can't open '/dns/etc/named.conf'

[Mark_Andrews at isc.org]

> 
> "David C. Kleinman" wrote:
> 
> > Ok,
> > But my start script (which functions on 2 other slaves running 8.2.3) looks
> > like this:
> > #!/bin/sh
> > # Source function library.
> > .. /etc/rc.d/init.d/functions
> >
> > [ -f /dns/sbin/named ] || exit 0
> > [ -f /dns/etc/named.conf ] || exit 0
> >
> > RETVAL=0
> >
> > # See how we were called.
> > case "$1" in
> >   start)
> >         echo -n "Starting nameserver: "
> >         echo
> >         #daemon /dns/sbin/named -u named -g named -t /dns
> >         daemon /dns/sbin/named -u named -g named
> >         RETVAL=$?
> >         ;;
> >
> > and the binaries are installed (not linked) in both the standard port
> > locations and the chrooted jail.
> 
> The binaries shouldn't be in the chroot jail. They should be run from their
> normal locations.

	As this is BIND 8 named-xfer needs to be in the chroot jail
	along with any shared libraries it depends upon, any devices
	it uses and any configuration files the required for the C
	library calls invoked.

	Also 8.2.3 has security flaws.  You should upgrade.

	Mark
> 
> 
> - Kevin
> 
> >
> > ----- Original Message -----
> > From: "Kevin Darcy" <kcd at daimlerchrysler.com>
> > To: <bind-users at isc.org>
> > Sent: Wednesday, July 17, 2002 3:39 PM
> > Subject: Re: can't open '/dns/etc/named.conf'
> >
> > >
> > > "David C. Kleinman" wrote:
> > >
> > > > I inherited a chrooted dns environment and wanted to upgrade from bind
> > 8.2.3
> > > > to 8.3.3 (on rh 7.2).
> > > >
> > > > I compiled after setting the linux port setting to:
> > > > 'CC=gcc -D_GNU_SOURCE'
> > > > 'CDEBUG=-O -g'
> > > > 'DESTBIN=/dns/bin'
> > > > 'DESTSBIN=/dns/sbin'
> > > > 'DESTEXEC=/dsn/sbin'
> > > > 'DESTMAN=/dns/man'
> > > > 'DESTHELP=/dns/lib'
> > > > 'DESTETC=/dns/etc'
> > > > 'DESTRUN=/dns/var/run'
> > > > 'LEX=flex -8 -I'
> > > > 'YACC=yacc -d'
> > > > 'SYSLIBS='
> > > > 'LIBL=-lfl'
> > > > 'INSTALL=install'
> > > > 'MANDIR=man'
> > > > 'MANROFF=cat'
> > > > 'CATEXT=$$N'
> > > > 'PS=ps -p'
> > > > 'AR=ar crus'
> > > > 'RANLIB=:'
> > > >
> > > > After installation the server restart failed with the following error:
> > > >
> > > > [root at fatmama sbin]#/etc/rc.d/init.d/named start
> > > > can't open '/dns/etc/named.conf'
> > > > [root at fatmama sbin]# /dns/sbin/named -u named -g named -t /dns
> > > > can't open '/dns/etc/named.conf'
> > > >
> > > > Yet the file is there.
> > > > [root at fatmama sbin]# file /dns/etc/named.conf
> > > > /dns/etc/named.conf: ASCII C++ program text
> > >
> > > You shouldn't be prefixing your paths with "/dns". Once named chroot's, i
> t
> > sees
> > > everything relative to the chroot. Build and compile normally and you
> > should be
> > > fine.
> > >
> > >
> > > - Kevin
> > >
> > >
> > >
> > >
> > >
> 
> 
--
Mark Andrews, Internet Software Consortium
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742                 INTERNET: Mark.Andrews at isc.org