• bind (more accureately named 9.18.15) problems

    From Martin Gregorie@21:1/5 to All on Thu Jun 15 17:39:47 2023
    I'm having problems with named 9.18.15 (the current version for Fedora 37)
    atm. It looks like a screw-up when parsing /etc/named,conf because its complaining about a mal-formed shell script comparison.

    Has anybody else seen this and, if so, how did you get round it?

    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marco Moock@21:1/5 to All on Sat Jun 17 11:05:31 2023
    Am 15.06.2023 um 17:39:47 Uhr schrieb Martin Gregorie:

    It looks like a screw-up when parsing /etc/named,conf because its
    complaining about a mal-formed shell script comparison.

    Please post the exact error message.

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Marco Moock on Sat Jun 17 22:18:19 2023
    On Sat, 17 Jun 2023 11:05:31 +0200, Marco Moock wrote:

    Am 15.06.2023 um 17:39:47 Uhr schrieb Martin Gregorie:

    It looks like a screw-up when parsing /etc/named,conf because its
    complaining about a mal-formed shell script comparison.

    Please post the exact error message.

    Here's whar I found:


    Named is being started by Systemd's named.service, which reports

    × named.service - Berkeley Internet Name Domain (DNS)
    Loaded: loaded (/usr/lib/systemd/system/named.service; enabled;
    preset: disabled)
    Active: failed (Result: exit-code) since Wed 2023-06-14 20:49:51 BST;
    13h ago
    Process: 2334681 ExecStartPre=/bin/bash -c if [ !
    "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/bin/n>
    CPU: 10ms

    Jun 14 20:49:51 zoogz.gregorie.lan bash[2334682]: zone 7.168.192.in- addr.arpa/IN: not loaded due to errors.
    Jun 14 20:49:51 zoogz.gregorie.lan bash[2334682]: _default/7.168.192.in- addr.arpa./IN: file not found
    Jun 14 20:49:51 zoogz.gregorie.lan bash[2334682]: zone localhost.localdomain/IN: loaded serial 0
    Jun 14 20:49:51 zoogz.gregorie.lan bash[2334682]: zone localhost/IN:
    loaded serial 0
    Jun 14 20:49:51 zoogz.gregorie.lan bash[2334682]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0>
    Jun 14 20:49:51 zoogz.gregorie.lan bash[2334682]: zone 1.0.0.127.in- addr.arpa/IN: loaded serial 0
    Jun 14 20:49:51 zoogz.gregorie.lan bash[2334682]: zone 0.in-addr.arpa/IN: loaded serial 0
    Jun 14 20:49:51 zoogz.gregorie.lan systemd[1]: named.service: Control
    process exited, code=exited, status=>
    Jun 14 20:49:51 zoogz.gregorie.lan systemd[1]: named.service: Failed with result 'exit-code'.
    Jun 14 20:49:51 zoogz.gregorie.lan systemd[1]: Failed to start
    named.service - Berkeley Internet Name Doma>

    The really odd thing about this is tha filename being objected to, _default/7.168.192.in-addr.arpa./IN is not mentioned in either named.conf
    or the zone file, gregorie.lan.zone


    Reproducible: Always

    Steps to Reproduce:
    1. sudo systemctl start named
    2. sudo systemctl status named

    Actual Results:
    # sudo systemctl start named
    Job for named.service failed because the control process exited with error code.
    See "systemctl status named.service" and "journalctl -xeu named.service"
    for details.
    [root@zoogz named]# sudo systemctl status named
    × named.service - Berkeley Internet Name Domain (DNS)
    Loaded: loaded (/usr/lib/systemd/system/named.service; enabled;
    preset: disabled)
    Active: failed (Result: exit-code) since Thu 2023-06-15 12:28:54 BST;
    18s ago
    Process: 4169697 ExecStartPre=/bin/bash -c if [ !
    "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/bin/named-c>
    CPU: 11ms

    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone 7.168.192.in- addr.arpa/IN: not loaded due to errors.
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: _default/7.168.192.in- addr.arpa./IN: file not found
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone localhost.localdomain/IN: loaded serial 0
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone localhost/IN:
    loaded serial 0
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0>
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone 1.0.0.127.in- addr.arpa/IN: loaded serial 0
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone 0.in-addr.arpa/IN: loaded serial 0
    Jun 15 12:28:54 zoogz.gregorie.lan systemd[1]: named.service: Control
    process exited, code=exited, status=1/FAIL>
    Jun 15 12:28:54 zoogz.gregorie.lan systemd[1]: named.service: Failed with result 'exit-code'.
    Jun 15 12:28:54 zoogz.gregorie.lan systemd[1]: Failed to start
    named.service - Berkeley Internet Name Domain (DN>

    # sudo systemctl status named
    × named.service - Berkeley Internet Name Domain (DNS)
    Loaded: loaded (/usr/lib/systemd/system/named.service; enabled;
    preset: disabled)
    Active: failed (Result: exit-code) since Thu 2023-06-15 12:28:54 BST;
    2min 32s ago
    Process: 4169697 ExecStartPre=/bin/bash -c if [ !
    "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/bin/named-c>
    CPU: 11ms

    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone 7.168.192.in- addr.arpa/IN: not loaded due to errors.
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: _default/7.168.192.in- addr.arpa./IN: file not found
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone localhost.localdomain/IN: loaded serial 0
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone localhost/IN:
    loaded serial 0
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0>
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone 1.0.0.127.in- addr.arpa/IN: loaded serial 0
    Jun 15 12:28:54 zoogz.gregorie.lan bash[4169698]: zone 0.in-addr.arpa/IN: loaded serial 0
    Jun 15 12:28:54 zoogz.gregorie.lan systemd[1]: named.service: Control
    process exited, code=exited, status=1/FAIL>
    Jun 15 12:28:54 zoogz.gregorie.lan systemd[1]: named.service: Failed with result 'exit-code'.
    Jun 15 12:28:54 zoogz.gregorie.lan systemd[1]: Failed to start
    named.service - Berkeley Internet Name Domain (DN>
    lines 1-16/16 (END)


    Expected Results:
    The named server to have started and and 'sudo systemctl status named" to
    have reported that nemed was now running.

