Hi I'm busy with a new install on Ubuntu 8.04 server and have reached the Bind stage of the steps. I have done all the steps as listed (I have triple checked to make sure) and when I run the "/etc/init.d/bind9 start" command I get a [fail]. When I check /var/log/syslog I see the following message: Code: May 20 15:36:07 server named[5696]: starting BIND 9.4.2 -u bind -t /var/lib/named May 20 15:36:07 server named[5696]: found 1 CPU, using 1 worker thread May 20 15:36:07 server named[5696]: loading configuration from '/etc/bind/named.conf' May 20 15:36:07 server named[5696]: none:0: open: /etc/bind/named.conf: permission denied May 20 15:36:07 server named[5696]: loading configuration: permission denied May 20 15:36:07 server named[5696]: exiting (due to fatal error) May 20 15:36:07 server kernel: [ 6378.721706] audit(1211290567.766:2): type=1503 operation="inode_permission" requested_mask="r::" denied_mask="r::" name="/var/lib/named/etc/bind/named.conf" pid=5697 profile="/usr/sbin/named" namespace="default" Is it posible to tell me what I'm doing wrong from the above? Regards Brenton
Solved I just rebooted the server and decided to try again and all is well. I can't quite explain it, but it seemed to be something to do with user "bind" Regards Brenton
Hi till As I said, bind now starts after I'd rebooted and all seems to be working now. Here is the output requested: Code: drwxr-sr-x 2 bind bind 4096 2008-05-20 15:28 . drwxr-xr-x 3 root root 4096 2008-05-20 15:34 .. -rw-r--r-- 1 bind bind 237 2008-04-09 21:42 db.0 -rw-r--r-- 1 bind bind 271 2008-04-09 21:42 db.127 -rw-r--r-- 1 bind bind 237 2008-04-09 21:42 db.255 -rw-r--r-- 1 bind bind 353 2008-04-09 21:42 db.empty -rw-r--r-- 1 bind bind 270 2008-04-09 21:42 db.local -rw-r--r-- 1 bind bind 2878 2008-04-09 21:42 db.root -rw-r--r-- 1 bind bind 907 2008-04-09 21:42 named.conf -rw-r--r-- 1 bind bind 165 2008-04-09 21:42 named.conf.local -rw-r--r-- 1 bind bind 695 2008-04-09 21:42 named.conf.options -rw-r----- 1 bind bind 77 2008-05-20 15:28 rndc.key -rw-r--r-- 1 bind bind 1317 2008-04-09 21:42 zones.rfc1918 Regards Brenton
partially solved. I changed the /etc/apparmor.d/usr.sbin.named to: # Ronald changed was: /etc/bind/** r, /etc/bind/** rw, # Ronald changed was: /var/lib/bind/** rw, /var/lib/named/** rw, /var/cache/bind/** rw, I use /var/lib/named instead of /var/lib/bind However, if I use the option -u bind -t /var/lib/named it does not start. What am I still missing? bye R.
Apparmor should be disabled as described in the perfects etup guide. Otherwise variuos services will not work correctly.