[SOLVED] CentOS 6 + BIND

bathory · 08-23-2011, 12:14 AM

Quote:

[root@prueba ~]# ps -ef|grep named

root 3171 3056 0 19:02 pts/0 00:00:00 grep named

The ps output means that named is not running. Try to start the service and run ps again.

Quote:

I changed the named.conf with the lines that you said. It's working now but not writting the log.

Are you sure it's working?
Because from above looks like named is not running. If you have created the logfile yourself, delete it and let named create its own when it starts.

Regards

Nocta · 08-23-2011, 09:38 AM

Sorry, you're right.

Quote:

[root@prueba ~]# ps -ef|grep named
named 1946 1 3 11:34 ? 00:00:00 /usr/sbin/named -u named
root 1955 1914 0 11:35 pts/0 00:00:00 grep named

bathory · 08-23-2011, 11:12 AM

So, what is the situation now? Does is write in the log file?
If it doesn't change severity to debug

Code:

severity debug 3;

to see what happens

Regards

Nocta · 08-23-2011, 12:29 PM

Nope, the same :/

Quote:

Aug 23 14:27:47 localhost named[2131]: /etc/named.conf:233: couldn't add command channel 192.168.0.6#3333: permission denied
Aug 23 14:27:47 localhost named[2131]: the working directory is not writable
Aug 23 14:27:47 localhost named[2131]: logging channel 'bindlog' file '/var/named/dnsserver.log': permission denied
Aug 23 14:27:47 localhost named[2131]: isc_log_open '/var/named/dnsserver.log' failed: permission denie

It's not writing in the log file.

Thanks for the patience.

bathory · 08-23-2011, 12:56 PM

What is the output of:

Code:

ls -ld /var/named
ls -l /var/named

If the directory owner is not the user named, you need to change it:

Code:

chown -R named:named /var/named

Nocta · 08-23-2011, 01:32 PM

Quote:

[root@prueba ~]# chown -R named:named /var/named

[root@prueba ~]# ls -ld /var/named

drwxr-x---. 5 named named 4096 ago 21 13:55 /var/named

[root@prueba ~]# ls -l /var/named

çtotal 52

drwxrwx---. 2 named named 4096 ago 21 15:07 data

drwxrwx---. 2 named named 4096 ago 23 14:27 dynamic

-rw-r--r--. 1 named named 56 ago 20 21:45 my.external.zone.db

-rw-r--r--. 1 named named 56 ago 20 21:45 my.internal.zone.db

-rw-r-----. 1 named named 1892 ago 20 21:45 named.ca

-rw-r-----. 1 named named 152 ago 20 21:45 named.empty

-rw-r-----. 1 named named 152 ago 20 21:45 named.localhost

-rw-r-----. 1 named named 168 ago 20 21:45 named.loopback

-rw-r--r--. 1 named named 176 ago 20 22:12 prueba1.ec.zone

-rw-r-----. 1 named named 180 ago 21 13:55 prueba.ec.zone

-rw-r-----. 1 named named 176 ago 20 21:56 prueba.ec.zone~

-rw-rw-r--. 1 named named 599 ago 20 19:41 rndc.conf

drwxrwx---. 2 named named 4096 ago 20 21:45 slaves

I'll edit this message after a couple of minutes. Just to check if it's writing or not in the log file.

EDIT: I don't read any error at /var/log/messages but there's not dnsserver.log file in /var/named/

bathory · 08-23-2011, 03:44 PM

Did you restart named after changing permissions?

Nocta · 08-23-2011, 03:55 PM

Of course.

So far I don't see any errors at /var/log/messages but there's no dnsserver.log file.

Maybe I have to wait until logfile is 5mb?

EDIT: I have just checked /var/log/messages and guess what:

Quote:

Aug 23 17:55:30 localhost named[4200]: /etc/named.conf:233: couldn't add command channel 192.168.0.6#3333: permission denied
Aug 23 17:55:30 localhost named[4200]: the working directory is not writable
Aug 23 17:55:30 localhost named[4200]: logging channel 'bindlog' file '/var/named/dnsserver.log': permission denied
Aug 23 17:55:30 localhost named[4200]: isc_log_open '/var/named/dnsserver.log' failed: permission denied

bathory · 08-23-2011, 04:08 PM

No, 5mb means that the logfile will be rotated when it reaches that size.

I still think it's selinux. Try to disable it temporarily by running

Code:

setenforce 0

restart named and see what happens

Nocta · 08-23-2011, 09:51 PM

You rock man!

It's working now!.

Do I have to type that command everytime I power on my CentOS Virtual Machine?

Thanks!

LBM · 08-23-2011, 09:58 PM

If SELinux is the cause of the problem, you could disable it permanently.
http://www.centos.org/docs/5/html/5....e-disable.html

Another solution, is to make it work together with SELinux.

bathory · 08-24-2011, 12:28 AM

I've told you since the beginning that it was a selinux problem.
Anyway as the previous poster above said, you should either disable selinux completely, or fix the context of the logfile.
I'm not familiar with selinux, but according to this, I guess you need something like

Code:

chcon -t named_cache_t /var/named/dnsserver.log

Regards

Nocta · 08-24-2011, 08:47 AM

Yes, that's what I did yesterday.

So far it's working.

Thanks guys for your help and patience!