<div dir="ltr">hmm..strange..How do I check can you please elaborate? Yes I m starting with root.</div><div class="gmail_extra"><br><div class="gmail_quote">On Sun, Nov 26, 2017 at 9:26 PM, Alberto Colosi <span dir="ltr"><<a href="mailto:alcol@hotmail.com" target="_blank">alcol@hotmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div dir="ltr">
<div id="m_8602517050315921213divtagdefaultwrapper" style="font-size:12pt;color:#000000;font-family:Calibri,Helvetica,sans-serif" dir="ltr">
<p style="margin-top:0;margin-bottom:0">When executed from crontab or systemd , you have missing user enviroment with UID , permission and enviroment variables</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">check some file permission or path or a missing full path
<br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0">when executed from systemd/kernel , you have a different UID and no path or other vars (before daemon take -u named , you are root)</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<p style="margin-top:0;margin-bottom:0"><br>
</p>
<br>
<br>
<div style="color:rgb(0,0,0)">
<hr style="display:inline-block;width:98%">
<div id="m_8602517050315921213divRplyFwdMsg" dir="ltr"><font style="font-size:11pt" face="Calibri, sans-serif" color="#000000"><b>From:</b> bind-users <<a href="mailto:bind-users-bounces@lists.isc.org" target="_blank">bind-users-bounces@lists.isc.<wbr>org</a>> on behalf of Blason R <<a href="mailto:blason16@gmail.com" target="_blank">blason16@gmail.com</a>><br>
<b>Sent:</b> Sunday, November 26, 2017 4:48 PM<br>
<b>To:</b> John W. Blue<br>
<b>Cc:</b> bind-users<br>
<b>Subject:</b> Re: My DNS sinkhole is failing to start</font>
<div> </div>
</div><div><div class="h5">
<div>
<div dir="ltr">Strange...when I started with command line it started successfully even catering all my zones and sinkholing the requests as well
<div><br>
</div>
<div> /usr/sbin/named -u named -d 10 -c /etc/named.conf<br>
</div>
<div><br>
</div>
<div>
<div>[<a href="mailto:root@dnsdf.isnlab.in" target="_blank">root@dnsdf.isnlab.in</a> /cf/cleandns/sbin]# rndc status</div>
<div>version: 9.9.4-RedHat-9.9.4-51.el7 (isnmaldef) <id:8f9657aa></div>
<div>CPUs found: 1</div>
<div>worker threads: 1</div>
<div>UDP listeners per interface: 1</div>
<div>number of zones: 88589</div>
<div>debug level: 10</div>
<div>xfers running: 0</div>
<div>xfers deferred: 0</div>
<div>soa queries in progress: 0</div>
<div>query logging is ON</div>
<div>recursive clients: 0/0/1000</div>
<div>tcp clients: 0/100</div>
<div>server is up and running</div>
</div>
<div><br>
</div>
<div><br>
</div>
<div>Look like OS bug? How can I find out exactly?</div>
</div>
<div class="m_8602517050315921213x_gmail_extra"><br>
<div class="m_8602517050315921213x_gmail_quote">On Sun, Nov 26, 2017 at 9:10 PM, John W. Blue <span dir="ltr">
<<a href="mailto:john.blue@rrcic.com" target="_blank">john.blue@rrcic.com</a>></span> wrote:<br>
<blockquote class="m_8602517050315921213x_gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12.0pt;line-height:1.3;color:#1f497d">
<div>So basic troubleshooting 101 .. break your problem into chunks. If you remove all of these sinkhole zones does BIND start?<br>
<br>
If it does start then start looking at the zones you are loading. If it does not start then start looking at BIND and/or the OS.<br>
<br>
Good hunting!<br>
<br>
John<br>
</div>
<div><br>
</div>
<div id="m_8602517050315921213x_m_9104040894194549286signature-x" class="m_8602517050315921213x_m_9104040894194549286signature_editor" style="font-family:Calibri,Arial,Helvetica,sans-serif;font-size:12.0pt;color:#1f497d">
Sent from <a href="http://www.9folders.com/" style="text-decoration:none;color:#009bdf" target="_blank">
Nine</a><br>
</div>
</div>
<div id="m_8602517050315921213x_m_9104040894194549286quoted_header" style="clear:both">
<hr style="border:none;height:1px;color:#e1e1e1;background-color:#e1e1e1">
<div style="border:none;padding:3.0pt 0cm 0cm 0cm"><span style="font-size:11.0pt;font-family:'Calibri','sans-serif'"><b>From:</b> Blason R <<a href="mailto:blason16@gmail.com" target="_blank">blason16@gmail.com</a>><br>
<b>Sent:</b> Nov 26, 2017 9:25 AM<br>
<b>To:</b> bind-users<br>
<b>Subject:</b> My DNS sinkhole is failing to start<br>
</span></div>
</div>
<div>
<div class="m_8602517050315921213x_h5"><br type="attribution">
<div>
<div dir="ltr">Hi Guys,
<div><br>
</div>
<div>I am setting sinkhole server and have almost around 123000 zones. The server is setup on CentOS 7.4.</div>
<div><br>
</div>
<div>Everything seems to be proper and have created the zones. however when I am starting named.service its failing and not sure why.</div>
