: 192.168.40.10
DNS Server B IP address: 192.168.40.11
MDC-A Public IP address: 192.168.0.56
MDC-A Private IP address: 10.0.10.56
MDC-B Public IP address: 192.168.0.57
MDC-B Private IP address: 10.0.10.57
DNS on public ethernet of both mdc were 0.56 and 0.57 after started a DNS service with their own master zone and had the problems i've reported it (the networks were physically separated from the 40.x and their own dns)
Then i've recreated the San using the existing DNS:
New cfg after re-cabled
DNS Server A IP address: 192.168.40.10
DNS Server B IP address: 192.168.40.11
MDC-A Public IP address: 192.168.40.56
MDC-A Private IP address: 10.0.10.56
MDC-B Public IP address: 192.168.40.57
MDC-B Private IP address: 10.0.10.57
DNS on public ethernet of both mdc are 40.10 and 40.11
Added the ip addresses of the mdc 1 and 2 on the DNS Computer with the properly name to resolve. For now it's working but it's a lot slow mounting xsan volumes on the clients (about a minute), but i don't know if in this case, the problem is on the DNS of the customer.
Next week, on thursday, i'll be on this xsan again, and i'll test the "dig +short" and post the results
Sry for my english (i'm italian)
Thx a lot to all of you.
I'll keep you up to date. |
|
| Back to top |
|
 |
JesusAli Xsan Master

Joined: 25 Jul 2008 Posts: 151
|
Posted: Thu Sep 24, 2009 6:41 pm Post subject: |
|
|
Sounds good!
Some ideas about locking this down completely:
• Did you also add REVERSE Zones in the Leopard Server DNS service pane?
Sometimes they are added automatically when you make an entry, sometimes they are not.
• Review this thread and the threads it links to:
http://www.xsanity.com/forum/viewtopic.php?t=2923
But also review this thread, but especially this comment:
http://www.xsanity.com/forum/viewtopic.php?p=3331#3331
Here, MattG (who literally wrote the book on Xsan) points out the importance of adding reverse zones for the MDC's.
Good luck, let us know if you can get rid of the Volume Mounting lag. |
|
| Back to top |
|
 |
JesusAli Xsan Master

Joined: 25 Jul 2008 Posts: 151
|
|
| Back to top |
|
 |
BlackF1re Knows DNS is the answer

Joined: 24 Aug 2009 Posts: 30
|
Posted: Fri Sep 25, 2009 2:29 am Post subject: |
|
|
For the first question: i've checked and yes, the reverse zone was added automatically.
Thx a lot for the links. I'll read a lot this weekend. |
|
| Back to top |
|
 |
JesusAli Xsan Master

Joined: 25 Jul 2008 Posts: 151
|
Posted: Fri Sep 25, 2009 10:15 am Post subject: |
|
|
Hello Aaron, Great Worksheet!
Things have been working well for our Xsan, but I am a nerd and wanted to test out your Worksheet anyway.
And now I have a question.
Why do would a network usually have TWO addresses for DNS?
Here at my school, we used to have 1 DNS address, but now we have 2 DNS addresses.
The 1st is the internal Apple Xserve DNS server (172.x.x.x), the 2nd belongs to our backbone Internet provider (210.x.x.x on the outside internet). When you setup a station with DHCP, both addresses automatically populate the DNS field (in gray), separated by a comma.
When I run your worksheet, I get NO RESPONSES from anything sent to the 2nd DNS address (outside internet). The Terminal Prompt just automatically reloads, waiting for another command. Nothing times out or processes at all. I tried ping on the address and it DOES produce a response, so my MDC's can see it.
So I was just wondering if my location was rare, in that it has an outside internet address as the 2nd DNS address. Since your worksheet tells me to expect a response to that address.
At other locations, what else would/could that 2nd address be (for)? |
|
| Back to top |
|
 |
BlackF1re Knows DNS is the answer

Joined: 24 Aug 2009 Posts: 30
|
Posted: Thu Oct 01, 2009 11:09 am Post subject: |
|
|
Tested Xsan using hosts.conf
IT WORKS !!!
Of course is more intensive as maintenance, but it works.
Just remember two important things:
Into the file hosts.conf insert both name and primary DNS name of yours MDC
example of an hosts.conf file:
192.168.40.56 md1
192.168.40.56 md1.xsan.com
192.168.40.57 md2
192.168.40.57 md2.xsan.com
10.0.10.56 md1
10.0.10.56 md1.xsan.com
10.0.10.57 md2
10.0.10.57 md2.xsan.com
192.168.40.58 client1
10.0.10.58 client1
192.168.40.59 client2
10.0.10.59 client2
This is important to set into the hosts.conf files of yours MDC, but if you want to make things complete, put all data into the clients too.
Second thing: write "order hosts,bind" above all, into the resolv.conf file to make hosts.conf file priority over DNS service
both files are into /etc folder
Xsan is now working perfectly without delay mounting volume..... and without any DNS service activated on MDCs |
|
| Back to top |
|
 |
aaron Site Admin

Joined: 19 Mar 2005 Posts: 405
|
Posted: Thu Oct 01, 2009 11:50 am Post subject: |
|
|
| JesusAli wrote: | | Why do would a network usually have TWO addresses for DNS? |
As should be obvious from Xsanity, DNS is a critical service. Any critical service should have some redundancy. Therefore: two DNS servers to back one another up.
This isn't what you have, JesusAli. You have two DNS servers that provide different information, at least in some cases. That's not redundant. And you can't tell the Mac to use one DNS server for some queries and the other for other queries. So queries about the Xsan will sometimes go to the ISP's DNS, which won't have a clue. This will probably cause problems on your Xsan. _________________ Aaron Freimark
http://www.tekserve.com/vcard/af.vcf |
|
| Back to top |
|
 |
uroshnor partially protected

Joined: 18 Oct 2009 Posts: 8
|
Posted: Tue Oct 20, 2009 11:39 pm Post subject: If a hosts file works, but the DNS server doesn't ... |
|
|
| That is nature's way of telling you that you did not configure your DNS server correctly .... |
|
| Back to top |
|
 |
|
|
You cannot post new topics in this forum You cannot reply to topics in this forum You cannot edit your posts in this forum You cannot delete your posts in this forum You cannot vote in polls in this forum
|
Powered by phpBB © 2001, 2005 phpBB Group
|
|