Regarding named related issue observed with bind 9.11.5-P4 version

[Chandra Rao]

Hi Team,

Earlier we have used bind-9.9.11-P1 in our platform and upgraded to
9.11.5-P4 due to the EOL received for the earlier used version.
After upgrading we are facing the below mentioned issue related to named
binary.

While launching the named service coming from the latest bind as mentioned
below, We have observed that it's is not able to create "/var/run/named"
directory with the named user in the cluster. Due to this we are not able
to store the files "named.pid" and "session.key".

Following are the variables defined in the conf file for the respective
files.
options {
    version "BIND";
    pid-file "/var/run/named/named.pid";
    session-keyfile "/var/run/named/session.key";

# Exec named
exec /usr/sbin/named -u named -c "/etc/ClusterDNS.conf" -f

Due to this following errors are logging in the master-syslog.
6048:Jan 29 10:22:54.073621 warn CFPU-1 named[9574]: couldn't mkdir
'/var/run/named': Permission denied
6051:Jan 29 10:22:54.073834 info CFPU-1 named[9574]: generating session key
for dynamic DNS
6052:Jan 29 10:22:54.074017 warn CFPU-1 named[9574]: couldn't mkdir
'/var/run/named': Permission denied
6053:Jan 29 10:22:54.074017 err CFPU-1 named[9574]: could not create
/var/run/named/session.key
6054:Jan 29 10:22:54.074017 err CFPU-1 named[9574]: failed to generate
session key for dynamic DNS: permission denied

>From the opensource we came to know that it's fixed in 9.9.x version which
we used earlier.Kindly let us know why the issue coming again in 9.11.x
version.

Thanks in Advance.


Regards,
Chandra M
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20190403/8ae56182/attachment.html>