人才信息管理数据库 sql查询

一、缓存域名服务器
1、安装与配置
[root@localhost ~]# yum -y install bind bind-chroot bind-util bind-libs DNS服务器所需的软件包
[root@localhost ~]# vim /etc/named.conf DNS服务器的主配置文件
options {
listen-on port 53 { 192.168.1.24; }; 使用53端口监听，监听的ip地192.168.1.24
listen-on-v6 port 53 { ::1; }; 监听ipv6的IP地址选项
directory "/var/named"; DNS的根目录，由于安装了bind-chroot的所致， 因此服务的实际工作目录为/var/named/chroot/var/named
dump-file "/var/named/data/cache_dump.db"; 缓存转储文件
statistics-file "/var/named/data/named_stats.txt"; 记录了内存使用的统计信息
memstatistics-file "/var/named/data/named_mem_stats.txt";
allow-query { any; }; 允许查询的主机，默认为localhost
recursion yes; 可以递归查询
dnssec-enable yes;
dnssec-validation yes;
dnssec-lookaside auto;
bindkeys-file "/etc/named.iscdlv.key";
managed-keys-directory "/var/named/dynamic";
};

logging { named服务的日志文件信息
channel default_debug {
file "data/named.run";
severity dynamic;
};
};
zone "." IN { 根(.)域的配置及信息（也可以通过其它上级域名转发功能来
配置缓存域名服务器，可以自己去了解）
type hint;
file "named.ca";
};
[root@localhost ~]# ls -lh /etc/named.conf 主配置文件权限如下（红色字体）-rw-r----- 1 root named 934 10月 21 23:06 /etc/named.conf[root@localhost ~]# service named restart DNS的服务名称为named停止 named：. [确定]启动 named： [确定][root@localhost ~]# netstat -ltunp |grep named 查看端口监听状态tcp 0 0 192.168.1.24:53 0.0.0.0:* LISTEN 8049/namedtcp 0 0 127.0.0.1:953 0.0.0.0:* LISTEN 8049/namedtcp 0 0 ::1:53 :::* LISTEN 8049/namedtcp 0 0 ::1:953 :::* LISTEN 8049/namedudp 0 0 192.168.1.24:53 0.0.0.0:* 8049/named2、客户端测试[root@localhost ~]# echo nameserver 192.168.1.24 >> /etc/resolv.conf[root@localhost ~]# dig www.baidu.com; <<>> DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6 <<>> www.baidu.com;; global options: +cmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 57864;; flags: qr rd ra; QUERY: 1, ANSWER: 3, AUTHORITY: 5, ADDITIONAL: 5 ;; QUESTION SECTION:;www.baidu.com. IN A ;; ANSWER SECTION:www.baidu.com. 1200 IN CNAME www.a.shifen.com.www.a.shifen.com. 300 IN A 180.97.33.107www.a.shifen.com. 300 IN A 180.97.33.108 ;; AUTHORITY SECTION:a.shifen.com. 1200 IN NS ns5.a.shifen.com.a.shifen.com. 1200 IN NS ns3.a.shifen.com.3、注意事项客户端必须要跟服务器端通信（能ping通）及关闭selinux 二、主域名服务器配置1、配置（可以与缓存服务器共享一台主机）[root@localhost ~]# vim /etc/named.confoptions {listen-on port 53 { 192.168.1.24; }; 使用53端口监听，监听的ip地192.168.1.24listen-on-v6 port 53 { ::1; }; 监听ipv6的IP地址选项directory "/var/named"; DNS的根目录，由于安装了bind-chroot的所致，因此服务的实际目录 为/var/named/chroot/var/nameddump-file "/var/named/data/cache_dump.db"; 缓存转储文件statistics-file "/var/named/data/named_stats.txt"; 记录了内存使用的统计信息memstatistics-file "/var/named/data/named_mem_stats.txt";allow-query { any; }; 允许查询的主机，默认为localhostrecursion yes; 可以递归查询dnssec-enable yes;dnssec-validation yes;dnssec-lookaside auto;bindkeys-file "/etc/named.iscdlv.key";managed-keys-directory "/var/named/dynamic";}; logging { named服务的日志文件信息channel default_debug {file "data/named.run";severity dynamic;};};zone "." IN { 根(.)域的配置及信息type hint;file "named.ca";};zone "wxw.com" IN { 指定区名type master; 服务器类别，master为主域名file "wxw.com_zone"; 正向解析区域文件名wxw.com_zone，在/var/named目录下创建allow-transfer {192.168.1.124;}; 指定从（辅助）域名服务器IP};zone "1.168.192.in-addr.arpa" IN { 域名对应的ip地址网段为192.168.1.0，此处必须按照相 同的格式写type master;file "192.168.1.zone"; 反向解析文件名192.168.1.zoneallow-transfer {192.168.1.124;};};[root@localhost ~]# vim /var/named/wxw.com_zone 编辑正向解析文件$TTL 1D@ IN SOA ns1.wxw.com. mail.www.wxw.com. ( 2014102101 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum@ IN NS ns1.wxw.com. 主域名的域名地址ns1.wxw.com. IN A 192.168.1.24 主域名的ip地址@ IN NS ns2.wxw.com. 从域名的域名地址ns2.wxw.com. IN A 192.168.1.124 从域名的ip地址@ IN MX 10 mail.ww.wxw.com. 