<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
Hi all,</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
I'm hoping to get some guidance into an unusual Assertion Failure we're encountering.</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
We're in the process of migrating our DNS Servers to Ubuntu-based hosts, and as part of that we're also migrating to using tsig keys to help manage our internal and external Zone transfers. We've migrated all of our secondaries without issue.</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
However, we've run into an issue with our authoritative servers and v9.20.11 Whenever we start named, it loads its zones successfully and then dies whenever it attempts to send its first notify. When it does, it generates the following log messages:</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<blockquote style="margin-left: 0.8ex; padding-left: 1ex; border-left-width: 3px; border-left-style: solid; border-left-color: rgb(200, 200, 200);">
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.622 notify: info: zone zonename.redacted/IN/internal: sending notify to XXX.XX.XX.XXX#53 : TSIG (key-name-redacted)</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.622 general: critical: message.c:2849: REQUIRE(msg->tsigkey == ((void *)0) && msg->sig0key == ((void *)0)) failed</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libisc-9.20.11-1+ubuntu22.04.1+deb.sury.org+2-Ubuntu.so(isc_backtrace_log+0x46) [0x7d9458072f46]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /usr/sbin/named(+0x21a37) [0x5f64cec99a37]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libisc-9.20.11-1+ubuntu22.04.1+deb.sury.org+2-Ubuntu.so(isc_assertion_failed+0x10) [0x7d945806bc10]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libdns-9.20.11-1+ubuntu22.04.1+deb.sury.org+2-Ubuntu.so(+0x93138) [0x7d9457e92138]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libdns-9.20.11-1+ubuntu22.04.1+deb.sury.org+2-Ubuntu.so(dns_request_create+0x1f8) [0x7d9457f19178]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libdns-9.20.11-1+ubuntu22.04.1+deb.sury.org+2-Ubuntu.so(+0x1826c4) [0x7d9457f816c4]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libisc-9.20.11-1+ubuntu22.04.1+deb.sury.org+2-Ubuntu.so(isc__async_cb+0xa7) [0x7d9458072287]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libuv.so.1(+0x91ad) [0x7d94578a11ad]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libuv.so.1(+0x250fe) [0x7d94578bd0fe]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libuv.so.1(uv_run+0x678) [0x7d94578a6c48]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libisc-9.20.11-1+ubuntu22.04.1+deb.sury.org+2-Ubuntu.so(+0x47553) [0x7d9458082553]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libisc-9.20.11-1+ubuntu22.04.1+deb.sury.org+2-Ubuntu.so(+0x5bcde) [0x7d9458096cde]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libc.so.6(+0x94ac3) [0x7d94574c6ac3]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: /lib/x86_64-linux-gnu/libc.so.6(+0x126850) [0x7d9457558850]</div>
<div class="elementToProof" style="line-height: normal; margin: 0px; font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
30-Jul-2025 10:41:55.623 general: critical: exiting (due to assertion failure)</div>
</blockquote>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
We get the same issue with v9.20.7, v9.20.9, and v9.20.11</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
Named starts without issue and is able to successfully send notifies with tsig keys when using v9.18.28.</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
We've verified that removing the tsig keys from the also-notify statements allows named to start and send notifies. We're also running v.9.20.9 on our older authoritative servers (running a different and older Linux-based OS) and those are able to send tsig-signed
notifies without issue. There's no configuration file difference between the older, unaffected servers and the new, affected ones.</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
The secondaries are all running v9.20.9 without issue.</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
Anyone have an idea on what could be the issue here? </div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
<br>
</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
Thanks,</div>
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);" class="elementToProof">
Chris</div>
<div id="Signature">
<div style="font-family: Aptos, Aptos_EmbeddedFont, Aptos_MSFontService, Calibri, Helvetica, sans-serif; font-size: 11pt; color: rgb(0, 0, 0);">
<br>
</div>
<p style="text-align: left; background-color: rgb(255, 255, 255); margin: 0in; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="color: rgb(0, 0, 0);">--</span></p>
<p style="text-align: left; background-color: rgb(255, 255, 255); margin: 0in; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="color: rgb(0, 0, 0);">DDI Engineer, UW</span></p>
<p style="text-align: left; background-color: rgb(255, 255, 255); margin: 0in; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="color: rgb(0, 0, 0);"> </span></p>
<p style="text-align: left; background-color: rgb(255, 255, 255); margin: 0in; font-family: Calibri, sans-serif; font-size: 11pt;">
<span style="color: rgb(0, 0, 0);"><i>Pronouns: He/Him</i></span></p>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0);">
<br>
</div>
</div>
</body>
</html>