Ubuntu
bind9 package

  1. Bug #729780
  2. Comment #6

Comment 6 for bug 729780

Revision history for this message
myf5 (b-web-z) wrote :

Seem like I am facing the bug, here are my configurations and permission of the directories:

====logs====
Jul 31 04:35:33 bind named[5139]: received control channel command 'stop -p'
Jul 31 04:35:33 bind named[5139]: shutting down: flushing changes
Jul 31 04:35:33 bind named[5139]: stopping command channel on 127.0.0.1#953
Jul 31 04:35:33 bind named[5139]: stopping command channel on ::1#953
Jul 31 04:35:33 bind named[5139]: no longer listening on 127.0.0.1#53
Jul 31 04:35:33 bind named[5139]: no longer listening on 192.168.0.103#53
Jul 31 04:35:33 bind named[5139]: exiting
Jul 31 04:35:33 bind named[5177]: starting BIND 9.8.0-P2 -u bind
Jul 31 04:35:33 bind named[5177]: built with '--prefix=/usr' '--with-openssl=yes' '--sysconfdir=/etc/bind' '--with-randomdev=/dev/urandom'
Jul 31 04:35:33 bind named[5177]: using up to 4096 sockets
Jul 31 04:35:33 bind named[5177]: loading configuration from '/etc/bind/named.conf'
Jul 31 04:35:33 bind named[5177]: reading built-in trusted keys from file '/etc/bind/bind.keys'
Jul 31 04:35:33 bind named[5177]: using default UDP/IPv4 port range: [1024, 65535]
Jul 31 04:35:33 bind named[5177]: using default UDP/IPv6 port range: [1024, 65535]
Jul 31 04:35:33 bind named[5177]: listening on IPv4 interface lo, 127.0.0.1#53
Jul 31 04:35:33 bind named[5177]: listening on IPv4 interface eth4, 192.168.0.103#53
Jul 31 04:35:33 bind named[5177]: binding TCP socket: address in use
Jul 31 04:35:33 bind named[5177]: Could not open '/usr/var/run/named/named.pid'.
Jul 31 04:35:33 bind named[5177]: Please check file and directory permissions or reconfigure the filename.
Jul 31 04:35:33 bind named[5177]: could not open file '/usr/var/run/named/named.pid': Permission denied
Jul 31 04:35:33 bind named[5177]: generating session key for dynamic DNS
Jul 31 04:35:33 bind named[5177]: Could not open '/usr/var/run/named/session.key'.
Jul 31 04:35:33 bind named[5177]: Please check file and directory permissions or reconfigure the filename.
Jul 31 04:35:33 bind named[5177]: could not open file '/usr/var/run/named/session.key': Permission denied
Jul 31 04:35:33 bind named[5177]: could not create /usr/var/run/named/session.key
Jul 31 04:35:33 bind named[5177]: failed to generate session key for dynamic DNS: permission denied
Jul 31 04:35:33 bind named[5177]: set up managed keys zone for view _default, file 'managed-keys.bind'
Jul 31 04:35:33 bind named[5177]: command channel listening on 127.0.0.1#953
Jul 31 04:35:33 bind named[5177]: command channel listening on ::1#953
Jul 31 04:35:33 bind named[5177]: zone 0.in-addr.arpa/IN: loaded serial 1
Jul 31 04:35:33 bind named[5177]: zone 127.in-addr.arpa/IN: loaded serial 1
Jul 31 04:35:33 bind named[5177]: zone 255.in-addr.arpa/IN: loaded serial 1
Jul 31 04:35:33 bind named[5177]: zone localhost/IN: loaded serial 2
Jul 31 04:35:33 bind named[5177]: zone cnadn.net/IN: loaded serial 2011091804
Jul 31 04:35:33 bind named[5177]: zone sub.cnadn.net/IN: loaded serial 2011062601
Jul 31 04:35:33 bind named[5177]: managed-keys-zone ./IN: loading from master file managed-keys.bind failed: file not found
Jul 31 04:35:33 bind named[5177]: managed-keys-zone ./IN: loaded serial 0
Jul 31 04:35:33 bind named[5177]: running
Jul 31 04:35:33 bind named[5177]: zone cnadn.net/IN: sending notifies (serial 2011091804)
==========

===named.conf===
options {
        directory "/var/cache/bind";
        // If there is a firewall between you and nameservers you want
        // to talk to, you may need to fix the firewall to allow multiple
        // ports to talk. See http://www.kb.cert.org/vuls/id/800113

        // If your ISP provided one or more IP addresses for stable
        // nameservers, you probably want to use them as forwarders.
        // Uncomment the following block, and insert the addresses replacing
        // the all-0's placeholder.