    -------------------------------------------------------------------------- Here's named.conf ==========================================================================
    //
    // named.conf
    //
    // Provided by Red Hat bind package to configure the ISC BIND named(8) DNS
    // server as a caching only nameserver and localhost DNS resolver only.
    //
    // See /usr/share/doc/bind*/sample/ for example named configuration files.
    //
    // Zoogz configuration: authoritative for the gregorie.lan LAN
    //

    options
    {
    listen-on port 53 { 127.0.0/24;
    192.168.7/24;
    !82.71.205.14; /* Don't listen on the Zen
    link */
    };

    listen-on-v6 port 53 { none; }; /* or on ipv6
    links */
    directory "/var/named";
    dump-file "/var/named/data/cache_dump.db";
    statistics-file "/var/named/data/named_stats.txt";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    allow-query { /* localhost accept queries only from localhost */
    192.168.7/24; /* and
    LAN */
    };
    recursion no;
    dnssec-validation yes;
    managed-keys-directory "/var/named/dynamic";
    geoip-directory "/usr/share/GeoIP";

    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";

    include "/etc/crypto-policies/back-ends/bind.config";
    };

    logging
    {
    channel debug
    {
    file "data/named.run";
    // severity info;
    };
    };

    // Provide forward mapping zone for localhost
    // (optional)
    //
    //zone "localhost" {
    // type primary;
    // file "master/localhost-forward.db";
    // notify no;
    //};

    // Provide reverse mapping zone for the loopback
    // address 127.0.0.1

    zone "0.0.127.in-addr.arpa" {
    type primary;
    file "localhost.rev";
    notify no;
    };

    // Possibly now superfluous
    //

    zone "." IN {
    type hint;
    file "named.ca";
    };

    // We are the primary server for gregorie.lan

    zone "gregorie.lan"
    {
    type primary;
    file "gregorie.lan.zone";
    notify yes;
    };

    zone "7.168.192.in-addr.arpa." /* in */
    {
    type primary;
    file "named.gregorie.lan";
    };

    include "/etc/named.rfc1912.zones";
    include "/etc/named.root.key";

    ----------------------------------------------------
    Here's the zone file
    ====================================================
    ; Base zone file for gregorie.lan
    $TTL 3h
    $ORIGIN gregorie.lan
    @ IN SOA zoogz.gregorie.lan. zoogz.gregorie.lan.
    (
    2002040300 ; serial
    3h ; refresh
    15m ; update retry
    1w ; expiry
    1h ; minimum
    )

    ; Nameserver for the domain
    IN NS zoogz.gregorie.lan.

    ; Mailserver for the domain
    3w IN MX 10 zoogz.gregorie.lan.

    hellsgate IN A 192.168.7.1
    zoogz IN A 192.168.7.2
    cretin IN A 192.168.7.3
    pc IN A 192.168.7.4
    zappa IN A 192.168.7.5
    touch IN A 192.168.7.100
    rpi IN A 192.168.7.101
    lj5 IN A 192.168.7.201



    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to Martin Gregorie on Sun Jun 18 11:54:15 2023
    Martin Gregorie <martin@mydomain.invalid> writes:
    zone "7.168.192.in-addr.arpa." /* in */
    {
    type primary;
    file "named.gregorie.lan";
    ^^^^^^^^^^^^^^^^^^^^^^^^^^


    Does this file exist and if so what is its full path?
    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Richard Kettlewell on Sun Jun 18 16:06:57 2023
    On Sun, 18 Jun 2023 11:54:15 +0100, Richard Kettlewell wrote:

    Martin Gregorie <martin@mydomain.invalid> writes:
    zone "7.168.192.in-addr.arpa." /* in */
    {
    type primary;
    file "named.gregorie.lan";
    ^^^^^^^^^^^^^^^^^^^^^^^^^^


    Does this file exist and if so what is its full path?

    Yes it does: its full path name is /var/named/gregorie.lan.zone and you'll
    see that in /etc/named.conf that 'directory' is defined as /var/named and
    the zone file 'gregorie.lan' is referred to as 'gregorie.lan.zone'

    The last Fedora upgrade (36 to 37) pulled in a new release of named.9.
    Before this named was running just fine using versions of both named.conf
    and gregorie.lan.zone, but is objected to those files (which hadn't
    changed for several years until now). I pulled down the latest named
    technical manual, which is rather heavy going: either I'm not
    understanding it or the manual is a bit behind the software: I've
    submitted a bug via the Fedora Bugzilla containing exactly wheai I posted
    here, but I haven't yet had anything except an acknowledgement of its submission.


    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Marco Moock@21:1/5 to All on Sun Jun 18 21:52:22 2023
    Am 18.06.2023 um 16:06:57 Uhr schrieb Martin Gregorie:

    Yes it does: its full path name is /var/named/gregorie.lan.zone and
    you'll see that in /etc/named.conf that 'directory' is defined as
    /var/named and the zone file 'gregorie.lan' is referred to as 'gregorie.lan.zone'

    Can you try to set the full path in your configuration?

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to Martin Gregorie on Mon Jun 19 08:28:27 2023
    Martin Gregorie <martin@mydomain.invalid> writes:
    On Sun, 18 Jun 2023 11:54:15 +0100, Richard Kettlewell wrote:
    Martin Gregorie <martin@mydomain.invalid> writes:
    zone "7.168.192.in-addr.arpa." /* in */
    {
    type primary;
    file "named.gregorie.lan";
    ^^^^^^^^^^^^^^^^^^^^^^^^^^


    Does this file exist and if so what is its full path?

    Yes it does: its full path name is /var/named/gregorie.lan.zone and you'll see that in /etc/named.conf that 'directory' is defined as /var/named and
    the zone file 'gregorie.lan' is referred to as 'gregorie.lan.zone'

    That’s a different file.

    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tony Mountifield@21:1/5 to martin@mydomain.invalid on Mon Jun 19 11:20:29 2023
    Firstly, I see your post was made on Saturday evening. So it's possible you might have solved it
    by now. If so, please post and say so, in order that people don't expend time composing
    suggestions if they are no longer needed.

    If the problem is still unresolved, happy to help.

    In article <u6lbfb$17ren$1@dont-email.me>,
    Martin Gregorie <martin@mydomain.invalid> wrote:
    On Sat, 17 Jun 2023 11:05:31 +0200, Marco Moock wrote:

    Am 15.06.2023 um 17:39:47 Uhr schrieb Martin Gregorie:

    It looks like a screw-up when parsing /etc/named,conf because its
    complaining about a mal-formed shell script comparison.

    Please post the exact error message.

