<div dir="ltr">it almost takes minute or so<div><br></div><div>and here are the logs</div><div><br></div><div><div>[<a href="mailto:root@dnsfw.isn.in">root@dnsfw.isn.in</a> /cf/cleandns/spool]# systemctl status -l -n 20 named.service</div><div>● named.service - Berkeley Internet Name Domain (DNS)</div><div> Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)</div><div> Active: failed (Result: timeout) since Wed 2018-04-18 23:09:44 IST; 1min 41s ago</div><div> Process: 1868 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=killed, signal=TERM)</div><div> Tasks: 0</div><div> Memory: 10.9M</div><div><br></div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 127.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 127.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 254.169.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 2.0.192.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 100.51.198.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 113.0.203.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: D.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 8.E.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 9.E.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: A.E.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: B.E.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: command channel listening on 127.0.0.1#953</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: command channel listening on ::1#953</div><div>Apr 18 23:09:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> systemd[1]: named.service start operation timed out. Terminating.</div><div>Apr 18 23:09:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).</div><div>Apr 18 23:09:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> systemd[1]: Unit named.service entered failed state.</div><div>Apr 18 23:09:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> systemd[1]: named.service failed.</div><div><b>[<a href="mailto:root@dnsfw.isn.in">root@dnsfw.isn.in</a> /cf/cleandns/spool]# journalctl -xe</b></div><div>Apr 18 23:08:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 115.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 116.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 117.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 118.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 119.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 120.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 121.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 122.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 123.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 124.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 125.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 126.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 127.100.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 127.IN-ADDR.ARPA</div><div>Apr 18 23:08:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 254.169.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 2.0.192.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 100.51.198.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 113.0.203.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 255.255.255.255.IN-ADDR.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: D.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 8.E.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 9.E.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: A.E.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: B.E.F.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: automatic empty zone: 8.B.D.0.1.0.0.2.IP6.ARPA</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: command channel listening on 127.0.0.1#953</div><div>Apr 18 23:08:46 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> named[1869]: command channel listening on ::1#953</div><div>Apr 18 23:09:42 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> dockerd-current[880]: time="2018-04-18T23:09:41.305371273+05:30" level=error msg="libcontainerd: failed to receive event from containerd: r</div><div>Apr 18 23:09:43 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> dockerd-current[880]: time="2018-04-18T23:09:41.859430667+05:30" level=info msg="libcontainerd: new containerd process, pid: 1877"</div><div>Apr 18 23:09:43 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> dockerd-current[880]: time="2018-04-18T23:09:42.860103049+05:30" level=info msg="libcontainerd: new containerd process, pid: 1887"</div><div>Apr 18 23:09:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> systemd[1]: named.service start operation timed out. Terminating.</div><div>Apr 18 23:09:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> systemd[1]: Failed to start Berkeley Internet Name Domain (DNS).</div><div>-- Subject: Unit named.service has failed</div><div>-- Defined-By: systemd</div><div>-- Support: <a href="http://lists.freedesktop.org/mailman/listinfo/systemd-devel">http://lists.freedesktop.org/mailman/listinfo/systemd-devel</a></div><div>--</div><div>-- Unit named.service has failed.</div><div>--</div><div>-- The result is failed.</div><div>Apr 18 23:09:45 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> polkitd[532]: Unregistered Authentication Agent for unix-process:1857:160748 (system bus name :1.29, object path /org/freedesktop/PolicyKit</div><div>Apr 18 23:09:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> systemd[1]: Unit named.service entered failed state.</div><div>Apr 18 23:09:44 <a href="http://dnsfw.isn.in">dnsfw.isn.in</a> systemd[1]: named.service failed.</div></div><div><br></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 18, 2018 at 7:38 PM, Warren Kumari <span dir="ltr"><<a href="mailto:warren@kumari.net" target="_blank">warren@kumari.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><span class="">On Wed, Apr 18, 2018 at 5:13 AM, Daniel Stirnimann<br>
<<a href="mailto:daniel.stirnimann@switch.ch">daniel.stirnimann@switch.ch</a>> wrote:<br>
> On 18.04.18 10:57, Blason R wrote:<br>
>> Well it just loads fine when I run from command line i.e. named -u named<br>
>> -n 4 -c /etc/named.conf<br>
><br>
<br>
</span>... and how long does it take to start up when doing so (in case it is<br>
simply taking too long and systemd get bored waiting).<br>
<br>
Also, what does:<br>
<br>
systemctl status -l -n 50 named<br>
and<br>
journalctl -u named<br>
<br>
show?<br>
<br>
Gah, I hate systemd - it makes debugging startup really hard.<br>
W<br>
<span class=""><br>
<br>
<br>
> Just a guess. If you use and have SELinux in enforcing mode (see<br>
> getenforce), this could be a reason. Your user process runs unconfined<br>
> that's why it works from the command line if you have a policy violation.<br>
><br>
> You may want to check the audit logs and fix the broken configuration.<br>
><br>
> sealert -a /var/log/audit/audit.log<br>
><br>
><br>
> Daniel<br>
</span>> ______________________________<wbr>_________________<br>
> Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/bind-users</a> to unsubscribe from this list<br>
><br>
> bind-users mailing list<br>
> <a href="mailto:bind-users@lists.isc.org">bind-users@lists.isc.org</a><br>
> <a href="https://lists.isc.org/mailman/listinfo/bind-users" rel="noreferrer" target="_blank">https://lists.isc.org/mailman/<wbr>listinfo/bind-users</a><br>
<span class="HOEnZb"><font color="#888888"><br>
<br>
<br>
-- <br>
I don't think the execution is relevant when it was obviously a bad<br>
idea in the first place.<br>
This is like putting rabid weasels in your pants, and later expressing<br>
regret at having chosen those particular rabid weasels and that pair<br>
of pants.<br>
---maf<br>
</font></span></blockquote></div><br></div>