<div><br>
</div>
<div>Can someone please help me? </div>
<div>
<div>[<a href="mailto:root@dnsdf.isnlab.in" target="_blank">root@dnsdf.isnlab.in</a> /cf/cleandns/sbin]# systemctl status named.service</div>
<div>● named.service - Berkeley Internet Name Domain (DNS)</div>
<div> Loaded: loaded (/usr/lib/systemd/system/named<wbr>.service; enabled; vendor preset: disabled)</div>
<div> Active: failed (Result: exit-code) since Sun 2017-11-26 20:52:29 IST; 13s ago</div>
<div> Process: 2135 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=1/FAILURE)</div>
<div> Main PID: 1709 (code=exited, status=0/SUCCESS)</div>
<div><br>
</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12aww7mdklwvh1sgd2kk1lwsr3.net/IN" target="_blank">12aww7mdklwvh1sgd2kk1lwsr3.net<wbr>/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12b0jv17vnwgdb6bmxf13yuq1e.net/IN" target="_blank">12b0jv17vnwgdb6bmxf13yuq1e.net<wbr>/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12b5sba8fsvv29jmm68o6rwk.org/IN" target="_blank">12b5sba8fsvv29jmm68o6rwk.org/I<wbr>N</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12b8ko6forrxv1oml8251kfizkh.com/IN" target="_blank">12b8ko6forrxv1oml8251kfizkh.co<wbr>m/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12bc8ds10wet991cms4qtnwlfzl.org/IN" target="_blank">12bc8ds10wet991cms4qtnwlfzl.or<wbr>g/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12bdyz8slslfbr1dhi81x20kcq.net/IN" target="_blank">12bdyz8slslfbr1dhi81x20kcq.net<wbr>/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: named.service: control process exited, code=exited status=1</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: Unit named.service entered failed state.</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: named.service failed.</div>
</div>
<div>######################</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>[<a href="mailto:root@dnsdf.isnlab.in" target="_blank">root@dnsdf.isnlab.in</a> /cf/cleandns/sbin]# journalctl -xe</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://1298sxi1n08hmmr5agkr1vzcm2r.com/IN" target="_blank">1298sxi1n08hmmr5agkr1vzcm2r.co<wbr>m/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://129ax9r9558xk135lw6ueaewun.org/IN" target="_blank">129ax9r9558xk135lw6ueaewun.org<wbr>/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://129cbttfzmkz4x2ziijr14j5b.com/IN" target="_blank">129cbttfzmkz4x2ziijr14j5b.com/<wbr>IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://129ei6z1bn458l1lcpsxg1x35586.net/IN" target="_blank">129ei6z1bn458l1lcpsxg1x35586.n<wbr>et/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://129jbef21rpai1s46moh8pe2yl.net/IN" target="_blank">129jbef21rpai1s46moh8pe2yl.net<wbr>/IN</a>: loaded serial 2006060301</div>
</div>
<div>
<div>Nov 26 20:52:19 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> bash[2135]: zone
<a href="http://12bdyz8slslfbr1dhi81x20kcq.net/IN" target="_blank">12bdyz8slslfbr1dhi81x20kcq.net<wbr>/IN</a>: loaded serial 2006060301</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: named.service: control process exited, code=exited status=1</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).</div>
<div>-- Subject: Unit named.service has failed</div>
<div>-- Defined-By: systemd</div>
<div>-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel" target="_blank">
http://lists.freedesktop.org/m<wbr>ailman/listinfo/systemd-devel</a></div>
<div>--</div>
<div>-- Unit named.service has failed.</div>
<div>--</div>
<div>-- The result is failed.</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: Unit named.service entered failed state.</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> systemd[1]: named.service failed.</div>
<div>Nov 26 20:52:29 <a href="http://dnsdf.isnlab.in" target="_blank">dnsdf.isnlab.in</a> polkitd[2124]: Unregistered Authentication Agent for unix-process:2119:1791615 (system bus name :1.54, object path /org/freedeskto</div>
</div>
<div><br>
</div>
</div>
</div>
</div>
</div>
</div>
<br>
______________________________<wbr>_________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">
https://lists.isc.org/mailman/<wbr>listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org" target="_blank">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/bind-users</a><br>
</blockquote>
</div>
<br>
</div>
</div>
</div></div></div>
</div>
</div>
<br>______________________________<wbr>_________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
bind-users mailing list<br>
<a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/bind-users</a><br></blockquote></div><br></div>