Zone transfer from Windows DNS to BIND Failing /etc/tmp- open:permission denied

[Carl Byington]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Thu, 20 Apr 2006 10:11:13 +0000, BCW wrote:

> Apr 20 05:55:41 man10-1vm named[6845]: zone xch.com/IN: Transfer started.
> Apr 20 05:55:41 man10-1vm named[6845]: transfer of 'xch.com/IN' from
> 192.168.0.251#53: connected using 192.168.0.71#32783 Apr 20 05:55:41
> man10-1vm named[6845]: dumping master file: /etc/tmp-z1ARcpMXZC: open:
> permission denied Apr 20 05:55:41 man10-1vm named[6845]: transfer of
> 'xch.com/IN' from 192.168.0.251#53: failed while receiving responses:
> permission denied Apr 20 05:55:41 man10-1vm named[6845]: transfer of
> 'xch.com/IN' from 192.168.0.251#53: end of transfer

> The syslog entries above are from the bind server.  The windows server
> primary zone is AD integrated.  When the bind server requests a transfer
> the windows server log says it completed successfully.  Packet capture
> shows DNS information flowing to the secondary after the transfer
> request.
> The /etc/tmp open:permission denied message happens every time the
> transfer is initiated.

> How do I fix the permission denied problem and what is the /etc/tmp file
> open step  doing?

I ran into this same problem on Centos/RHEL where the distribution assumes
that slave zones will be in /var/named/slaves, but my /etc/named.conf
specifies /var/named as the location for all the zones, master and slave.
The permissions on /var/named did not include group writeable, so user
'named' was unable to write the transfered file into that directory.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.6 (GNU/Linux)

iD8DBQFER6slL6j7milTFsERAtrDAJ9tOv0FuOpRWpytnvQZa7IjDFa70QCfYEU5
qe3xgoNZ+GtHd4w4AopUbZQ=
=eBeA
-----END PGP SIGNATURE-----