Recent Problem with BIND 9 under Windows XP

[Vinny Abello]

Vincent Poy wrote:
> On 6/27/07, Mark Andrews <Mark_Andrews at isc.org> wrote:
>>> Greetings everyone:
>>>
>>> I'm having a problem with starting the ISC BIND service under Windows
>>> XP SP2 with all the latest MS patches.  I had been running BIND 9 for
>>> quite some time and every version of BIND9 including beta's, release
>>> candidates and release versions including 9.4.1 have ran fine until
>>> recently which I am not sure when since I don't usually monitor if
>>> BIND was started except after each installation and reboot.  And the
>>> config file has not been modified.  BIND is owned by the named account
>>> and is installed in C:\Windows\System32\dns with that directory and
>>> all directory under it having the named account with full permission
>>> to read/write.  My system acts as a secondary DNS with named.conf
>>> located in C:\WINDOWS\SYSTEM32\dns\etc.  When the system tries to
>>> start ISC BIND service, it shows in the event manager under System as
>>> a Error 2 events:
>>>
>>> Timeout (30000 milliseconds) waiting for the ISC BIND service to connect.
>>>
>>> followed by:
>>>
>>> The ISC BIND service failed to start due to the following error:
>>> The service did not respond to the start or control request in a
>>> timely fashion.
>>>
>>> If I try to start the ISC BIND service manually, I will get a pop-up
>>> window after 5-10 seconds that says and the same two events are in the
>>> event manager under System as a Error:
>>>
>>> Could not start ISC BIND service on Local Computer.
>>>
>>> Error 1053: The service did not respond to the start or control
>>> request in a timely fashion
>>        Look at the Application log.
> 
> Already tried that, there is nothing under Application log that
> relates to named, named is only shown under System log.

Setup logging to files as Windows has no native syslog which is where named info usually shows up. I log to files on all our Windows BIND systems. If BIND crashes, or won't start, etc... the answer is usually in (one of) the logs.

Remember when you're testing it and it appears to work from the command line, you are running from a different user account. You could possibly try to run it from the command line using the runas utility and specify the credentials that the service runs under, but I've never tried it and don't know what result you might get. It should work in theory though. I would give that a try if logging to file turns up nothing.

-- 

Vinny Abello
Network Engineer
vinny at tellurian.com
(973)940-6100
PGP Key Fingerprint: 3BC5 9A48 FC78 03D3 82E0  E935 5325 FBCB 0100 977A

Tellurian Networks - The Ultimate Internet Connection
http://www.tellurian.com (888)TELLURIAN

"Courage is resistance to fear, mastery of fear - not absence of fear" -- Mark Twain