邮件服务器的域名地址mail.www.wxw.com. IN A 192.168.1.4www.wxw.com. IN A 192.168.1.2ftp.wxw.com IN A 192.168.1.3win7.wxw.com. IN A 192.168.1.224linux.wxw.com. IN CNAME ns1.wxw.com.smb.wxw.com. IN CNAME ns1.wxw.com.dhcp.wxw.com. IN CNAME ns1.wxw.com.[root@localhost ~]# vim /var/named/192.168.1.zone 反向解析文件$TTL 1D@ IN SOA ns1.wxw.com. mail.www.wxw.com. ( 2014102101 ; serial 1D ; refresh 1H ; retry 1W ; expire 3H ) ; minimum@ IN NS ns1.wxw.com.@ IN NS ns2.wxw.com.24 IN PTR ns1.wxw.com.124 IN PTR ns2.wxw.com.@ IN MX 10 mail.www.wxw.com.4 IN PTR mail.www.wxw.com.2 IN PTR www.wxw.com.3 IN PTR ftp.wxw.com.124 IN PTR win7.wxw.com.[root@localhost ~]# service named restart停止 named：. [确定]启动 named： [确定][root@localhost ~]# cat /etc/resolv.conf; generated by /sbin/dhclient-scriptsearch wxw.comnameserver 192.168.1.242、客户端测试[root@localhost ~]# dig www.wxw.com; <<>> DiG 9.8.2rc1-RedHat-9.8.2-0.23.rc1.el6_5.1 <<>> www.wxw.com;; global options: +cmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 13587;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION:;www.wxw.com. IN A;; ANSWER SECTION:www.wxw.com. 86400 IN A 192.168.1.2;; AUTHORITY SECTION:wxw.com. 86400 IN NS ns2.wxw.com.wxw.com. 86400 IN NS ns1.wxw.com.;; ADDITIONAL SECTION:ns1.wxw.com. 86400 IN A 192.168.1.24ns2.wxw.com. 86400 IN A 192.168.1.124;; Query time: 1 msec;; SERVER: 192.168.1.24#53(192.168.1.24);; WHEN: Wed Oct 22 11:47:47 2014;; MSG SIZE rcvd: 113 三、从域名服务器搭建与配置1、重新开启一台linux虚拟主机（CentOS 6.5），网卡ip为192.168.1.1242、服务的安装与配置[root@localhost ~]# yum -y install bind bind-chroot bind-util bind-libs[root@localhost ~]# vim /etc/named.confoptions {listen-on port 53 { 192.168.1.124; };listen-on-v6 port 53 { ::1; };directory "/var/named"; dump-file "/var/named/data/cache_dump.db";statistics-file "/var/named/data/named_stats.txt";memstatistics-file "/var/named/data/named_mem_stats.txt";allow-query { any; };recursion yes;dnssec-enable yes;dnssec-validation yes;dnssec-lookaside auto;bindkeys-file "/etc/named.iscdlv.key";# managed-keys-directory "/var/named/dynamic";}; logging { named服务的日志文件信息channel default_debug {file "data/named.run";severity dynamic;};};zone "." IN { 根(.)域的配置及信息type hint;file "named.ca";};zone "wxw.com" IN { 指定区名type slave; 服务器类别，slave为从域名服务器选项file "wxw.com_zone"; 正向解析区域文件名wxw.com_zone，在/var/named目录下创建masters {192.168.1.24;}; 指定主域名服务器IP};zone "1.168.192.in-addr.arpa" IN { 域名对应的ip地址网段为192.168.1.0，此处必须按照相 同的格式写type slave;file "192.168.1.zone"; 反向解析文件名192.168.1.zonemasters {192.168.1.24;};};[root@localhost ~]# chmod 770 /var/named/[root@localhost ~]# ll /var/named/ -ddrwxrwx--- 6 root named 4096 Oct 22 10:49 /var/named/ [root@localhost ~]# service named restart停止 named： [确定]启动 named： [确定]3、客户端测试[root@localhost ~]# dig @192.168.1.124 www.wxw.com; <<>> DiG 9.7.0-P2-RedHat-9.7.0-5.P2.el6 <<>> @192.168.1.124 www.wxw.com; (1 server found);; global options: +cmd;; Got answer:;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 22358;; flags: qr aa rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 2, ADDITIONAL: 2 ;; QUESTION SECTION:;www.wxw.com. IN A ;; ANSWER SECTION:www.wxw.com. 86400 IN A 192.168.1.2 ;; AUTHORITY SECTION:wxw.com. 86400 IN NS ns1.wxw.com.wxw.com. 86400 IN NS ns2.wxw.com. ;; ADDITIONAL SECTION:ns1.wxw.com. 86400 IN A 192.168.1.24ns2.wxw.com. 86400 IN A 192.168.1.124 ;; Query time: 1 msec;; SERVER: 192.168.1.124#53(192.168.1.124);; WHEN: Wed Oct 22 10:49:58 20144、注意事项：（1）、如果还是无法解析，请返回主域名服务器的/var/named目录给区域配置文件加上权限(单纯是为了练习的话，就加到最大权限777吧)（2）、以上的练习都是在关闭防火墙与seLinux的状态下操作的，如果防火墙开启，可自行去添加规则