Named Frage [GELÖST]

[Fiesi]

Ich bin sicher, dass die Ursache des Problems bei KeyHelp liegt
evtl. ja? Weil ich direkt selber nichts dran veränder hab


Server-Betriebssystem + Version
Debian 12


Eingesetzte Server-Virtualisierung-Technologie
Keine


KeyHelp-Version + Build-Nummer
22.1 - Build 3285


Problembeschreibung / Fehlermeldungen
Bind/Named startet nicht mit Fehlermeldungen


Erwartetes Ergebnis
Named soll als Primary DNS Laufen


Tatsächliches Ergebnis
Er verweigert sein Dienst


Zusätzliche Informationen
Mahlzeit,

Ich hatte mal versucht mein Named als Primary einzurichten.
Dabei ist mir aufgefallen das dieser gar nicht Läuft..

ein named-checkconf brachte mir dieses ergebis:

Code: Select all

named-checkconf
/etc/bind/named.conf.local:11: unknown option 'zone'
/etc/bind/named.conf.default-zones:2: unknown option 'zone'
/etc/bind/named.conf.default-zones:10: unknown option 'zone'
/etc/bind/named.conf.default-zones:15: unknown option 'zone'
/etc/bind/named.conf.default-zones:20: unknown option 'zone'
/etc/bind/named.conf.default-zones:25: unknown option 'zone'
/etc/bind/named.conf.keyhelp:7: unknown option 'zone'
/etc/bind/named.conf.keyhelp:11: unknown option 'zone'
/etc/bind/named.conf.keyhelp:15: unknown option 'zone'
/etc/bind/named.conf.keyhelp:19: unknown option 'zone'
/etc/bind/named.conf.keyhelp:23: unknown option 'zone'
/etc/bind/named.conf.keyhelp:27: unknown option 'zone'
/etc/bind/named.conf.keyhelp:31: unknown option 'zone'
/etc/bind/named.conf.keyhelp:35: unknown option 'zone'
/etc/bind/named.conf.keyhelp:39: unknown option 'zone'
/etc/bind/named.conf.keyhelp:43: unknown option 'zone'
/etc/bind/named.conf.keyhelp:47: unknown option 'zone'
/etc/bind/named.conf.keyhelp:51: unknown option 'zone'
/etc/bind/named.conf.keyhelp:55: unknown option 'zone'
/etc/bind/named.conf:15: '}' expected near end of file

Könnte der Fehler evtl. passiert sein, als ich von Deb11 auf Deb12 geswitcht hab ? Bez. hatte sich da was verändert?

[Tobi]

Guck einfach mal in zentrale Syslog des Servers.

Textbasierte Logfiles sind ja sowas aus den 90gern.

[Fiesi]

Guck einfach mal in zentrale Syslog des Servers.

Textbasierte Logfiles sind ja sowas aus den 90gern.

Wenn dort mal was stehen würde xD

Code: Select all

 journalctl -xeu named.service
░░ The unit named.service has entered the 'failed' state with result 'exit-code'.
Jul 24 09:51:29 host.xxx.net systemd[1]: Failed to start named.service - BIND Domain Name Server.
░░ Subject: A start job for unit named.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit named.service has finished with a failure.
░░
░░ The job identifier is 33641 and the job result is failed.
Jul 24 09:51:29 host.xxx.net systemd[1]: named.service: Scheduled restart job, restart counter is at 5.
░░ Subject: Automatic restarting of a unit has been scheduled
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ Automatic restarting of the unit named.service has been scheduled, as the result for
░░ the configured Restart= setting for the unit.
Jul 24 09:51:29 host.xxx.net systemd[1]: Stopped named.service - BIND Domain Name Server.
░░ Subject: A stop job for unit named.service has finished
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A stop job for unit named.service has finished.
░░
░░ The job identifier is 33763 and the job result is done.
Jul 24 09:51:29 host.xxx.net systemd[1]: named.service: Start request repeated too quickly.
Jul 24 09:51:29 host.xxx.net systemd[1]: named.service: Failed with result 'exit-code'.
░░ Subject: Unit failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ The unit named.service has entered the 'failed' state with result 'exit-code'.
Jul 24 09:51:29 host.xxx.net systemd[1]: Failed to start named.service - BIND Domain Name Server.
░░ Subject: A start job for unit named.service has failed
░░ Defined-By: systemd
░░ Support: https://www.debian.org/support
░░
░░ A start job for unit named.service has finished with a failure.
░░
░░ The job identifier is 33763 and the job result is failed.

