<!DOCTYPE html>
<html>
<head>
<meta http-equiv="Content-Type" content="text/xhtml; charset=utf-8">
</head>
<body>
<div><div class="markdown">
<p dir="auto">On 1 Jun 2020, at 20:49, DeCaro, James John (Jim) CIV DISA FE (USA) via bind-users wrote:</p>
</div>
<div class="plaintext"><blockquote><p dir="auto">Also, BIND binaries are located in /usr/bin and /usr/sbin --sorry I forgot to mention that. I went ahead and re-compiled with ./configure --enable-full-report --with-gssapi=krb5-config --sysconfdir=/etc --with-openssl=/usr/local --localstatedir=/var --enable-fixed-rrset and installed it, now the default directories are correct but the service still goes into maintenance with the same error as produced by named -c /etc/named.conf -g.<br>
<br>
I apologize that my inexperience makes this confusing.<br>
<br>
<br>
V/R<br>
Jim DeCaro<br>
DISA<br>
Systems Administrator<br>
Windows and Unix Server Operations<br>
FE222/DoDNet Service Section<br>
Defense Enclave Services Directorate<br>
☎ 301-225-8180<br>
☎ 301-375-8180<br>
James.j.decaro3.civ@mail.mil<br>
James.j.decaro3.civ@mail.smil.mil<br>
<br>
"If you always do what you always did you will always get what you always got."<br>
<br>
<br>
-----Original Message-----<br>
From: DeCaro, James John (Jim) CIV DISA FE (USA)<br>
Sent: Monday, June 1, 2020 3:23 PM<br>
To: 'Anand Buddhdev' <anandb@ripe.net>; bind-users@lists.isc.org<br>
Subject: RE: [Non-DoD Source] Re: BIND installed on a Solaris 11.4 x 86 virtual server<br>
<br>
named -c /etc/named.conf -g<br>
01-Jun-2020 15:02:22.034 starting BIND 9.16.3 (Stable Release) <id:5ea41c1><br>
01-Jun-2020 15:02:22.034 running on SunOS i86pc 5.11 11.4.20.4.0<br>
01-Jun-2020 15:02:22.034 built with '--with-gssapi=krb5-config' 'LDFLAGS=-L/usr/local/lib -R/usr/local/lib' 'PKG_CONFIG_PATH=/usr/lib/pkgconfig:/usr/local/lib/pkgconfig'<br>
01-Jun-2020 15:02:22.034 running as: named -c /etc/named.conf -g<br>
01-Jun-2020 15:02:22.034 compiled by GCC 9.2.0<br>
01-Jun-2020 15:02:22.034 compiled with OpenSSL version: OpenSSL 1.1.1b 26 Feb 2019<br>
01-Jun-2020 15:02:22.034 linked to OpenSSL version: OpenSSL 1.1.1b 26 Feb 2019<br>
01-Jun-2020 15:02:22.034 compiled with libxml2 version: 2.9.9<br>
01-Jun-2020 15:02:22.034 linked to libxml2 version: 20909<br>
01-Jun-2020 15:02:22.035 compiled with json-c version: 0.12<br>
01-Jun-2020 15:02:22.035 linked to json-c version: 0.12<br>
01-Jun-2020 15:02:22.035 compiled with zlib version: 1.2.11<br>
01-Jun-2020 15:02:22.035 linked to zlib version: 1.2.11<br>
01-Jun-2020 15:02:22.035 ----------------------------------------------------<br>
01-Jun-2020 15:02:22.035 BIND 9 is maintained by Internet Systems Consortium,<br>
01-Jun-2020 15:02:22.035 Inc. (ISC), a non-profit 501(c)(3) public-benefit<br>
01-Jun-2020 15:02:22.035 corporation. Support and training for BIND 9 are<br>
01-Jun-2020 15:02:22.035 available at <a href="https://www.isc.org/support">https://www.isc.org/support</a><br>
01-Jun-2020 15:02:22.035 ----------------------------------------------------<br>
01-Jun-2020 15:02:22.035 found 2 CPUs, using 2 worker threads<br>
01-Jun-2020 15:02:22.035 using 2 UDP listeners per interface<br>
01-Jun-2020 15:02:22.038 using up to 21000 sockets<br>
01-Jun-2020 15:02:22.044 loading configuration from '/etc/named.conf' <<----------------------------correct<br>
01-Jun-2020 15:02:22.046 reading built-in trust anchors from file '/usr/local/etc/bind.keys'<br>