        // forwarders {
        // 0.0.0.0;
        // };
       //allow-query {any;};
       //allow-query-cache {any;};
        tcp-clients 100;
         recursion no;
// dnssec-enable yes; // All BIND 9 versions
// dnssec-validation yes; // BIND 9.4.3-P2 and later
// dnssec-lookaside . trust-anchor dlv.isc.org.;
        auth-nxdomain no; # conform to RFC1035
// listen-on-v6 { any; };
};
=============
=====ps output====
root@bind:/etc/bind# ps -aux | grep -i bind
Warning: bad ps syntax, perhaps a bogus '-'? See http://procps.sf.net/faq.html
root 4323 0.0 0.2 8180 1420 ? Ss 01:58 0:00 /usr/sbin/winbindd
root 4341 0.0 0.2 8180 1244 ? S 01:58 0:00 /usr/sbin/winbindd
root 4506 0.0 0.1 8180 908 ? S 02:23 0:00 /usr/sbin/winbindd
root 4507 0.0 0.2 8184 1256 ? S 02:23 0:00 /usr/sbin/winbindd
bind 4525 0.0 0.9 7892 4888 ? Ss 02:41 0:00 /usr/sbin/named -u bind
bind 4540 0.0 0.9 7888 4864 ? Ss 02:57 0:00 /usr/sbin/named -u bind
bind 4554 0.0 0.9 7888 4868 ? Ss 02:58 0:00 /usr/sbin/named -u bind
bind 4574 0.0 0.9 7888 4896 ? Ss 03:03 0:00 /usr/sbin/named -u bind
bind 5251 0.0 0.9 7884 4900 ? Ss 04:44 0:00 /usr/sbin/named -u bind
root 5264 0.0 0.1 1748 532 pts/1 R+ 05:09 0:00 grep -i bind
root@bind:/etc/bind#
=================
=====ls ouput========
root@bind:/usr/var/run# pwd
/usr/var/run
root@bind:/usr/var/run# ls -lrt
total 4
drwxrwxrwx 2 root bind 4096 Jul 31 04:34 named
root@bind:/usr/var/run# cd named
root@bind:/usr/var/run/named# ls
root@bind:/usr/var/run/named#
====================================================

======================Workaround======================
Config below 2 items in named.conf.options：
        pid-file "named.pid";
        session-keyfile "session.key";
-------------------------------------------------------------------------------------------------------------------
The I am lucky:

Jul 31 04:44:34 bind named[5251]: starting BIND 9.8.0-P2 -u bind
Jul 31 04:44:34 bind named[5251]: built with '--prefix=/usr' '--with-openssl=yes' '--sysconfdir=/etc/bind' '--with-randomdev=/dev/urandom'
Jul 31 04:44:34 bind named[5251]: using up to 4096 sockets
Jul 31 04:44:34 bind named[5251]: loading configuration from '/etc/bind/named.conf'
Jul 31 04:44:34 bind named[5251]: reading built-in trusted keys from file '/etc/bind/bind.keys'
Jul 31 04:44:34 bind named[5251]: using default UDP/IPv4 port range: [1024, 65535]
Jul 31 04:44:34 bind named[5251]: using default UDP/IPv6 port range: [1024, 65535]
Jul 31 04:44:34 bind named[5251]: listening on IPv4 interface lo, 127.0.0.1#53
Jul 31 04:44:34 bind named[5251]: listening on IPv4 interface eth4, 192.168.0.103#53
Jul 31 04:44:34 bind named[5251]: binding TCP socket: address in use
Jul 31 04:44:34 bind named[5251]: generating session key for dynamic DNS
Jul 31 04:44:34 bind named[5251]: set up managed keys zone for view _default, file 'managed-keys.bind'
Jul 31 04:44:34 bind named[5251]: command channel listening on 127.0.0.1#953
Jul 31 04:44:34 bind named[5251]: command channel listening on ::1#953
Jul 31 04:44:34 bind named[5251]: zone 0.in-addr.arpa/IN: loaded serial 1
Jul 31 04:44:34 bind named[5251]: zone 127.in-addr.arpa/IN: loaded serial 1
Jul 31 04:44:34 bind named[5251]: zone 255.in-addr.arpa/IN: loaded serial 1
Jul 31 04:44:34 bind named[5251]: zone localhost/IN: loaded serial 2
Jul 31 04:44:34 bind named[5251]: zone cnadn.net/IN: loaded serial 2011091804
Jul 31 04:44:34 bind named[5251]: zone sub.cnadn.net/IN: loaded serial 2011062601
Jul 31 04:44:34 bind named[5251]: managed-keys-zone ./IN: loading from master file managed-keys.bind failed: file not found
Jul 31 04:44:34 bind named[5251]: managed-keys-zone ./IN: loaded serial 0
Jul 31 04:44:34 bind named[5251]: running
Jul 31 04:44:34 bind named[5251]: zone cnadn.net/IN: sending notifies (serial 2011091804)
--------------------------------------------------------
ls output of :

root@bind:/usr/var/run# cd /var/cache/bind
root@bind:/var/cache/bind# cd ..
root@bind:/var/cache# ls -lrt
total 36
drwxr-xr-x 2 root root 4096 Jun 22 2007 pppconfig
drwxr-xr-x 3 www-data www-data 4096 Sep 8 2008 apache2
drwxr-xr-x 2 root root 4096 Sep 8 2008 fontconfig
drwxr-xr-x 2 root root 4096 Jun 25 11:21 debconf
drwx------ 2 root root 4096 Jun 25 14:20 ldconfig
drwxrwxr-x 2 root bind 4096 Jul 31 04:44 bind
drwxr-xr-x 3 root root 4096 Jul 31 05:05 samba
drwxr-xr-x 3 root root 4096 Jul 31 2011 apt
drwxr-sr-x 41 man root 4096 Jul 31 2011 man

root@bind:/var/cache# cd bind
root@bind:/var/cache/bind# ls -lrt
total 12
-rw-r--r-- 1 root root 498 Jun 25 13:10 db.example.net
-rw------- 1 bind bind 102 Jul 31 04:44 session.key
-rw-r--r-- 1 bind bind 5 Jul 31 04:44 named.pid
====================================================