<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-2022-jp">
<style type="text/css" style="display:none;"><!-- P {margin-top:0;margin-bottom:0;} --></style>
</head>
<body dir="ltr">
<div id="divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif;" dir="ltr">
<p style="margin-top:0;margin-bottom:0">When executed from crontab or systemd , you have missing user enviroment with UID , permission and enviroment variables</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">check some file permission or path or a missing full path
<br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">when executed from systemd/kernel , you have a different UID and no path or other vars (before daemon take -u named , you are root)</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<br>
<br>
<div style="color: rgb(0, 0, 0);">
<hr style="display:inline-block;width:98%" tabindex="-1">
<div id="divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> bind-users <bind-users-bounces@lists.isc.org> on behalf of Blason R <blason16@gmail.com><br>
<b>Sent:</b> Sunday, November 26, 2017 4:48 PM<br>
<b>To:</b> John W. Blue<br>
<b>Cc:</b> bind-users<br>
<b>Subject:</b> Re: My DNS sinkhole is failing to start</font>
<div> </div>
</div>
<div>
<div dir="ltr">Strange...when I started with command line it started successfully even catering all my zones and sinkholing the requests as well
<div><br>
</div>
<div> /usr/sbin/named -u named -d 10 -c /etc/named.conf<br>
</div>
<div><br>
</div>
<div>
<div>[<a href="mailto:root@dnsdf.isnlab.in">root@dnsdf.isnlab.in</a> /cf/cleandns/sbin]# rndc status</div>
<div>version: 9.9.4-RedHat-9.9.4-51.el7 (isnmaldef) <id:8f9657aa></div>
<div>CPUs found: 1</div>
<div>worker threads: 1</div>
<div>UDP listeners per interface: 1</div>
<div>number of zones: 88589</div>
<div>debug level: 10</div>
<div>xfers running: 0</div>
<div>xfers deferred: 0</div>
<div>soa queries in progress: 0</div>
<div>query logging is ON</div>
<div>recursive clients: 0/0/1000</div>
<div>tcp clients: 0/100</div>
<div>server is up and running</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Look like OS bug? How can I find out exactly?</div>
</div>
<div class="x_gmail_extra"><br>
<div class="x_gmail_quote">On Sun, Nov 26, 2017 at 9:10 PM, John W. Blue <span dir="ltr">
<<a href="mailto:john.blue@rrcic.com" target="_blank">john.blue@rrcic.com</a>></span> wrote:<br>
<blockquote class="x_gmail_quote" style="margin:0 0 0 .8ex; border-left:1px #ccc solid; padding-left:1ex">
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12.0pt; line-height:1.3; color:#1f497d">
<div>So basic troubleshooting 101 .. break your problem into chunks. If you remove all of these sinkhole zones does BIND start?<br>
<br>
If it does start then start looking at the zones you are loading. If it does not start then start looking at BIND and/or the OS.<br>
<br>
Good hunting!<br>
<br>
John<br>
</div>
<div><br>
</div>
<div id="x_m_9104040894194549286signature-x" class="x_m_9104040894194549286signature_editor" style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12.0pt; color:#1f497d">
Sent from <a href="http://www.9folders.com/" target="_blank" style="text-decoration:none; color:#009bdf">
Nine</a><br>
</div>
</div>
<div id="x_m_9104040894194549286quoted_header" style="clear:both">
<hr style="border:none; height:1px; color:#e1e1e1; background-color:#e1e1e1">
<div style="border:none; padding:3.0pt 0cm 0cm 0cm"><span style="font-size:11.0pt; font-family:'Calibri','sans-serif'"><b>From:</b> Blason R <<a href="mailto:blason16@gmail.com" target="_blank">blason16@gmail.com</a>><br>
<b>Sent:</b> Nov 26, 2017 9:25 AM<br>
<b>To:</b> bind-users<br>
<b>Subject:</b> My DNS sinkhole is failing to start<br>
</span></div>
</div>
<div>
<div class="x_h5"><br type="attribution">
<div>
<div dir="ltr">Hi Guys,
<div><br>
</div>
<div>I am setting sinkhole server and have almost around 123000 zones. The server is setup on CentOS 7.4.</div>
<div><br>
</div>
<div>Everything seems to be proper and have created the zones. however when I am starting named.service its failing and not sure why.</div>
<div><br>