01-Jun-2020 15:02:22.049 using default UDP/IPv4 port range: [1024, 65535]<br>
01-Jun-2020 15:02:22.050 using default UDP/IPv6 port range: [1024, 65535]<br>
01-Jun-2020 15:02:22.051 listening on IPv4 interface net1, <IP> #53<br>
01-Jun-2020 15:02:22.053 creating TCP socket: address in use <<--------------------------????<br>
01-Jun-2020 15:02:22.053 IPv6 socket API is incomplete; explicitly binding to each IPv6 address separately<br>
01-Jun-2020 15:02:22.053 listening on IPv6 interface lo0, ::1#53<br>
01-Jun-2020 15:02:22.055 creating TCP socket: address in use <<--------------------------????<br>
01-Jun-2020 15:02:22.055 unable to listen on any configured interfaces<br>
01-Jun-2020 15:02:22.056 loading configuration: failure <<---------------------------------????<br>
01-Jun-2020 15:02:22.056 exiting (due to fatal error)<br>
<br>
OK, thanks I did not read it closely enough the first time. However it is still not loading. I had disabled svc:/network/dns/server:default prior to running the command to avoid 2 instances of named running and got the above output. When I enable it, it goes into maintenance. When I try named -c /etc/named.conf -g when dns/server is enabled (in maintenance) I get the same result as above.<br>
<br>
Note: the named.conf file is blank.<br>
<br>
Named -V<br>
BIND 9.16.3 (Stable Release) <id:5ea41c1><br>
running on SunOS i86pc 5.11 11.4.20.4.0<br>
built by make with '--with-gssapi=krb5-config' 'LDFLAGS=-L/usr/local/lib -R/usr/local/lib' 'PKG_CONFIG_PATH=/usr/lib/pkgconfig:/usr/local/lib/pkgconfig'<br>
compiled by GCC 9.2.0<br>
compiled with OpenSSL version: OpenSSL 1.1.1b 26 Feb 2019<br>
linked to OpenSSL version: OpenSSL 1.1.1b 26 Feb 2019<br>
compiled with libxml2 version: 2.9.9<br>
linked to libxml2 version: 20909<br>
compiled with json-c version: 0.12<br>
linked to json-c version: 0.12<br>
compiled with zlib version: 1.2.11<br>
linked to zlib version: 1.2.11<br>
threads support is enabled<br>
<br>
default paths: <<------------------------incorrect<br>
named configuration: /usr/local/etc/named.conf<br>
rndc configuration: /usr/local/etc/rndc.conf<br>
DNSSEC root key: /usr/local/etc/bind.keys<br>
nsupdate session key: /usr/local/var/run/named/session.key<br>
named PID file: /usr/local/var/run/named/named.pid<br>
named lock file: /usr/local/var/run/named/named.lock<br>
<br>
------------------->>default paths: these are not what I was shooting for --should be:<br>
<br>
named configuration: /etc/named.conf<br>
rndc configuration: /etc/rndc.conf<br>
DNSSEC root key: /etc/bind.keys<br>
nsupdate session key: /usr/var/run/named/session.key<br>
named PID file: /usr/var/run/named/named.pid<br>
named lock file: /usr/var/run/named/named.lock<br>
<br>
Thank you<br>
<br>
V/R<br>
Jim DeCaro<br>
DISA<br>
Systems Administrator<br>
Windows and Unix Server Operations<br>
FE222/DoDNet Service Section<br>
Defense Enclave Services Directorate<br>
☎ 301-225-8180<br>
☎ 301-375-8180<br>
James.j.decaro3.civ@mail.mil<br>
James.j.decaro3.civ@mail.smil.mil<br>
<br>
"If you always do what you always did you will always get what you always got."<br>
<br>
<br>
-----Original Message-----<br>
From: Anand Buddhdev <anandb@ripe.net><br>
Sent: Monday, June 1, 2020 3:00 PM<br>
To: DeCaro, James John (Jim) CIV DISA FE (USA) <james.j.decaro3.civ@mail.mil>; bind-users@lists.isc.org<br>
