New Install - Bind problem

Discussion in 'Installation/Configuration' started by Brenton, May 20, 2008.

  1. Brenton

    Brenton New Member

    Hi

    I'm busy with a new install on Ubuntu 8.04 server and have reached the Bind stage of the steps. I have done all the steps as listed (I have triple checked to make sure) and when I run the "/etc/init.d/bind9 start" command I get a [fail]. When I check /var/log/syslog I see the following message:
    Code:
    May 20 15:36:07 server named[5696]: starting BIND 9.4.2 -u bind -t /var/lib/named
    May 20 15:36:07 server named[5696]: found 1 CPU, using 1 worker thread
    May 20 15:36:07 server named[5696]: loading configuration from '/etc/bind/named.conf'
    May 20 15:36:07 server named[5696]: none:0: open: /etc/bind/named.conf: permission denied
    May 20 15:36:07 server named[5696]: loading configuration: permission denied
    May 20 15:36:07 server named[5696]: exiting (due to fatal error)
    May 20 15:36:07 server kernel: [ 6378.721706] audit(1211290567.766:2): type=1503 operation="inode_permission" requested_mask="r::" denied_mask="r::" name="/var/lib/named/etc/bind/named.conf" pid=5697 profile="/usr/sbin/named" namespace="default"
    Is it posible to tell me what I'm doing wrong from the above?

    Regards
    Brenton
     
  2. Brenton

    Brenton New Member

    Solved

    I just rebooted the server and decided to try again and all is well.

    I can't quite explain it, but it seemed to be something to do with user "bind"

    Regards
    Brenton
     
  3. till

    till Super Moderator Staff Member ISPConfig Developer

    Please post the output of:

    ls -la /etc/bind/
     
  4. Brenton

    Brenton New Member

    Hi till

    As I said, bind now starts after I'd rebooted and all seems to be working now.

    Here is the output requested:
    Code:
    drwxr-sr-x 2 bind bind 4096 2008-05-20 15:28 .
    drwxr-xr-x 3 root root 4096 2008-05-20 15:34 ..
    -rw-r--r-- 1 bind bind  237 2008-04-09 21:42 db.0
    -rw-r--r-- 1 bind bind  271 2008-04-09 21:42 db.127
    -rw-r--r-- 1 bind bind  237 2008-04-09 21:42 db.255
    -rw-r--r-- 1 bind bind  353 2008-04-09 21:42 db.empty
    -rw-r--r-- 1 bind bind  270 2008-04-09 21:42 db.local
    -rw-r--r-- 1 bind bind 2878 2008-04-09 21:42 db.root
    -rw-r--r-- 1 bind bind  907 2008-04-09 21:42 named.conf
    -rw-r--r-- 1 bind bind  165 2008-04-09 21:42 named.conf.local
    -rw-r--r-- 1 bind bind  695 2008-04-09 21:42 named.conf.options
    -rw-r----- 1 bind bind   77 2008-05-20 15:28 rndc.key
    -rw-r--r-- 1 bind bind 1317 2008-04-09 21:42 zones.rfc1918
    
    Regards
    Brenton
     
  5. ELMIT

    ELMIT New Member

    I have the same problem, ... ls -la /etc/bind/ looks the same.

    What can I do next?

    bye

    R.
     
  6. ELMIT

    ELMIT New Member

    partially solved.

    I changed the /etc/apparmor.d/usr.sbin.named to:
    # Ronald changed was: /etc/bind/** r,
    /etc/bind/** rw,
    # Ronald changed was: /var/lib/bind/** rw,
    /var/lib/named/** rw,
    /var/cache/bind/** rw,

    I use /var/lib/named instead of /var/lib/bind


    However, if I use the option -u bind -t /var/lib/named it does not start.

    What am I still missing?

    bye

    R.
     
  7. till

    till Super Moderator Staff Member ISPConfig Developer

    Apparmor should be disabled as described in the perfects etup guide. Otherwise variuos services will not work correctly.
     

Share This Page