Syslog hab ich auch nur das drin:

Code: Select all

Jul 24 10:19:21 host named[337642]: starting BIND 9.18.24-1-Debian (Extended Support Version) <id:>
Jul 24 10:19:21 host named[337642]: running on Linux x86_64 5.17.0-2-amd64 #1 SMP PREEMPT Debian 5.17.6-1 (2022-05-14)
Jul 24 10:19:21 host named[337642]: built with  '--build=x86_64-linux-gnu' '--prefix=/usr' '--includedir=${prefix}/include' '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' '--sysconfdir=/etc' '--localstatedir=/var' '--disable-option-checking' '--disable-silent-rules' '--libdir=${prefix}/lib/x86_64-linux-gnu' '--runstatedir=/run' '--disable-maintainer-mode' '--disable-dependency-tracking' '--libdir=/usr/lib/x86_64-linux-gnu' '--sysconfdir=/etc/bind' '--with-python=python3' '--localstatedir=/' '--enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' '--disable-static' '--with-gost=no' '--with-openssl=/usr' '--with-gssapi=yes' '--with-libidn2' '--with-json-c' '--with-lmdb=/usr' '--with-gnu-ld' '--with-maxminddb' '--with-atf=no' '--enable-ipv6' '--enable-rrl' '--enable-filter-aaaa' '--disable-native-pkcs11' '--enable-dnstap' 'build_alias=x86_64-linux-gnu' 'CFLAGS=-g -O2 -ffile-prefix-map=/build/reproducible-path/bind9-9.18.24=. -fstack-protector-strong -Wformat -Werror=format-security -fno-strict-aliasing -fno-delete-null-pointer-checks -DNO_VERSION_DATE -DDIG_SIGCHASE' 'LDFLAGS=-Wl,-z,relro -Wl,-z,now' 'CPPFLAGS=-Wdate-time -D_FORTIFY_SOURCE=2'
Jul 24 10:19:21 host named[337642]: running as: named
Jul 24 10:19:21 host named[337642]: compiled by GCC 12.2.0
Jul 24 10:19:21 host named[337642]: compiled with OpenSSL version: OpenSSL 3.0.11 19 Sep 2023
Jul 24 10:19:21 host named[337642]: linked to OpenSSL version: OpenSSL 3.0.13 30 Jan 2024
Jul 24 10:19:21 host named[337642]: compiled with libuv version: 1.44.2
Jul 24 10:19:21 host named[337642]: linked to libuv version: 1.44.2
Jul 24 10:19:21 host named[337642]: compiled with libxml2 version: 2.9.14
Jul 24 10:19:21 host named[337642]: linked to libxml2 version: 20914
Jul 24 10:19:21 host named[337642]: compiled with json-c version: 0.16
Jul 24 10:19:21 host named[337642]: linked to json-c version: 0.16
Jul 24 10:19:21 host named[337642]: compiled with zlib version: 1.2.13
Jul 24 10:19:21 host named[337642]: linked to zlib version: 1.2.13
Jul 24 10:19:21 host named[337642]: ----------------------------------------------------
Jul 24 10:19:21 host named[337642]: BIND 9 is maintained by Internet Systems Consortium,
Jul 24 10:19:21 host named[337642]: Inc. (ISC), a non-profit 501(c)(3) public-benefit 
Jul 24 10:19:21 host named[337642]: corporation.  Support and training for BIND 9 are 
Jul 24 10:19:21 host named[337642]: available at https://www.isc.org/support
Jul 24 10:19:21 host named[337642]: ----------------------------------------------------
Jul 24 10:19:21 host named[337642]: found 8 CPUs, using 8 worker threads
Jul 24 10:19:21 host named[337642]: using 8 UDP listeners per interface
Jul 24 10:19:21 host named[337642]: DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
Jul 24 10:19:21 host named[337642]: DS algorithms: SHA-1 SHA-256 SHA-384
Jul 24 10:19:21 host named[337642]: HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
Jul 24 10:19:21 host named[337642]: TKEY mode 2 support (Diffie-Hellman): yes
Jul 24 10:19:21 host named[337642]: TKEY mode 3 support (GSS-API): yes
Jul 24 10:19:21 host named[337642]: loading configuration from '/etc/bind/named.conf'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.local:11: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.default-zones:2: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.default-zones:10: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.default-zones:15: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.default-zones:20: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.default-zones:25: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:7: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:11: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:15: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:19: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:23: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:27: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:31: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:35: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:39: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:43: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:47: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:51: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf.keyhelp:55: unknown option 'zone'
Jul 24 10:19:21 host named[337642]: /etc/bind/named.conf:15: '}' expected near end of file
Jul 24 10:19:21 host named[337642]: loading configuration: unexpected token
Jul 24 10:19:21 host named[337642]: exiting (due to fatal error)

Edit:

auch wenn ich die Datein mit der keyhelp toolbox neu Generieren lassen will:

Code: Select all

[PID-340390] [24-Jul-2024 10:33:26] INFO | forced to run "update.php"
[PID-340390] [24-Jul-2024 10:33:26] INFO | jobs to run: update.php
[PID-340390] [24-Jul-2024 10:33:26] INFO | >>> trying to run "update"
[PID-340390] [24-Jul-2024 10:33:26] INFO | lock "update" acquired
[PID-340390] [24-Jul-2024 10:33:26] INFO | processing the job ...
[24-Jul-2024 10:33:26] INFO | load tasks... 3 found
[24-Jul-2024 10:33:26] INFO | task type IDs: update_bind_server_configs, update_phpfpm_server_configs, update_apache_server_configs
[24-Jul-2024 10:33:26] INFO | Task: update_bind_server_configs
[24-Jul-2024 10:33:26] INFO | Params: - no params -
[24-Jul-2024 10:33:26] INFO | updating keyhelp_domain.conf
[24-Jul-2024 10:33:27] ERROR | Bind: syntax error - failed to reload bind
/etc/bind/named.conf.local:11: unknown option 'zone'
/etc/bind/named.conf.local:16: unknown option 'logging'
/etc/bind/named.conf.default-zones:2: unknown option 'zone'
/etc/bind/named.conf.default-zones:10: unknown option 'zone'
/etc/bind/named.conf.default-zones:15: unknown option 'zone'
/etc/bind/named.conf.default-zones:20: unknown option 'zone'
/etc/bind/named.conf.default-zones:25: unknown option 'zone'
/etc/bind/named.conf.keyhelp:7: unknown option 'zone'
/etc/bind/named.conf.keyhelp:11: unknown option 'zone'
/etc/bind/named.conf.keyhelp:15: unknown option 'zone'
/etc/bind/named.conf.keyhelp:19: unknown option 'zone'
/etc/bind/named.conf.keyhelp:23: unknown option 'zone'
/etc/bind/named.conf.keyhelp:27: unknown option 'zone'
/etc/bind/named.conf.keyhelp:31: unknown option 'zone'
/etc/bind/named.conf.keyhelp:35: unknown option 'zone'
/etc/bind/named.conf.keyhelp:39: unknown option 'zone'
/etc/bind/named.conf.keyhelp:43: unknown option 'zone'
/etc/bind/named.conf.keyhelp:47: unknown option 'zone'
/etc/bind/named.conf.keyhelp:51: unknown option 'zone'
/etc/bind/named.conf.keyhelp:55: unknown option 'zone'
/etc/bind/named.conf:14: '}' expected near end of file
[24-Jul-2024 10:33:27] INFO | Task: update_phpfpm_server_configs
[24-Jul-2024 10:33:27] INFO | Params: - no params -
[24-Jul-2024 10:33:27] INFO | updating php-fpm keyhelp.conf
[24-Jul-2024 10:33:27] INFO | Task: update_apache_server_configs
[24-Jul-2024 10:33:27] INFO | Params: - no params -
[24-Jul-2024 10:33:27] INFO | Update "/etc/apache2/keyhelp/keyhelp.conf"
[24-Jul-2024 10:33:27] INFO | Update "/etc/apache2/keyhelp/autoconfig.conf"
[24-Jul-2024 10:33:27] INFO | Update "/etc/apache2/keyhelp/webmail.conf"
[24-Jul-2024 10:33:27] INFO | Update "/etc/apache2/ports.conf"
[PID-340390] [24-Jul-2024 10:33:27] INFO | <<< job done, releasing lock "update"

[Florian]

Hallo,

die Standard named.conf sieht so aus:

Code: Select all

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the 
// structure of BIND configuration files in Debian, *BEFORE* you customize 
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";

// Include Keyhelp Domains
include "/etc/bind/named.conf.keyhelp";

Die Ausgabe

Code: Select all

 /etc/bind/named.conf:15: '}' expected near end of file

zeigt, dass bei dir wohl noch mehr drin steht.

[Fiesi]

// This is the primary configuration file for the BIND DNS server named.
//
// Please read /usr/share/doc/bind9/README.Debian.gz for information on the
// structure of BIND configuration files in Debian, *BEFORE* you customize
// this configuration file.
//
// If you are just adding zones, please do that in /etc/bind/named.conf.local

include "/etc/bind/named.conf.options";
include "/etc/bind/named.conf.local";
include "/etc/bind/named.conf.default-zones";

// Include Keyhelp Domains
include "/etc/bind/named.conf.keyhelp";

so sieht meine aus... nie was geändert...

[Florian]

Hi,

dann schau mal in die /etc/bind/named.conf.options ob du da eine Klammer vergessen hast.

Wenn du mal eine Repilkation einrichten wolltest musst du da ja irgendwo was geändert haben.

[Fiesi]

Hi,

dann schau mal in die /etc/bind/named.conf.options ob du da eine Klammer vergessen hast.

Wenn du mal eine Repilkation einrichten wolltest musst du da ja irgendwo was geändert haben.

hat tatsächlich eine klammer gefehlt...
wundert mich aber, da ich an dieser Datei noch gar nicht dran war.
wollte den Bind erstmal nur starten - weil ich gesehen hatte das er "aus" ist...

Klammer eingefügt...
auch die Toolbox zeigt mir beim neu generieren keine fehler mehr an... aber bind lässt sich immer noch nicht starten..

Edit:
oki - er läuft wieder
Danke nochmal ^^