Subject: [Non-DoD Source] Re: BIND installed on a Solaris 11.4 x 86 virtual server<br>
<br>
On 01/06/2020 20:08, DeCaro, James John (Jim) CIV DISA FE (USA) via<br>
bind-users wrote:<br>
<br>
Hi Jim,<br>
</p>
<blockquote><p dir="auto">Installed BIND 9.16.3 and I discovered that the SMF dns/server is<br>
trying to read named.conf from /usr/local/etc/:<br>
"/usr/local/etc/named.conf: file not found". I am trying to figure<br>
out how point named to read /etc/named.conf.</p>
</blockquote><p dir="auto">I last touched SMF over 15 years ago, and I don't remember enough about<br>
it now, so I can't speak for the SMF parts of your question.<br>
</p>
<blockquote><p dir="auto">I did try re-compiling BIND with different switches but it resulted<br>
in the same thing. Is there an environment variable or a ./configure<br>
switch to re-point the default to /etc/named.conf? I tried<br>
'--sysconfdir=/etc' --no luck there. Do I edit the manifest file?</p>
</blockquote><p dir="auto">This *is* the correct way to define the default location of named.conf.<br>
</p>
<blockquote><p dir="auto">I attempted named -c /etc/named.conf with no luck</p>
</blockquote><p dir="auto">This *must* work. However, your description "no luck" isn't enough. Can<br>
you describe exactly what happened when you named "named -c<br>
/etc/named.conf"?<br>
</p>
<blockquote><p dir="auto">$ named -g:</p>
</blockquote><p dir="auto">Run "named -c /etc/named.conf -g" and see what happens.<br>
<br>
Regards,<br>
Anand<br>
_______________________________________________<br>
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at <a href="https://www.isc.org/contact/">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
bind-users@lists.isc.org<br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users">https://lists.isc.org/mailman/listinfo/bind-users</a></p>
</blockquote></div>
<div class="markdown">
<p dir="auto">If your still getting the same "ports in use" error then named is most likely still running somewhere. Make sure it is disabled from SMF <code>svcadm disable dns/server</code> and from any command line execution <code>pkill named</code>. Make sure it is no longer running with <code>pgrep named</code></p>
<p dir="auto">Default SMF properties for dns/server can be shown with svcprop:</p>
<pre><code>% svcprop -p options dns/server
options/chroot_dir astring ""
options/configuration_file astring ""
options/crypto_engine astring ""
options/debug_level integer 0
options/ip_interfaces astring all
options/listen_on_port integer 0
options/listener_threads integer 0
options/server astring ""
options/threads integer 0
</code></pre>
<p dir="auto">And the starter</p>
<pre><code>% svcprop -p start/exec dns/server
/lib/svc/method/dns-server\ %m\ %i
</code></pre>
<p dir="auto">The starter script assumes /etc/named.conf if no configuration file is provided in the property configuration_file, though it does not specify that to the named command line as that is also the default compiled into Oracle Solaris version of bind:</p>
<pre><code>% /usr/sbin/named -V | fmt |grep etc
'--sysconfdir=/etc' '--localstatedir=/var'
</code></pre>
<p dir="auto">See <strong>dns-server(8s)</strong> on Solaris for further information on the properties.</p>
<p dir="auto">Mr. Stacey Marshall - Principal Software Engineer<br>
Oracle Global Services Limited</p>
</div>
</div>
</body>
</html>