    Here's whar I found:

    [...]

    Jun 14 20:49:51 zoogz.gregorie.lan bash[2334682]: zone 7.168.192.in- addr.arpa/IN: not loaded due to errors.
    Jun 14 20:49:51 zoogz.gregorie.lan bash[2334682]: _default/7.168.192.in- addr.arpa./IN: file not found

    [...]

    The really odd thing about this is tha filename being objected to, _default/7.168.192.in-addr.arpa./IN is not mentioned in either named.conf
    or the zone file, gregorie.lan.zone

    [...]

    // We are the primary server for gregorie.lan

    zone "gregorie.lan"
    {
    type primary;
    file "gregorie.lan.zone";
    notify yes;
    };

    zone "7.168.192.in-addr.arpa." /* in */
    {
    type primary;
    file "named.gregorie.lan";
    };

    The forward and reverse zones need a file each. My guess is that if a file for the zone is not
    specified, and maybe if the specified file can't be found, named might create a default filename
    from the name of the zone, such as _default/7.168.192.in-addr.arpa.

    [...]

    ----------------------------------------------------
    Here's the zone file
    ====================================================
    ; Base zone file for gregorie.lan
    $TTL 3h
    $ORIGIN gregorie.lan
    @ IN SOA zoogz.gregorie.lan. zoogz.gregorie.lan.
    (
    2002040300 ; serial
    3h ; refresh
    15m ; update retry
    1w ; expiry
    1h ; minimum
    )

    ; Nameserver for the domain
    IN NS zoogz.gregorie.lan.

    ; Mailserver for the domain
    3w IN MX 10 zoogz.gregorie.lan.

    hellsgate IN A 192.168.7.1
    zoogz IN A 192.168.7.2
    cretin IN A 192.168.7.3
    pc IN A 192.168.7.4
    zappa IN A 192.168.7.5
    touch IN A 192.168.7.100
    rpi IN A 192.168.7.101
    lj5 IN A 192.168.7.201

    This is fine for the forward zone in "gregorie.lan.zone" (except the 3w above looks dubious
    and might be something added accidentally while posting).

    But for the reverse zone, which your conf file says is in /var/named/named.gregorie.lan, you need
    a file with PTR records in, such as:

    $ORIGIN 7.168.192.in-addr.arpa
    @ IN SOA zoogz.gregorie.lan. zoogz.gregorie.lan.
    (
    2002040300 ; serial
    3h ; refresh
    15m ; update retry
    1w ; expiry
    1h ; minimum
    )

    ; Nameserver for the domain
    IN NS zoogz.gregorie.lan.

    1 IN PTR hellsgate.gregorie.lan.
    2 IN PTR zoogz.gregorie.lan.
    3 IN PTR cretin.gregorie.lan.
    4 IN PTR pc.gregorie.lan.
    5 IN PTR zappa.gregorie.lan.
    100 IN PTR touch.gregorie.lan.
    101 IN PTR rpi.gregorie.lan.
    201 IN PTR lj5.gregorie.lan.

    Hope this helps. I would call this latter file something like 7.168.192.in-addr.arpa.zone instead.

    Cheers
    Tony

    --
    Tony Mountifield
    Winchester, UK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Tony Mountifield on Mon Jun 19 13:11:05 2023
    On Mon, 19 Jun 2023 11:20:29 +0000 (UTC), Tony Mountifield wrote:

    Firstly, I see your post was made on Saturday evening. So it's possible
    you might have solved it by now. If so, please post and say so, in order
    that people don't expend time composing suggestions if they are no
    longer needed.

    Thanks for your last comments, read after I did the following stuff, so
    the additional zone file gets created and installed.

    This is just a quick note before I pop out to t'supermaket

    ====================
    This morning I found a backup copy of my previous zone file, name of gregorie.lan and dropped it into /var/named

    named-checkconf now thinks my named configuration is OK, so thanks for
    your correction.

    However, the startup command "systemctl start named" still exits with an
    error code and "systemctl status named" says the failure is a bash
    statement:

    if [ ! "$DISABLE_ZONE_CHECKING" == "yes ]
    then
    /usr/bin/named-checkconf -z "NAMEDCONF";
    else
    echo Checking of zone files ins disabled";
    fi

    before reporting the error

    zone gregorie.lan/IN not loaded due to errors _default/gregorie.lan/IN
    file not found before successfully loading the default
    localhost.localdomain,
    localhost, ip6.arpa, 1.0.0.127 an 0.in-addr.arpa zones.

    ... so, with my old zone file reinstalled, IMO this is starting to look
    at least partly like like a systemd scripting problem, though it is odd
    that running 'named-checkconf -c' gives my configuration a pass when run
    as root while 'named-checkconf -z' as run by a systemd script fails it.
    Looks like this needs to be added to my my bug report.

    Comments?


    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Tony Mountifield on Tue Jun 20 18:20:58 2023
    On Mon, 19 Jun 2023 11:20:29 +0000 (UTC), Tony Mountifield wrote:

    Firstly, I see your post was made on Saturday evening. So it's possible
    you might have solved it by now. If so, please post and say so, in order
    that people don't expend time composing suggestions if they are no
    longer needed.

    If the problem is still unresolved, happy to help.

    Its still grinding along, I'm afraid. Here's the latest state of play. Apologies for its size,
    but at least I've turned off lie wrapping, so it should be a bit more legible. There seen to be
    two issues

    (1) there's a syntactic problem in the 'start' script used by systemd to launch named
    (2) there may still be a missing "_default/Zone file" but here I'm baffled since the
    currently published version of the official named manual does not include and references to
    either '_default' or 'default' in any context including as oart of a zone file name.

