Re: Questions on bind-chroot

2016-06-14 Thread /dev/rob0
On Mon, Jun 13, 2016 at 04:04:06PM +0100, Tony Finch wrote:
> Harshith Mulky  wrote:
> 
> > Is it necessary for named.conf in the chroot path and /etc path 
> > to be same
> 
> If they aren't the same, at some point in the future you or your 
> colleagues are going to get very confused about which one is the 
> right one.
> 
> > I have 2 different named.conf in both the paths and when I am 
> > running the, service named restart, I see the named service 
> > starting from the chroot path. Is that correct?
> 
> There isn't much standardization of BIND init scripts. Some of them 
> try to keep in-chroot and out-of-chroot configuration in sync, some 
> don't, maybe depending on how the script is configured. So I can't 
> give you a direct answer; you should read your init script 
> carefully.

Also the OP should consult the distributor's documentation for their 
BIND configuration.  BIND from upstream comes unconfigured, that is, 
without anything like "bind-chroot".

In addition, as suggested upthread, it's not possible to answer any
questions which should have gone to the distributor if we don't know 
the distro & version.
-- 
  http://rob0.nodns4.us/
  Offlist GMX mail is seen only if "/dev/rob0" is in the Subject:
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RE: Questions on bind-chroot

2016-06-13 Thread Lightner, Jeffrey
Is this RHEL5?  RHEL6?  Something else?

On RHEL5 we had bind-chroot running and did all our edits directly in 
/var/named/chroot/etc for named.cocnf and /var/named/chroot/var/named for zone 
files.

In RHEL7 (which uses systemctl rather than service) they setup special mounting 
in the named-chroot systemd file so one has to be sure to restart that rather 
than just the named system file as the named by itself ignores your chroot 
setup.In this RHEL7 setup you edit the named.conf in /etc itself (i.e. the 
non-chroot "real" path) and the "systemctl restart named-chroot" puts the mount 
of that file into /var/named/chroot/etc.


-Original Message-
From: bind-users-boun...@lists.isc.org 
[mailto:bind-users-boun...@lists.isc.org] On Behalf Of Tony Finch
Sent: Monday, June 13, 2016 11:04 AM
To: Harshith Mulky
Cc: bind-users@lists.isc.org
Subject: Re: Questions on bind-chroot

Harshith Mulky <harshith.mu...@outlook.com> wrote:

> Is it necessary for named.conf in the chroot path and /etc path to be 
> same

If they aren't the same, at some point in the future you or your colleagues are 
going to get very confused about which one is the right one.

> I have 2 different named.conf in both the paths and when I am running 
> the, service named restart, I see the named service starting from the 
> chroot path. Is that correct?

There isn't much standardization of BIND init scripts. Some of them try to keep 
in-chroot and out-of-chroot configuration in sync, some don't, maybe depending 
on how the script is configured. So I can't give you a direct answer; you 
should read your init script carefully.

Tony.
--
f.anthony.n.finch  <d...@dotat.at>  http://dotat.at/  -  I xn--zr8h punycode 
Irish Sea: Cyclonic 3 or 4, increasing 5 at times. Smooth or slight, 
occasionally moderate in far south. Thundery showers, fog patches. Moderate or 
good, occasionally very poor.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: Questions on bind-chroot

2016-06-13 Thread Tony Finch
Harshith Mulky  wrote:

> Is it necessary for named.conf in the chroot path and /etc path to be same

If they aren't the same, at some point in the future you or your
colleagues are going to get very confused about which one is the right
one.

> I have 2 different named.conf in both the paths and when I am running
> the, service named restart, I see the named service starting from the
> chroot path. Is that correct?

There isn't much standardization of BIND init scripts. Some of them try to
keep in-chroot and out-of-chroot configuration in sync, some don't, maybe
depending on how the script is configured. So I can't give you a direct
answer; you should read your init script carefully.

Tony.
-- 
f.anthony.n.finch    http://dotat.at/  -  I xn--zr8h punycode
Irish Sea: Cyclonic 3 or 4, increasing 5 at times. Smooth or slight,
occasionally moderate in far south. Thundery showers, fog patches. Moderate or
good, occasionally very poor.
___
Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe 
from this list

bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users