</div>
<div>Can someone please help me? </div>
<div>
<div>[<a href="mailto:root@dnsdf.isnlab.in" target="_blank">root@dnsdf.isnlab.in</a> /cf/cleandns/sbin]# systemctl status named.service</div>
<div>● named.service - Berkeley Internet Name Domain (DNS)</div>
<div> Loaded: loaded (/usr/lib/systemd/system/<wbr>named.service; enabled; vendor preset: disabled)</div>
<div> Active: failed (Result: exit-code) since Sun 2017-11-26 20:52:29 IST; 13s ago</div>
<div> Process: 2135 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=1/FAILURE)</div>
<div> Main PID: 1709 (code=exited, status=0/SUCCESS)</div>
<div><br>
</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12aww7mdklwvh1sgd2kk1lwsr3.net/IN" target="_blank">12aww7mdklwvh1sgd2kk1lwsr3.<wbr>net/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12b0jv17vnwgdb6bmxf13yuq1e.net/IN" target="_blank">12b0jv17vnwgdb6bmxf13yuq1e.<wbr>net/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12b5sba8fsvv29jmm68o6rwk.org/IN" target="_blank">12b5sba8fsvv29jmm68o6rwk.org/<wbr>IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12b8ko6forrxv1oml8251kfizkh.com/IN" target="_blank">12b8ko6forrxv1oml8251kfizkh.<wbr>com/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12bc8ds10wet991cms4qtnwlfzl.org/IN" target="_blank">12bc8ds10wet991cms4qtnwlfzl.<wbr>org/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12bdyz8slslfbr1dhi81x20kcq.net/IN" target="_blank">12bdyz8slslfbr1dhi81x20kcq.<wbr>net/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: named.service: control process exited, code=exited status=1</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: Unit named.service entered failed state.</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: named.service failed.</div>
</div>
<div>######################</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>[<a href="mailto:root@dnsdf.isnlab.in" target="_blank">root@dnsdf.isnlab.in</a> /cf/cleandns/sbin]# journalctl -xe</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://1298sxi1n08hmmr5agkr1vzcm2r.com/IN" target="_blank">1298sxi1n08hmmr5agkr1vzcm2r.<wbr>com/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://129ax9r9558xk135lw6ueaewun.org/IN" target="_blank">129ax9r9558xk135lw6ueaewun.<wbr>org/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://129cbttfzmkz4x2ziijr14j5b.com/IN" target="_blank">129cbttfzmkz4x2ziijr14j5b.com/<wbr>IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://129ei6z1bn458l1lcpsxg1x35586.net/IN" target="_blank">129ei6z1bn458l1lcpsxg1x35586.<wbr>net/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://129jbef21rpai1s46moh8pe2yl.net/IN" target="_blank">129jbef21rpai1s46moh8pe2yl.<wbr>net/IN</a>: loaded serial 2006060301</div>
</div>
<div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12bdyz8slslfbr1dhi81x20kcq.net/IN" target="_blank">12bdyz8slslfbr1dhi81x20kcq.<wbr>net/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: named.service: control process exited, code=exited status=1</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).</div>
<div>-- Subject: Unit named.service has failed</div>
<div>-- Defined-By: systemd</div>
<div>-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel" target="_blank">
http://lists.freedesktop.org/<wbr>mailman/listinfo/systemd-devel</a></div>
<div>--</div>
<div>-- Unit named.service has failed.</div>
<div>--</div>
<div>-- The result is failed.</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: Unit named.service entered failed state.</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: named.service failed.</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> polkitd[2124]: Unregistered Authentication Agent for unix-process:2119:1791615 (system bus name :1.54, object path /org/freedeskto</div>
</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
______________________________<wbr>_________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">
https://lists.isc.org/mailman/<wbr>listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/bind-users</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</div>
</div>
</body>
</html>