bind10 running as user bind fails to start resolver service

Fri Dec 2 23:03:17 UTC 2011

I successfully started bind 10 as user bind:
/usr/sbin/bind10 --user=bind --pid-file=/var/run/named/named.pid &

Using bindctl, I attempted to stop the authoritative server and start the recursive resolver. This resulted in the set of messages below. The problem seems to be that 'b10-resolver -u 107' failed because 'setgid() failed: Operation not permitted'. Note that I had created user bind (107) and made it a member of group bind (115). Thanks for any recommendations you may have. Jeff.

root at bind10:~# bindctl
["login success "] login as root
> config remove Boss/components b10-xfrout
> config remove Boss/components b10-xfrin
> config remove Boss/components b10-auth
> config add Boss/components b10-resolver
> config set Boss/components/b10-resolver/special resolver
> config set Boss/components/b10-resolver/kind needed
> config set Boss/components/b10-resolver/priority 10
> config commit
2011-12-02 17:51:22.401 INFO  [b10-boss.boss] BIND10_CONFIGURATOR_RECONFIGURE reconfiguring running components
2011-12-02 17:51:22.402 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component b10-xfrin is being stopped
2011-12-02 17:51:22.402 INFO  [b10-boss.boss] BIND10_STOP_PROCESS asking b10-xfrin to shut down
2011-12-02 17:51:22.402 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component b10-xfrout is being stopped
2011-12-02 17:51:22.402 INFO  [b10-boss.boss] BIND10_STOP_PROCESS asking b10-xfrout to shut down
2011-12-02 17:51:22.403 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component b10-auth is being stopped
2011-12-02 17:51:22.403 INFO  [b10-boss.boss] BIND10_STOP_PROCESS asking b10-auth to shut down
2011-12-02 17:51:22.403 INFO  [b10-boss.boss] BIND10_COMPONENT_START component b10-resolver is starting
2011-12-02 17:51:22.403 WARN  [b10-boss.boss] BIND10_START_AS_NON_ROOT_RESOLVER starting b10-resolver as a user, not root. This might fail.
2011-12-02 17:51:22.403 INFO  [b10-boss.boss] BIND10_STARTING_PROCESS starting process b10-resolver
2011-12-02 17:51:22.404 INFO  [b10-xfrout.xfrout] XFROUT_RECEIVED_SHUTDOWN_COMMAND shutdown command received
2011-12-02 17:51:22.432 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11122 of b10-auth ended with status 0
2011-12-02 17:51:22.434 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11123 of b10-xfrin ended with status 0
2011-12-02 17:51:22.444 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11125 of b10-xfrout ended with status 0
2011-12-02 17:51:22.464 INFO  [b10-resolver.resolver] RESOLVER_STARTING starting resolver with command line 'b10-resolver -u 107'
2011-12-02 17:51:22.500 FATAL [b10-resolver.resolver] RESOLVER_FAILED resolver failed, reason: setgid() failed: Operation not permitted
2011-12-02 17:51:22.501 INFO  [b10-resolver.resolver] RESOLVER_SHUTDOWN resolver shutdown complete
2011-12-02 17:51:22.502 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11152 of b10-resolver ended with status 256
2011-12-02 17:51:22.502 ERROR [b10-boss.boss] BIND10_COMPONENT_FAILED component b10-resolver (pid 11152) failed with 256 exit status
2011-12-02 17:51:22.503 FATAL [b10-boss.boss] BIND10_COMPONENT_UNSATISFIED component b10-resolver is required to run and failed
2011-12-02 17:51:22.503 INFO  [b10-boss.boss] BIND10_SHUTDOWN stopping the server
2011-12-02 17:51:22.503 INFO  [b10-boss.boss] BIND10_CONFIGURATOR_STOP bind10 component configurator is shutting down
2011-12-02 17:51:22.503 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component Set UID is being stopped
2011-12-02 17:51:22.504 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component Socket creator is being stopped
2011-12-02 17:51:22.504 INFO  [b10-boss.boss] BIND10_SOCKCREATOR_TERMINATE terminating socket creator
2011-12-02 17:51:22.504 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component msgq is being stopped
2011-12-02 17:51:22.504 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component b10-cmdctl is being stopped
2011-12-02 17:51:22.505 INFO  [b10-boss.boss] BIND10_STOP_PROCESS asking b10-cmdctl to shut down
2011-12-02 17:51:22.505 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component cfgmgr is being stopped
2011-12-02 17:51:22.510 INFO  [b10-boss.boss] BIND10_STOP_PROCESS asking cfgmgr to shut down
2011-12-02 17:51:22.515 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component b10-zonemgr is being stopped
2011-12-02 17:51:22.515 INFO  [b10-boss.boss] BIND10_STOP_PROCESS asking b10-zonemgr to shut down
2011-12-02 17:51:22.515 INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component b10-stats is being stopped
2011-12-02 17:51:22.521 INFO  [b10-boss.boss] BIND10_STOP_PROCESS asking b10-stats to shut down
2011-12-02 17:51:22.5222011-12-02 17:51:22.522 INFO  [b10-stats.stats] STATS_RECEIVED_SHUTDOWN_COMMAND shutdown command received
INFO  [b10-boss.boss] BIND10_COMPONENT_STOP component b10-stats-httpd is being stopped
2011-12-02 17:51:22.527 INFO  [b10-boss.boss] BIND10_STOP_PROCESS asking b10-stats-httpd to shut down
2011-12-02 17:51:22.528 INFO  [b10-stats-httpd.stats-httpd] STATHTTPD_SHUTDOWN shutting down
2011-12-02 17:51:22.528 INFO  [b10-stats-httpd.stats-httpd] STATHTTPD_CLOSING closing 127.0.0.1#8000
2011-12-02 17:51:23.528 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11119 of Socket creator ended with status 0
2011-12-02 17:51:23.528 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11121 of cfgmgr ended with status 0
2011-12-02 17:51:23.529 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11124 of b10-cmdctl ended with status 0
2011-12-02 17:51:23.529 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11126 of b10-zonemgr ended with status 0
2011-12-02 17:51:23.529 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11127 of b10-stats ended with status 0
2011-12-02 17:51:23.529 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11128 of b10-stats-httpd ended with status 0
2011-12-02 17:51:23.530 INFO  [b10-boss.boss] BIND10_SEND_SIGTERM sending SIGTERM to msgq (PID 11120)
2011-12-02 17:51:23.630 INFO  [b10-boss.boss] BIND10_PROCESS_ENDED process 11120 of msgq ended with status 0
2011-12-02 17:51:23.630 INFO  [b10-boss.boss] BIND10_SHUTDOWN_COMPLETE all processes ended, shutdown complete

Jeffry A. Spain
Network Administrator
Cincinnati Country Day School

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind10-users/attachments/20111202/37f27093/attachment.html>