> On 31. 1. 2022, at 16:30, sth...@nethelp.no wrote:
> 
>> Followup: Unfortunately, this didn't solve the whole problem. While
>> doing the above testing I was running named as root, in order to
>> generate a core dump. When I'm now testing with named running as
>> user bind (and then dropping privileges after startup), it seems to
>> be unable to rebind to port 853 after an "rndc reconfigure". This
>> is probably expected since 853 is a "privileged" port.
>> 
>> The error messages I'm getting after an "rndc reconfig" are:
>> 
>> Jan 24 12:41:25 dns named[6281]: listening on IPv4 interface lo0, 
>> 127.0.0.1#853
>> Jan 24 12:41:25 dns named[6281]: creating TLS socket: permission denied
>> Jan 24 12:41:25 dns named[6281]: creating IPv4 interface lo0 failed; 
>> interface ignored
>> Jan 24 12:41:25 dns named[6281]: no longer listening on 193.75.110.2#853
>> Jan 24 12:41:25 dns named[6281]: listening on IPv4 interface ixl1.15, 
>> 193.75.110.2#853
>> Jan 24 12:41:25 dns named[6281]: creating TLS socket: permission denied
>> Jan 24 12:41:25 dns named[6281]: creating IPv4 interface ixl1.15 failed; 
>> interface ignored
>> 
>> and the named process no longer listens on TCP port 853.
>> 
>> Also tried this on 9.17.22, and the same problem occurs.
> 
> Now also tried on 9.18.0, and the same problem occurs.

Please open an issue at https://gitlab.isc.org/isc-projects/bind9/-/issues for 
this, so the
issue is properly tracked.

Thanks,
--
Ondřej Surý (He/Him)
ond...@isc.org

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users

Reply via email to