Comments on: Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 â€“ Part 4

By: Ciro

Ciro — Wed, 27 Oct 2010 03:50:17 +0000

Just wondering, why are you registering Active Directory entries in your DNS server for a PDC setup?…

By: Ciro

Ciro — Wed, 27 Oct 2010 03:50:17 +0000

Just wondering, why are you registering Active Directory entries in your DNS server for a PDC setup?…

By: jc dole

jc dole — Thu, 16 Sep 2010 21:41:09 +0000

named fail to start (jail) and dhcpd have very strange behaviour .
First
Just for information in case if it is important to start dhcpd and named :
Sep 16 20:26:44 LINUX-SRV named[2417]: nss_ldap: could not search LDAP server – Server is unavailable
Sep 16 20:26:44 LINUX-SRV named[2417]: nss_ldap: could not search LDAP server – Server is unavailable
Secondly
Both config files in /etc/sysconfig set parameters to start in jail root
but
NAMED_CONF_INCLUDE_FILES=””
DHCPD_CONF_INCLUDE_FILES=””
1Â°) DHCPD
================
To make dhcpd to start :
named.keys must be in both directory :
“/etc/named.keys”
“/var/lib/dhcp/etc/named.keys”
and
/etc/dhcpd.conf must contain :
include “/etc/named.keys”;
( not –> include “/var/lib/dhcp/etc/named.keys”; because in that case it does not find the named.keys file : Can’t open /var/lib/dhcp/etc/named.keys: No such file or directory )
LINUX-SRV:~ # service dhcpd start
Starting ISC DHCPv4 4.x Server [chroot] done
LINUX-SRV:~ #
2Â°) NAMED
================
with : /etc/named.conf file :
# Include file with key
#################################################
include “/etc/named.keys”;
include “/etc/named.conf.include”; ( this file is empty )
/var/log/messages :
Sep 16 20:26:44 LINUX-SRV named[2418]: starting BIND 9.7.1 -t /var/lib/named -u named
Sep 16 20:26:44 LINUX-SRV named[2418]: built with ‘–prefix=/usr’ ‘–bindir=/usr/bin’ ‘–sbindir=/usr/sbin’ ‘–sysconfdir=/etc’ ‘–localstatedir=/var’ ‘–libdir=/usr/lib’ ‘–includedir=/usr/include/bind’ ‘–mandir=/usr/share/man’ ‘–infodir=/usr/share/info’ ‘–with-openssl’ ‘–enable-threads’ ‘–with-libtool’ ‘–enable-runidn’ ‘–with-libxml2’ ‘–with-dlz-mysql’ ‘–with-dlz-ldap’ ‘CFLAGS=-fomit-frame-pointer -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -fno-strict-aliasing’ ‘LDFLAGS=-L/usr/lib’
Sep 16 20:26:44 LINUX-SRV named[2418]: adjusted limit on open files from 8192 to 1048576
Sep 16 20:26:44 LINUX-SRV named[2418]: found 1 CPU, using 1 worker thread
Sep 16 20:26:44 LINUX-SRV named[2418]: using up to 4096 sockets
Sep 16 20:26:44 LINUX-SRV named[2418]: loading configuration from ‘/etc/named.conf’
Sep 16 20:26:44 LINUX-SRV named[2418]: /etc/named.conf:212: open: /etc/named.keys: permission denied
Sep 16 20:26:44 LINUX-SRV named[2418]: loading configuration: permission denied
Sep 16 20:26:44 LINUX-SRV named[2418]: exiting (due to fatal error)
with : /etc/named.conf file :
# Include file with key
#################################################
include “/var/lib/named/etc/named.keys”;
include “/etc/named.conf.include”; ( this file is empty )
/var/log/messages :
Sep 16 21:11:35 LINUX-SRV named[6065]: starting BIND 9.7.1 -t /var/lib/named -u named
Sep 16 21:11:35 LINUX-SRV named[6065]: built with ‘–prefix=/usr’ ‘–bindir=/usr/bin’ ‘–sbindir=/usr/sbin’ ‘–sysconfdir=/etc’ ‘–localstatedir=/var’ ‘–libdir=/usr/lib’ ‘–includedir=/usr/include/bind’ ‘–mandir=/usr/share/man’ ‘–infodir=/usr/share/info’ ‘–with-openssl’ ‘–enable-threads’ ‘–with-libtool’ ‘–enable-runidn’ ‘–with-libxml2’ ‘–with-dlz-mysql’ ‘–with-dlz-ldap’ ‘CFLAGS=-fomit-frame-pointer -fmessage-length=0 -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector -funwind-tables -fasynchronous-unwind-tables -g -fno-strict-aliasing’ ‘LDFLAGS=-L/usr/lib’
Sep 16 21:11:35 LINUX-SRV named[6065]: adjusted limit on open files from 8192 to 1048576
Sep 16 21:11:35 LINUX-SRV named[6065]: found 1 CPU, using 1 worker thread
Sep 16 21:11:35 LINUX-SRV named[6065]: using up to 4096 sockets
Sep 16 21:11:35 LINUX-SRV named[6065]: loading configuration from ‘/etc/named.conf’
Sep 16 21:11:35 LINUX-SRV named[6065]: /etc/named.conf:212: open: /var/lib/named/etc/named.keys: file not found
Sep 16 21:11:35 LINUX-SRV named[6065]: loading configuration: file not found
Sep 16 21:11:35 LINUX-SRV named[6065]: exiting (due to fatal error)
During starting, the daemon destroy “/var/lib/named/etc/named.keys”
For the moment, I want just to start named and dhcpd.
Thank you for your help

By: named fail to start (jail) and dhcpd have very strange behaviour .

named fail to start (jail) and dhcpd have very strange behaviour . — Thu, 16 Sep 2010 21:38:58 +0000

[…] For the moment, I want just to start named and dhcpd. I am following this howto : Tutorial : Samba PDC + OpenLDAP on openSUSE 11.1 Thank you for your help. Reply With Quote + Reply to Thread « […]

By: Reason

Reason — Sun, 21 Mar 2010 03:43:02 +0000

Correction: I forget to copy named.keys into the /var/lib/dhcp/etc folder. It can run chrooted without setting DHCPD_RUN_CHROOTED to no. My mistake.

By: Reason

Reason — Sat, 20 Mar 2010 04:19:20 +0000

I just figured it out. dhcpd can not run chrooted. You have to change the value DHCPD_RUN_CHROOTED=”yes” in /etc/sysconfig/dhcpd to DHCPD_RUN_CHROOTED=”no”. This allowed it to run and start.

By: Reason

Reason — Fri, 19 Mar 2010 03:00:07 +0000

Ok. That worked! But not dhcpd can not find named.keys. I have confirmed that it is in both directories. The dhcpd.conf has /etc/named.keys. Here is my error:
Can’t open /etc/named.keys: No such file or directory

By: Reason

Reason — Fri, 19 Mar 2010 03:00:07 +0000

By: Vavai

Vavai — Thu, 18 Mar 2010 23:18:05 +0000

No,
Just keep named.conf as is as shown above. Please keep in mind that you looks like use chroot jail for DNS and an chroot jail, /var/lib/named/etc will act as /etc.
Just copy your named.keys on /var/lib/named/etc and then start named service.

By: Reason

Reason — Thu, 18 Mar 2010 20:16:11 +0000

And does this mean that you must also update /etc/named.conf to reflect /var/lib/named/etc because the config file *is* set to that very folder that named.keys is located in.