    Avyway, here's what I've seen:

    Here are my latest test results: thanks to you guys for your help so far. =========================================================================

    As you can see, named-checkconf says
    the configuration is fine:

    $ sudo named-checkconf -l
    0.0.127.in-addr.arpa IN _default primary
    gregorie.lan IN _default primary
    localhost.localdomain IN _default primary
    localhost IN _default primary 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa IN _default primary
    1.0.0.127.in-addr.arpa IN _default primary
    0.in-addr.arpa IN _default primary

    **** and here's what the items it thinks are significant ****

    $ sudo named-checkconf -p
    logging {
    channel "debug" {
    file "data/named.run";
    };
    };
    options {
    directory "/var/named";
    dump-file "/var/named/data/cache_dump.db";
    geoip-directory "/usr/share/GeoIP";
    listen-on port 53 {
    127.0.0.0/24;
    192.168.7.0/24;
    !82.71.205.14/32;
    };
    listen-on-v6 port 53 {
    "none";
    };
    managed-keys-directory "/var/named/dynamic";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
    statistics-file "/var/named/data/named_stats.txt";
    disable-algorithms "." {
    "RSAMD5";
    "DSA";
    };
    disable-ds-digests "." {
    "GOST";
    };
    dnssec-validation yes;
    recursion no;
    allow-query {
    192.168.7.0/24;
    };
    };
    trust-anchors {
    "." initial-ds 20326 8 2 "E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D";
    };
    zone "0.0.127.in-addr.arpa" {
    type primary;
    file "localhost.rev";
    notify no;
    };
    zone "gregorie.lan" IN {
    type primary;
    file "gregorie.lan";
    notify yes;
    };
    zone "localhost.localdomain" IN {
    type primary;
    file "named.localhost";
    allow-update {
    "none";
    };
    };
    zone "localhost" IN {
    type primary;
    file "named.localhost";
    allow-update {
    "none";
    };
    };
    zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
    type primary;
    file "named.loopback";
    allow-update {
    "none";
    };
    };
    zone "1.0.0.127.in-addr.arpa" IN {
    type primary;
    file "named.loopback";
    allow-update {
    "none";
    };
    };
    zone "0.in-addr.arpa" IN {
    type primary;
    file "named.empty";
    allow-update {
    "none";
    };
    };

    ========================================
    Here's what happens I try to start named
    with the 'named' systemd service:
    ========================================

    $ sudo systemctl start named
    Job for named.service failed because the control process exited with error code.
    See "systemctl status named.service" and "journalctl -xeu named.service" for details.

    *******
    and notice that the preceeding bash command appears to be missing a closing double
    quote, which is what I suspect is causing the 'systemctl 'start named' command to
    fail.
    *******

    *******
    Here's what 'systemctl status named' has to say about the failure to start *******

    $ sudo systemctl status named
    × named.service - Berkeley Internet Name Domain (DNS)
    Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; preset: disabled)
    Active: failed (Result: exit-code) since Tue 2023-06-20 17:37:45 BST; 17s ago
    Process: 812270 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/bin/named-checkconf -z "$NAM>
    CPU: 11ms

    17:37:45 zoogz.gregorie.lan bash[812271]: zone gregorie.lan/IN: not loaded due to errors.
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: _default/gregorie.lan/IN: file not found
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone localhost.localdomain/IN: loaded serial 0
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone localhost/IN: loaded serial 0
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/I>
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone 0.in-addr.arpa/IN: loaded serial 0
    Jun 20 17:37:45 zoogz.gregorie.lan systemd[1]: named.service: Control process exited, code=exited, status=1/FAILURE
    Jun 20 17:37:45 zoogz.gregorie.lan systemd[1]: named.service: Failed with result 'exit-code'.
    Jun 20 17:37:45 zoogz.gregorie.lan systemd[1]: Failed to start named.service - Berkeley Internet Name Domain (DNS).
    $

    *******
    As I've said before, I'm totally baffled why this version of named should barf when fed a
    configuration that is passed as error free by named-checkconf and yes, before you ask,
    named-checkconf says its version 9.18.15: the same as the named version I'm running.

    However, The current named online BIND manual version is:

    BIND 9 Administrator Reference Manual
    Release 9.19.13-dev

    which doesn't have *any* references to '_default' at all, or as part of
    zone file names of of any names similar to "_default/gregorie.lan/IN"

    If I run my current copy of named with the -v option its reports:
    "BIND 9.18.15 (Extended Support Version) <id:"

    and is using as its default paths:

    named configuration: /etc/named.conf
    rndc configuration: /etc/rndc.conf
    DNSSEC root key: /etc/bind.keys
    nsupdate session key: /var/run/named/session.key
    named PID file: /var/run/named/named.pid
    named lock file: /var/run/named/named.lock
    geoip-directory: /usr/share/GeoIP

    ...though it seems a bit odd to publish a manual for version
    9.19.3 as 'current' when a fairly cutting edge Linux version
    like Fedora 37 is still on 9.18.15


    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tony Mountifield@21:1/5 to martin@mydomain.invalid on Tue Jun 20 21:08:07 2023
    In article <u6sqma$2e3d3$1@dont-email.me>,
    Martin Gregorie <martin@mydomain.invalid> wrote:
    On Mon, 19 Jun 2023 11:20:29 +0000 (UTC), Tony Mountifield wrote:

    Firstly, I see your post was made on Saturday evening. So it's possible
    you might have solved it by now. If so, please post and say so, in order that people don't expend time composing suggestions if they are no
    longer needed.

    If the problem is still unresolved, happy to help.

    Its still grinding along, I'm afraid. Here's the latest state of play. Apologies for its size,
    but at least I've turned off lie wrapping, so it should be a bit more legible. There seen to be
    two issues

    (1) there's a syntactic problem in the 'start' script used by systemd to launch named
    (2) there may still be a missing "_default/Zone file" but here I'm baffled since the
    currently published version of the official named manual does not include and references to
    either '_default' or 'default' in any context including as oart of a zone file name.

    I've done a lot of this stuff over the years and even recently, and would be happy
    to ssh in and take a look, if you were happy with that. It would certainly be quicker
    and more efficient than exchanging questions, suggestions and results via Usenet!

    I would be available on Wednesday morning. Please email me if you would like, and mention
    your preferred instant messaging platform. I like Discord, but can also do FB, Whatsapp,
    or possibly others.

