Error when start named

Sun Jun 26 22:34:04 UTC 2011

In message <1309102729.2191.9.camel at rodrigo-Calistoga-ICH7M-Chipset>, Rodrigo F
aria Tavares writes:
> Hello,
> 
> After copy the zone files for chroot, e change the pemissions
> in /var/named, now my dns zones is ready, resolving names. 
> 
> But come the logs in messages:
> 
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'ns.isc.afilias-nst.info/AAAA/IN': 2001:500:a::79#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns3.ultradns.org/A/IN': 2001:500:48::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns3.ultradns.org/AAAA/IN': 2001:500:c::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns4.ultradns.org/A/IN': 2001:500:b::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns4.ultradns.org/AAAA/IN': 2001:500:e::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns5.ultradns.info/A/IN': 2001:500:19::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns3.ultradns.org/A/IN': 2001:500:e::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns4.ultradns.org/A/IN': 2001:500:e::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns4.ultradns.org/AAAA/IN': 2001:500:b::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns3.ultradns.org/A/IN': 2001:500:b::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns3.ultradns.org/A/IN': 2001:500:c::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns4.ultradns.org/A/IN': 2001:500:40::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns4.ultradns.org/AAAA/IN': 2001:500:40::1#53
> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns4.ultradns.org/A/IN': 2001:500:f::1#53
> Jun 26 12:35:39 localhost named[4484]: dynamic/managed-keys.bind.jnl:
> create: file not found
> Jun 26 12:35:39 localhost named[4484]: zone managed-keys.bind/IN/_meta:
> keyfetch_done:dns_journal_open -> unexpected error 

Not a issue on first boot of a new system as you don't have any managed
keys yet on disk yet.  If it continues then it is a issue.

> Jun 26 12:35:39 localhost named[4484]: error (network unreachable)
> resolving 'pdns6.ultradns.co.uk/AAAA/IN': 2001:630:181:35::83#53
> Jun 26 12:35:40 localhost named[4484]: error (network unreachable)
> resolving 'dlv.isc.org/DLV/IN': 2001:4f8:0:2::20#53
> Jun 26 12:36:03 localhost named[4484]: dumping master file:
> dynamic/tmp-uROOS8s7nk: open: file not found

It looks like you are missing the directory "dynamic".  Named tried to
create the file dynamic/tmp-uROOS8s7nk to write the master file to and
the operating system reported that a file in the path didn't exist.

> What mean this lines ?
> My DNS is running dnssec ?

Yes.  You can test by running  "dig +dnssec soa ." and looking for the
"ad" flag.

e.g.

; <<>> DiG 9.6.0-APPLE-P2 <<>> +dnssec soa .
;; global options: +cmd
;; Got answer:
;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 14004
;; flags: qr rd ra ad; QUERY: 1, ANSWER: 2, AUTHORITY: 14, ADDITIONAL: 3

;; OPT PSEUDOSECTION:
; EDNS: version: 0, flags: do; udp: 4096
;; QUESTION SECTION:
;.				IN	SOA

;; ANSWER SECTION:
.			86400	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2011062601 1800 900 604800 86400
.			86400	IN	RRSIG	SOA 8 0 86400 20110703000000 20110625230000 34525 . KIvth8kB1r6FD4h/P0eKAJh7wpwB4U59lUDcoewQjxEuSXzFQKpgV0Ng gzSTd8cla2jyngm6+fYYZkCQhxn9ES54Yy2KhTafPwv94C/CIHiMHnB/ fCUiWlH34hfZbZ4QGxzKezVbOeIcs06s+ehl5mjkJZ26Whe1BsmXkpR+ uBg=

;; AUTHORITY SECTION:
.			264386	IN	NS	a.root-servers.net.
.			264386	IN	NS	d.root-servers.net.
.			264386	IN	NS	f.root-servers.net.
.			264386	IN	NS	k.root-servers.net.
.			264386	IN	NS	g.root-servers.net.
.			264386	IN	NS	l.root-servers.net.
.			264386	IN	NS	m.root-servers.net.
.			264386	IN	NS	c.root-servers.net.
.			264386	IN	NS	j.root-servers.net.
.			264386	IN	NS	h.root-servers.net.
.			264386	IN	NS	e.root-servers.net.
.			264386	IN	NS	i.root-servers.net.
.			264386	IN	NS	b.root-servers.net.
.			516656	IN	RRSIG	NS 8 0 518400 20110703000000 20110625230000 34525 . l8vHvUrLoJosx63p0wGkvYxYlYZMoLOQKYkdZ0mC1+Ij8IuYImsHSm/U JVMV8dCLGLqB9Fx0EJIutnAd6RIie1TWattg08CWDTSApNMsrcPSAdEs a6mpw9nJL0fXuld3w5+fIbP/4EbPMADzQsFFixyAJvDHkrJOm0Kni+C2 How=

;; ADDITIONAL SECTION:
f.root-servers.net.	465090	IN	A	192.5.5.241
f.root-servers.net.	465090	IN	AAAA	2001:500:2f::f

;; Query time: 402 msec
;; SERVER: 127.0.0.1#53(127.0.0.1)
;; WHEN: Mon Jun 27 08:33:34 2011
;; MSG SIZE  rcvd: 656

> my named.conf
> 
> options {
>         listen-on port 53 { 127.0.0.1; };
>         listen-on-v6 port 53 { ::1; };
>         directory       "/var/named";
>         dump-file       "/var/named/data/cache_dump.db";
>         statistics-file "/var/named/data/named_stats.txt";
>         memstatistics-file "/var/named/data/named_mem_stats.txt";
>         allow-query     { localhost; };
>         recursion yes;
> 
>         dnssec-enable yes;
>         dnssec-validation yes;
>         dnssec-lookaside auto;
> 
>         /* Path to ISC DLV key */
>         bindkeys-file "/etc/named.iscdlv.key";
> };
> 
-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: marka at isc.org