chroot question: slave can't talk on network

[Jason Price]

I'm working with bind 8.2.2-pl5 on Solaris 2.7.  I've set up the primary,
and all is well.  It answers queries, it can propigate named-xfer's,
everything looks good.

I set up the secondary.  When it's not chrooted, it will create the
appropriate zone backup files, and do everything it needs to.

When it IS chrooted, it can't create/update the zone files, and it can't
respond to queries.

This seems to point to a problem in my chroot setup, and more specifically
to the networking part of that setup, but I can't for the life of me figure
it out.  (Though you can telnet to port 53 and get a connection...)

If you have any pointers, please let me know.
Jason



Details follow:

The only symlinks are various things pointing to/around named.conf, and
within /usr/lib.  The /dev devices are exactly as specified in 'man ftpd',
and their major/minor numbers are as they should be.

I start named as follows:
/usr/local/sbin/named -u named -g named -t /var/named/ -c /etc/named.conf

/etc/named.conf is a symlink to /var/named/etc/named.conf

cd /var/named ; find . -ls | <awk incantation>

drwxr-xr-x named    named    .
drwxr-xr-x named    named    ./log
-rwxr-xr-x named    named    ./log/syslog
-rwxr-xr-x named    named    ./log/statistics
-rwxr-xr-x named    named    ./log/queries
drwxr-xr-x root     other    ./dev
crw-rw-rw- root     sys      ./dev/null
crw-rw-rw- root     other    ./dev/tcp
crw-rw-rw- root     other    ./dev/udp
crw-rw-rw- root     other    ./dev/zero
crw-rw-rw- root     other    ./dev/ticotsord
crw-rw-rw- root     other    ./dev/ticlts
drwxr-xr-x root     other    ./etc
-r--r--r-- root     other    ./etc/named-xfer
lrwxrwxrwx root     other    ./etc/named.conf -> named.conf-chroot
-rw-r--r-- root     other    ./etc/named.pid
drwxr-xr-x root     other    ./etc/default
-r--r--r-- root     other    ./etc/default/init
drwxr-xr-x root     other    ./etc/inet
-r--r--r-- root     other    ./etc/nsswitch.conf
-r--r--r-- root     other    ./etc/netconfig
-r--r--r-- root     other    ./etc/resolv.conf
-r--r--r-- root     other    ./etc/services
-rw-r--r-- root     other    ./etc/named.conf-no-chroot
-rw-r--r-- root     other    ./etc/named.conf-chroot
drwxr-xr-x root     other    ./usr
drwxr-xr-x root     other    ./usr/lib
-r-xr-xr-x root     other    ./usr/lib/ld.so
-r-xr-xr-x root     other    ./usr/lib/ld.so.1
-r-xr-xr-x root     other    ./usr/lib/libc.so.1
-r-xr-xr-x root     other    ./usr/lib/libdl.so.1
-r-xr-xr-x root     other    ./usr/lib/libmp.so.2
-r-xr-xr-x root     other    ./usr/lib/libnsl.so.1
-r-xr-xr-x root     other    ./usr/lib/libsocket.so.1
-r-xr-xr-x root     other    ./usr/lib/nss_compat.so.1
-r-xr-xr-x root     other    ./usr/lib/nss_dns.so.1
-r-xr-xr-x root     other    ./usr/lib/nss_files.so.1
-r-xr-xr-x root     other    ./usr/lib/nss_nis.so.1
-r-xr-xr-x root     other    ./usr/lib/nss_nisplus.so.1
lrwxrwxrwx root     other    ./usr/lib/straddr.so
-r-xr-xr-x root     other    ./usr/lib/straddr.so.2
lrwxrwxrwx root     other    ./usr/lib/libxfn.so
-r-xr-xr-x root     other    ./usr/lib/libxfn.so.1
-r-xr-xr-x root     other    ./usr/lib/libxfn.so.2
lrwxrwxrwx root     other    ./usr/lib/libc.so
lrwxrwxrwx root     other    ./usr/lib/libdl.so
-r-xr-xr-x root     other    ./usr/lib/libintl.so.1
lrwxrwxrwx root     other    ./usr/lib/libintl.so
-r-xr-xr-x root     other    ./usr/lib/libmp.so.1
lrwxrwxrwx root     other    ./usr/lib/libmp.so
lrwxrwxrwx root     other    ./usr/lib/libnsl.so
lrwxrwxrwx root     other    ./usr/lib/libsocket.so
-r-xr-xr-x root     other    ./usr/lib/libw.so.1
lrwxrwxrwx root     other    ./usr/lib/libw.so
lrwxrwxrwx root     other    ./usr/lib/nss_nis.so
lrwxrwxrwx root     other    ./usr/lib/nss_nisplus.so
lrwxrwxrwx root     other    ./usr/lib/nss_dns.so
lrwxrwxrwx root     other    ./usr/lib/nss_files.so
drwxr-xr-x root     other    ./usr/local
drwxr-xr-x root     other    ./usr/local/sbin
-rwxr-xr-x root     other    ./usr/local/sbin/named-xfer
drwxr-xr-x root     other    ./usr/share
drwxr-xr-x root     other    ./usr/share/lib
dr-xr-xr-x root     other    ./usr/share/lib/zoneinfo

[complete listing of /usr/share/lib/zoneinfo deleted for brevity]

-rw-r--r-- named    named    ./db.local
-rwxr-xr-x named    named    ./init.named
-rwxr-xr-x named    named    ./named.ca
lrwxrwxrwx root     other    ./named.conf -> ./etc/named.conf


-- 
Faith is not a matter of questions.      Jason Price
Faith is a matter of answers.            jprice at gatech.edu
More to the point, one answer:           Theta Xi, Beta Alpha, 449
"Yes, Lord."