    Cheers
    Tony

    Avyway, here's what I've seen:

    Here are my latest test results: thanks to you guys for your help so far. =========================================================================

    As you can see, named-checkconf says
    the configuration is fine:

    $ sudo named-checkconf -l
    0.0.127.in-addr.arpa IN _default primary
    gregorie.lan IN _default primary
    localhost.localdomain IN _default primary
    localhost IN _default primary 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa IN _default primary
    1.0.0.127.in-addr.arpa IN _default primary
    0.in-addr.arpa IN _default primary

    **** and here's what the items it thinks are significant ****

    $ sudo named-checkconf -p
    logging {
    channel "debug" {
    file "data/named.run";
    };
    };
    options {
    directory "/var/named";
    dump-file "/var/named/data/cache_dump.db";
    geoip-directory "/usr/share/GeoIP";
    listen-on port 53 {
    127.0.0.0/24;
    192.168.7.0/24;
    !82.71.205.14/32;
    };
    listen-on-v6 port 53 {
    "none";
    };
    managed-keys-directory "/var/named/dynamic";
    memstatistics-file "/var/named/data/named_mem_stats.txt";
    pid-file "/run/named/named.pid";
    session-keyfile "/run/named/session.key";
    statistics-file "/var/named/data/named_stats.txt";
    disable-algorithms "." {
    "RSAMD5";
    "DSA";
    };
    disable-ds-digests "." {
    "GOST";
    };
    dnssec-validation yes;
    recursion no;
    allow-query {
    192.168.7.0/24;
    };
    };
    trust-anchors {
    "." initial-ds 20326 8 2 "E06D44B80B8F1D39A95C0B0D7C65D08458E880409BBC683457104237C7F8EC8D";
    };
    zone "0.0.127.in-addr.arpa" {
    type primary;
    file "localhost.rev";
    notify no;
    };
    zone "gregorie.lan" IN {
    type primary;
    file "gregorie.lan";
    notify yes;
    };
    zone "localhost.localdomain" IN {
    type primary;
    file "named.localhost";
    allow-update {
    "none";
    };
    };
    zone "localhost" IN {
    type primary;
    file "named.localhost";
    allow-update {
    "none";
    };
    };
    zone "1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa" IN {
    type primary;
    file "named.loopback";
    allow-update {
    "none";
    };
    };
    zone "1.0.0.127.in-addr.arpa" IN {
    type primary;
    file "named.loopback";
    allow-update {
    "none";
    };
    };
    zone "0.in-addr.arpa" IN {
    type primary;
    file "named.empty";
    allow-update {
    "none";
    };
    };

    ========================================
    Here's what happens I try to start named
    with the 'named' systemd service:
    ========================================

    $ sudo systemctl start named
    Job for named.service failed because the control process exited with error code.
    See "systemctl status named.service" and "journalctl -xeu named.service" for details.

    *******
    and notice that the preceeding bash command appears to be missing a closing double
    quote, which is what I suspect is causing the 'systemctl 'start named' command to
    fail.
    *******

    *******
    Here's what 'systemctl status named' has to say about the failure to start *******

    $ sudo systemctl status named
    × named.service - Berkeley Internet Name Domain (DNS)
    Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; preset: disabled)
    Active: failed (Result: exit-code) since Tue 2023-06-20 17:37:45 BST; 17s ago
    Process: 812270 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/bin/named-checkconf -z "$NAM>
    CPU: 11ms

    17:37:45 zoogz.gregorie.lan bash[812271]: zone gregorie.lan/IN: not loaded due to errors.
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: _default/gregorie.lan/IN: file not found
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone localhost.localdomain/IN: loaded serial 0
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone localhost/IN: loaded serial 0
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone 1.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.0.ip6.arpa/I>
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone 1.0.0.127.in-addr.arpa/IN: loaded serial 0
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone 0.in-addr.arpa/IN: loaded serial 0
    Jun 20 17:37:45 zoogz.gregorie.lan systemd[1]: named.service: Control process exited, code=exited, status=1/FAILURE
    Jun 20 17:37:45 zoogz.gregorie.lan systemd[1]: named.service: Failed with result 'exit-code'.
    Jun 20 17:37:45 zoogz.gregorie.lan systemd[1]: Failed to start named.service - Berkeley Internet Name Domain (DNS).
    $

    *******
    As I've said before, I'm totally baffled why this version of named should barf when fed a
    configuration that is passed as error free by named-checkconf and yes, before you ask,
    named-checkconf says its version 9.18.15: the same as the named version I'm running.

    However, The current named online BIND manual version is:

    BIND 9 Administrator Reference Manual
    Release 9.19.13-dev

    which doesn't have *any* references to '_default' at all, or as part of
    zone file names of of any names similar to "_default/gregorie.lan/IN"

    If I run my current copy of named with the -v option its reports:
    "BIND 9.18.15 (Extended Support Version) <id:"

    and is using as its default paths:

    named configuration: /etc/named.conf
    rndc configuration: /etc/rndc.conf
    DNSSEC root key: /etc/bind.keys
    nsupdate session key: /var/run/named/session.key
    named PID file: /var/run/named/named.pid
    named lock file: /var/run/named/named.lock
    geoip-directory: /usr/share/GeoIP

    ...though it seems a bit odd to publish a manual for version
    9.19.3 as 'current' when a fairly cutting edge Linux version
    like Fedora 37 is still on 9.18.15


    --

    Martin | martin at
    Gregorie | gregorie dot org


    --
    Tony Mountifield
    Winchester, UK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tony Mountifield@21:1/5 to martin@mydomain.invalid on Tue Jun 20 22:03:04 2023
    In article <u6sqma$2e3d3$1@dont-email.me>,
    Martin Gregorie <martin@mydomain.invalid> wrote:
    On Mon, 19 Jun 2023 11:20:29 +0000 (UTC), Tony Mountifield wrote:

    Firstly, I see your post was made on Saturday evening. So it's possible
    you might have solved it by now. If so, please post and say so, in order that people don't expend time composing suggestions if they are no
    longer needed.

    If the problem is still unresolved, happy to help.

    Its still grinding along, I'm afraid. Here's the latest state of play. Apologies for its size,
    but at least I've turned off lie wrapping, so it should be a bit more legible. There seen to be
    two issues

    One more possibility: Do you have a directory called /var/named/chroot?

    If so, how do the contents of /var/named compare with /var/named/chroot/var/named?
    And the contents of /etc/named.conf with /var/named/chroot/etc/named.conf?

    Cheers
    Tony
    --
    Tony Mountifield
    Winchester, UK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Theo@21:1/5 to Martin Gregorie on Tue Jun 20 22:32:21 2023
    Martin Gregorie <martin@mydomain.invalid> wrote:
    options {
    directory "/var/named";
    ...
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone gregorie.lan/IN: not loaded due to errors.
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: _default/gregorie.lan/IN: file not found
    ...
    However, The current named online BIND manual version is:

    BIND 9 Administrator Reference Manual
    Release 9.19.13-dev

    which doesn't have *any* references to '_default' at all, or as part of
    zone file names of of any names similar to "_default/gregorie.lan/IN"

    According to: https://bind9.readthedocs.io/en/stable/reference.html#options-block-grammar

    <quote>
    directory
    Grammar: directory <quoted_string>;
    Blocks: options
    Tags: server

    Sets the server’s working directory.

