<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Ugh, forgot about that…that was it.
<div class=""><br class="">
</div>
<div class=""><br class="">
</div>
<div class="">Thanks!
<div class=""><br class="">
<div>
<blockquote type="cite" class="">
<div class="">On Dec 9, 2021, at 3:48 PM, Mark Andrews <<a href="mailto:marka@isc.org" class="">marka@isc.org</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">Almost certainly SELinux or AppArmor on the new platform getting in the way.<br class="">
<br class="">
<blockquote type="cite" class="">On 10 Dec 2021, at 06:08, Bruce Johnson via bind-users <<a href="mailto:bind-users@lists.isc.org" class="">bind-users@lists.isc.org</a>> wrote:<br class="">
<br class="">
I'm setting up a new secondary for our domain with the intent to shut down an existing one (which is running on a very old OS and bind version)<br class="">
<br class="">
Running Rocky Linux (replacement for CentOS 8.5) using the isc bind-esv package here
<a href="https://copr.fedorainfracloud.org/coprs/isc/bind-esv/" class="">https://copr.fedorainfracloud.org/coprs/isc/bind-esv/</a> instead of the built in (and old) version in the standard repo.<br class="">
<br class="">
I’ve copied over the named.conf file from the working secondary and made appropriate changes; it passes named-checkconf<br class="">
<br class="">
Starting the service though I get the following error:<br class="">
<br class="">
● isc-bind-named.service<br class="">
Loaded: loaded (/usr/lib/systemd/system/isc-bind-named.service; enabled; vendor preset: disabled)<br class="">
Active: failed (Result: exit-code) since Thu 2021-12-09 13:16:09 EST; 24min ago<br class="">
Process: 3732 ExecStart=/opt/isc/isc-bind/root/usr/sbin/named -u named $OPTIONS (code=exited, status=1/FAILURE)<br class="">
<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> named[3733]: listening on IPv4 interface lo, 127.0.0.1#53<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> named[3733]: listening on IPv4 interface ens192,123.456.789.123#53<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> named[3733]: generating session key for dynamic DNS<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> named[3733]: sizing zone task pool based on 35 zones<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> named[3733]: could not configure root hints from '<a href="http://named.ca" class="">named.ca</a>': permission denied<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> named[3733]: loading configuration: permission denied<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> named[3733]: exiting (due to fatal error)<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> systemd[1]: isc-bind-named.service: Control process exited, code=exited status=1<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> systemd[1]: isc-bind-named.service: Failed with result 'exit-code'.<br class="">
Dec 09 13:16:09 <a href="http://example.com" class="">example.com</a> systemd[1]: Failed to start isc-bind-named.service.<br class="">
<br class="">
Permissions for <a href="http://named.ca" class="">named.ca</a> are the same as on our other working servers:<br class="">
<br class="">
-rw-rw-r--. 1 root named 3289 Dec 9 13:13 /var/named/<a href="http://named.ca" class="">named.ca</a><br class="">
<br class="">
This is the entry for that file in named.conf:<br class="">
<br class="">
zone "." IN {<br class="">
<span class="Apple-tab-span" style="white-space:pre"></span>type hint;<br class="">
<span class="Apple-tab-span" style="white-space:pre"></span>file "<a href="http://named.ca" class="">named.ca</a>";<br class="">
};<br class="">
<br class="">
does it need the full path? On the working secondary it’s entered the same way in named.conf, but that’s running and ancient version BIND 9.8.2rc1-RedHat-9.8.2-0.68.rc1.el6_10.1<br class="">
<br class="">
(and why I’m building a new one!)<br class="">
<br class="">
<br class="">
-- <br class="">
Bruce Johnson<br class="">
University of Arizona<br class="">
College of Pharmacy<br class="">
Information Technology Group<br class="">
<br class="">
Institutions do not have opinions, merely customs<br class="">
<br class="">
_______________________________________________<br class="">
Please visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" class="">
https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br class="">
<br class="">
ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://www.isc.org/contact/" class="">https://www.isc.org/contact/</a> for more information.<br class="">
<br class="">
<br class="">
bind-users mailing list<br class="">
<a href="mailto:bind-users@lists.isc.org" class="">bind-users@lists.isc.org</a><br class="">
https://lists.isc.org/mailman/listinfo/bind-users<br class="">
</blockquote>
<br class="">
-- <br class="">
Mark Andrews, ISC<br class="">
1 Seymour St., Dundas Valley, NSW 2117, Australia<br class="">
PHONE: +61 2 9871 4742 INTERNET: <a href="mailto:marka@isc.org" class="">
marka@isc.org</a><br class="">
<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
<div class=""><span class="Apple-style-span" style="border-collapse: separate; color: rgb(0, 0, 0); font-family: Helvetica; font-style: normal; font-variant: normal; font-weight: normal; letter-spacing: normal; line-height: normal; orphans: 2; text-align: -webkit-auto; text-indent: 0px; text-transform: none; white-space: normal; widows: 2; word-spacing: 0px; -webkit-border-horizontal-spacing: 0px; -webkit-border-vertical-spacing: 0px; -webkit-text-decorations-in-effect: none; -webkit-text-size-adjust: auto; -webkit-text-stroke-width: 0px; ">
<div class="">-- <br class="">
Bruce Johnson<br class="">
University of Arizona<br class="">
College of Pharmacy<br class="">
Information Technology Group<br class="">
<br class="">
Institutions do not have opinions, merely customs</div>
</span></div>
<br class="">
</div>
</div>
</body>
</html>