>>> doing the above testing I was running named as root, in order to
>>> generate a core dump. When I'm now testing with named running as
>>> user bind (and then dropping privileges after startup), it seems to
>>> be unable to rebind to port 853 after an "rndc reconfigure". This
>>> is probably expected since 853 is a "privileged" port.
>>> 
>>> The error messages I'm getting after an "rndc reconfig" are:
>>> 
>>> Jan 24 12:41:25 dns named[6281]: listening on IPv4 interface lo0, 
>>> 127.0.0.1#853
>>> Jan 24 12:41:25 dns named[6281]: creating TLS socket: permission denied
>>> Jan 24 12:41:25 dns named[6281]: creating IPv4 interface lo0 failed; 
>>> interface ignored
>>> Jan 24 12:41:25 dns named[6281]: no longer listening on 193.75.110.2#853
>>> Jan 24 12:41:25 dns named[6281]: listening on IPv4 interface ixl1.15, 
>>> 193.75.110.2#853
>>> Jan 24 12:41:25 dns named[6281]: creating TLS socket: permission denied
>>> Jan 24 12:41:25 dns named[6281]: creating IPv4 interface ixl1.15 failed; 
>>> interface ignored
>>> 
>>> and the named process no longer listens on TCP port 853.
>>> 
>>> Also tried this on 9.17.22, and the same problem occurs.
>> 
>> Now also tried on 9.18.0, and the same problem occurs.
> 
> Please open an issue at https://gitlab.isc.org/isc-projects/bind9/-/issues 
> for this, so the
> issue is properly tracked.

https://gitlab.isc.org/isc-projects/bind9/-/issues/3122

Steinar Haug, Nethelp consulting, sth...@nethelp.no
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to