    This sets the working directory of the server. Any non-absolute
    pathnames in the configuration file are taken as relative to this directory. The default location for most server output files (e.g., named.run) is this directory. If a directory is not specified, the working directory defaults
    to ".", the directory from which the server was started. The directory specified should be an absolute path, and must be writable by the effective user ID of the named process.

    The option takes effect only at the time that the configuration option
    is parsed; if other files are being included before or after specifying the
    new directory, the directory option must be listed before any other
    directive (like include) that can work with relative files. The safest way
    to include files is to use absolute file names.
    </quote>


    Are your config files in /var/named, ie /var/named/gregorie.lan
    or are they in /etc? Or symlinks from one to the other?

    I think it's somehow not finding the zone files. What if you change:

    zone "gregorie.lan" IN {
    type primary;
    file "gregorie.lan";
    notify yes;
    };

    to:

    zone "gregorie.lan" IN {
    type primary;
    file "/etc/named/gregorie.lan";
    notify yes;
    };

    if that is the correct path for it?

    I'm wondering if, in the absence of any config to the contrary, running
    named as a different user, or with some flags that override the options,
    causes the config location to change (eg maybe _default is used in the
    complete lack of any setting)?

    Theo

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tony Mountifield@21:1/5 to martin@mydomain.invalid on Tue Jun 20 21:30:47 2023
    In article <u6sqma$2e3d3$1@dont-email.me>,
    Martin Gregorie <martin@mydomain.invalid> wrote:
    [...]
    17:37:45 zoogz.gregorie.lan bash[812271]: zone gregorie.lan/IN: not loaded due to errors.
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: _default/gregorie.lan/IN: file not found

    I've had a look at a bit of the Bind source code. I think that when it says _default/gregorie.lan/IN, that is NOT a filename, but rather a name of a view. It seems to be reporting the internal view for which it could not load the zone file, but without actually reporting the name of the file that failed.

    It is possible to have multiple views set up within Bind, so that different views
    can be served to different networks or clients, but if you don't set up any views,
    as most setups don't need to, it seems that all the zones are added to an internal
    view called _default. So it's a bit of a red herring.

    See my other post too, offering to take a look.

    Cheers
    Tony
    --
    Tony Mountifield
    Winchester, UK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to Martin Gregorie on Tue Jun 20 23:49:37 2023
    Martin Gregorie <martin@mydomain.invalid> writes:

    On Mon, 19 Jun 2023 11:20:29 +0000 (UTC), Tony Mountifield wrote:

    Firstly, I see your post was made on Saturday evening. So it's possible
    you might have solved it by now. If so, please post and say so, in order
    that people don't expend time composing suggestions if they are no
    longer needed.

    If the problem is still unresolved, happy to help.

    Its still grinding along, I'm afraid. Here's the latest state of play. Apologies for its size,
    but at least I've turned off lie wrapping, so it should be a bit more legible. There seen to be
    two issues

    (1) there's a syntactic problem in the 'start' script used by systemd to launch named

    I don’t see any evidence for that. It’s quoting a bit of shell script in the logs, but it’s obviously managing to run named-checkconf, since
    that’s what’s producing the rest of the log messages.

    zone "gregorie.lan" IN {
    type primary;
    file "gregorie.lan";
    notify yes;
    };

    Your previous posts have shown considerable confusion about what the
    zone files are actually called (and the details seem to have varied over
    time). I suspect that’s the root of the problem.

    With that in mind, what’s the output from:

    ls -l /var/named

    If you’ve changed anything else in the meantime please quote the updated config!

    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Theo on Tue Jun 20 23:46:59 2023
    On 20 Jun 2023 22:32:21 +0100 (BST), Theo wrote:

    Martin Gregorie <martin@mydomain.invalid> wrote:
    options {
    directory "/var/named";
    ...
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]: zone gregorie.lan/IN:
    not loaded due to errors.
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]:
    _default/gregorie.lan/IN: file not found
    ...
    However, The current named online BIND manual version is:

    BIND 9 Administrator Reference Manual Release 9.19.13-dev

    which doesn't have *any* references to '_default' at all, or as part of
    zone file names of of any names similar to "_default/gregorie.lan/IN"

    According to: https://bind9.readthedocs.io/en/stable/reference.html#options-block-
    grammar

    <quote>
    directory
    Grammar: directory <quoted_string>;
    Blocks: options Tags: server

    Sets the server’s working directory.

    This sets the working directory of the server. Any non-absolute pathnames in the configuration file are taken as relative to this
    directory.
    The default location for most server output files (e.g., named.run) is
    this directory. If a directory is not specified, the working directory defaults to ".", the directory from which the server was started. The directory specified should be an absolute path, and must be writable by
    the effective user ID of the named process.

    The option takes effect only at the time that the configuration
    option
    is parsed; if other files are being included before or after specifying
    the new directory, the directory option must be listed before any other directive (like include) that can work with relative files. The safest
    way to include files is to use absolute file names.
    </quote>


    Are your config files in /var/named, ie /var/named/gregorie.lan or are
    they in /etc? Or symlinks from one to the other?

    I think it's somehow not finding the zone files. What if you change:

    zone "gregorie.lan" IN {
    type primary;
    file "gregorie.lan";
    notify yes;
    };

    to:

    zone "gregorie.lan" IN {
    type primary;
    file "/etc/named/gregorie.lan";
    notify yes;
    };

    if that is the correct path for it?

    That's correct, but is not the issue. I KNOW that all the files in my configuration are being found correctly because named-checkconf (a) isn't reporting and errors in congif files and (b) is finding them all.

    I'm wondering if, in the absence of any config to the contrary, running
    named as a different user, or with some flags that override the options, causes the config location to change (eg maybe _default is used in the complete lack of any setting)?

    Its run as root: this is normal for named.

    FWIW it now looks to me that that scripting error (an omitted string
    terminator in an if (....) statement in the bash script used by systemd to start named is what's preventing named from starting: it looks like this
    is killing the script before it can start the named server: the last
    successful action before the script trips over its feet and aborts is to
    run "named-checkconf -z" and then it crashes almost immediately.

    Martin






    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Tony Mountifield on Tue Jun 20 23:15:57 2023
    On Tue, 20 Jun 2023 21:30:47 +0000 (UTC), Tony Mountifield wrote:

    In article <u6sqma$2e3d3$1@dont-email.me>,
    Martin Gregorie <martin@mydomain.invalid> wrote:
    [...]
    17:37:45 zoogz.gregorie.lan bash[812271]: zone gregorie.lan/IN: not
    loaded due to errors.
    Jun 20 17:37:45 zoogz.gregorie.lan bash[812271]:
    _default/gregorie.lan/IN: file not found

    I've had a look at a bit of the Bind source code. I think that when it
    says _default/gregorie.lan/IN, that is NOT a filename, but rather a name
    of a view.
    It seems to be reporting the internal view for which it could not load
    the zone file, but without actually reporting the name of the file that failed.

    It is possible to have multiple views set up within Bind, so that
    different views can be served to different networks or clients, but if
    you don't set up any views, as most setups don't need to, it seems that
    all the zones are added to an internal view called _default. So it's a
    bit of a red herring.

    I wonder why THAT didn't make it into the BIND manual! However, that's
    useful clue and is good to know.

    See my other post too, offering to take a look.

    This evening I got a response, via Fedora's Bugzilla, to the bug I raised
    and asking for some specific detail. I haven't had time do do more than
    glance at that yet, but a first glance says it looks useful.

    Tomorrow I'll write a response and most likely post a copy here too.

    Thanks for your help, Martin






    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Tony Mountifield on Tue Jun 20 23:24:11 2023
    On Tue, 20 Jun 2023 22:03:04 +0000 (UTC), Tony Mountifield wrote:

    In article <u6sqma$2e3d3$1@dont-email.me>,
    Martin Gregorie <martin@mydomain.invalid> wrote:
    On Mon, 19 Jun 2023 11:20:29 +0000 (UTC), Tony Mountifield wrote:

    Firstly, I see your post was made on Saturday evening. So it's
    possible you might have solved it by now. If so, please post and say
    so, in order that people don't expend time composing suggestions if
    they are no longer needed.

    If the problem is still unresolved, happy to help.

    Its still grinding along, I'm afraid. Here's the latest state of play.
    Apologies for its size, but at least I've turned off lie wrapping, so
    it should be a bit more legible. There seen to be two issues

    One more possibility: Do you have a directory called /var/named/chroot?

    I'll have a look tomorrow (FWIW,without named running nothing on my LAN
    can talk to its peers, so I'm handling NNTP from a laptop downstairs and running named on my house server upstairs and (when I must) moving files between them on an SD card. Works, but id definitely not the quickest way
    of doing stuff.


    Cheers,Martin





    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Richard Kettlewell on Wed Jun 21 00:14:27 2023
    On Tue, 20 Jun 2023 23:49:37 +0100, Richard Kettlewell wrote:

    Martin Gregorie <martin@mydomain.invalid> writes:

    On Mon, 19 Jun 2023 11:20:29 +0000 (UTC), Tony Mountifield wrote:

    Firstly, I see your post was made on Saturday evening. So it's
    possible you might have solved it by now. If so, please post and say
    so, in order that people don't expend time composing suggestions if
    they are no longer needed.

    If the problem is still unresolved, happy to help.

    Its still grinding along, I'm afraid. Here's the latest state of play.
    Apologies for its size, but at least I've turned off lie wrapping, so
    it should be a bit more legible. There seen to be two issues

    (1) there's a syntactic problem in the 'start' script used by systemd
    to launch named

    I don’t see any evidence for that. It’s quoting a bit of shell script in the logs, but it’s obviously managing to run named-checkconf, since that’s what’s producing the rest of the log messages.

    Its hadr to see: I've previously missed it too. In the following (grabbed
    from the "systemttl status named" output) look at the last line:

    Process: 812270 ExecStartPre=/bin/bash -c if [ !
    "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/bin/named-checkconf -z
    "$NAM>

    The double quote at the start of that line should be matched by one
    between '$NAM' and '>'. Its absence crashes the bash script before it
    tries to launch named. I've double checked by inspecting the "systemctl
    status" output and its missing there too.


    zone "gregorie.lan" IN {
    type primary;
    file "gregorie.lan";
    notify yes;
    };

    Your previous posts have shown considerable confusion about what the
    zone files are actually called (and the details seem to have varied over time). I suspect that’s the root of the problem.

    There's a good reason for that: I originally configured 'named' to manage
    my house LAN back in 2005 and haven't needed to do anything to it until
    now, 18 years later. In the intervening period I've added at most two
    computers (an RPi and a second laptop),

    Not excuses, but recently, my house server died and has been replaced AND
    my D-link DSL320B ADSL router also died and has been replaced by a
    Fritz!Box and a fibre link to my ISP. So, running into all this named
    nonsense is more hassle than I need (though I must admit the faster link
    is nice!


    With that in mind, what’s the output from:

    ls -l /var/named

    Look out for that tomorrow.


    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to Martin Gregorie on Wed Jun 21 08:26:29 2023
    Martin Gregorie <martin@mydomain.invalid> writes:
    On Tue, 20 Jun 2023 23:49:37 +0100, Richard Kettlewell wrote:

    I don’t see any evidence for that. It’s quoting a bit of shell script
    in the logs, but it’s obviously managing to run named-checkconf,
    since that’s what’s producing the rest of the log messages.

    Its hadr to see: I've previously missed it too. In the following (grabbed from the "systemttl status named" output) look at the last line:

    Process: 812270 ExecStartPre=/bin/bash -c if [ !
    "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/bin/named-checkconf -z
    "$NAM>

    The double quote at the start of that line should be matched by one
    between '$NAM' and '>'. Its absence crashes the bash script before it
    tries to launch named. I've double checked by inspecting the "systemctl status" output and its missing there too.

    That’s just the log output being truncated. Look at named.service for
    the actual ExecPreStart command.

    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Martin Gregorie on Wed Jun 21 11:29:45 2023
    On Wed, 21 Jun 2023 00:14:27 -0000 (UTC), Martin Gregorie wrote:

    Look out for that tomorrow.

    Here's the current contents of /var/named:

    # sudo ls -l /var/named
    total 32
    -rw-r--r--. 1 root root 698 Jun 20 14:28 7.168.192.in-addr.arpa.zone drwxrwx---. 1 named named 162 Jun 18 00:00 data
    drwxrwx---. 1 named named 76 May 18 19:59 dynamic
    -rw-r--r--. 1 root root 620 Jun 14 20:47 gregorie.lan.zone
    -rw-r--r--. 1 root root 604 Jun 14 19:38 gregorie.lan.zone.unmodded -rw-r-----. 1 root named 3312 May 18 20:00 named.ca
    -rw-r-----. 1 root named 152 May 18 20:00 named.empty
    -rw-r--r--. 1 root root 469 Jun 19 11:58 named.gregorie.lan
    -rw-r-----. 1 root named 152 May 18 20:00 named.localhost
    -rw-r-----. 1 root named 168 May 18 20:00 named.loopback
    drwxrwx---. 1 named named 0 May 18 19:59 slaves

    The gregorie.lan.zone.unmodded should be ignored.

    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Tony Mountifield@21:1/5 to martin@mydomain.invalid on Wed Jun 21 11:41:40 2023
    In article <u6umv9$2qifb$1@dont-email.me>,
    Martin Gregorie <martin@mydomain.invalid> wrote:
    On Wed, 21 Jun 2023 00:14:27 -0000 (UTC), Martin Gregorie wrote:

    Look out for that tomorrow.

    Here's the current contents of /var/named:

    # sudo ls -l /var/named
    total 32
    -rw-r--r--. 1 root root 698 Jun 20 14:28 7.168.192.in-addr.arpa.zone drwxrwx---. 1 named named 162 Jun 18 00:00 data
    drwxrwx---. 1 named named 76 May 18 19:59 dynamic
    -rw-r--r--. 1 root root 620 Jun 14 20:47 gregorie.lan.zone
    -rw-r--r--. 1 root root 604 Jun 14 19:38 gregorie.lan.zone.unmodded -rw-r-----. 1 root named 3312 May 18 20:00 named.ca
    -rw-r-----. 1 root named 152 May 18 20:00 named.empty
    -rw-r--r--. 1 root root 469 Jun 19 11:58 named.gregorie.lan
    -rw-r-----. 1 root named 152 May 18 20:00 named.localhost
    -rw-r-----. 1 root named 168 May 18 20:00 named.loopback
    drwxrwx---. 1 named named 0 May 18 19:59 slaves

    The gregorie.lan.zone.unmodded should be ignored.

    Well in that case, the following section of your named.conf, recently quoted, is wrong:

    zone "gregorie.lan" IN {
    type primary;
    file "gregorie.lan";
    notify yes;
    };

    The file line should say "gregorie.lan.zone". Otherwise it is looking for a file
    called "gregorie.lan", which doesn't exist.

    Cheers
    Tony

    --
    Tony Mountifield
    Winchester, UK

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to Martin Gregorie on Wed Jun 21 12:24:35 2023
    On Tue, 20 Jun 2023 23:24:11 -0000 (UTC), Martin Gregorie wrote:

    On Tue, 20 Jun 2023 22:03:04 +0000 (UTC), Tony Mountifield wrote:

    In article <u6sqma$2e3d3$1@dont-email.me>,
    Martin Gregorie <martin@mydomain.invalid> wrote:
    On Mon, 19 Jun 2023 11:20:29 +0000 (UTC), Tony Mountifield wrote:

    Firstly, I see your post was made on Saturday evening. So it's
    possible you might have solved it by now. If so, please post and say
    so, in order that people don't expend time composing suggestions if
    they are no longer needed.

    If the problem is still unresolved, happy to help.

    Its still grinding along, I'm afraid. Here's the latest state of play.
    Apologies for its size, but at least I've turned off lie wrapping, so
    it should be a bit more legible. There seen to be two issues

    One more possibility: Do you have a directory called /var/named/chroot?

    I'll have a look tomorrow (FWIW,without named running nothing on my LAN
    can talk to its peers, so I'm handling NNTP from a laptop downstairs and running named on my house server upstairs and (when I must) moving files between them on an SD card. Works, but id definitely not the quickest way
    of doing stuff.


    No I don't have any file called /var/named/chroot

    On the brighter side, I recently unearthed my copy of O'Reilly's
    "DNS and BIND", 4th edition, so should still be relevant, since it covers
    BIND 9 though I notice there's no mentioning the 'default' category or
    the _default filename prefix.

    Cheers,Martin





    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Martin Gregorie@21:1/5 to All on Wed Jun 21 19:53:23 2023
    I'm pleased to report that I've now got named up and running, thanks to
    all your help, and with the aid of the O'Reilly book "DNS and BIND" (4th edition) which, it must be said is at least as big as the current online
    BIND 9.2 manual but is much better organised and indexed: it was also my
    go-to book when I first set up a home DNS service: I thought I'd lost
    it,which was why I didn't use it in the first place, but had merely
    mislaid it.


    --

    Martin | martin at
    Gregorie | gregorie dot org

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)
  • From Richard Kettlewell@21:1/5 to Martin Gregorie on Thu Jun 22 09:09:46 2023
    Martin Gregorie <martin@mydomain.invalid> writes:
    Here's the current contents of /var/named:

    # sudo ls -l /var/named
    total 32
    -rw-r--r--. 1 root root 698 Jun 20 14:28 7.168.192.in-addr.arpa.zone drwxrwx---. 1 named named 162 Jun 18 00:00 data
    drwxrwx---. 1 named named 76 May 18 19:59 dynamic
    -rw-r--r--. 1 root root 620 Jun 14 20:47 gregorie.lan.zone
    -rw-r--r--. 1 root root 604 Jun 14 19:38 gregorie.lan.zone.unmodded -rw-r-----. 1 root named 3312 May 18 20:00 named.ca
    -rw-r-----. 1 root named 152 May 18 20:00 named.empty
    -rw-r--r--. 1 root root 469 Jun 19 11:58 named.gregorie.lan
    -rw-r-----. 1 root named 152 May 18 20:00 named.localhost
    -rw-r-----. 1 root named 168 May 18 20:00 named.loopback
    drwxrwx---. 1 named named 0 May 18 19:59 slaves

    The gregorie.lan.zone.unmodded should be ignored.

    ...and you previously wrote:

    zone "gregorie.lan" IN {
    type primary;
    file "gregorie.lan";
    notify yes;
    };

    There’s your problem. The file you’re asking for does not exist.

    --
    https://www.greenend.org.uk/rjk/

    --- SoupGate-Win32 v1.05
    * Origin: fsxNet Usenet Gateway (21:1/5)