Re: BIND 9.14.0: unable to set effective uid to 0: Operation not permitted

2019-04-02 Thread Gasoo
Hello Anand / Tony On 02/04/2019 20.25, Anand Buddhdev wrote: On 02/04/2019 17:12, Tony Finch wrote: Hi Tony, I have not noticed these errors on my toy server. I had a look at the code and I thought Stephan's explanation was correct. My guess is that he is starting named without root

Re: BIND 9.14.0: unable to set effective uid to 0: Operation not permitted

2019-04-02 Thread Anand Buddhdev
On 02/04/2019 17:12, Tony Finch wrote: Hi Tony, > I have not noticed these errors on my toy server. I had a look at the code > and I thought Stephan's explanation was correct. My guess is that he is > starting named without root privileges, so it is unable to switch back and > forth between

Re: allow-update in global options (was Re: bind and certbot with dns-challenge)

2019-04-02 Thread Alan Clegg
On 4/2/19 6:00 PM, Sam Wilson wrote: >> During a cleanup of other code (specifically named-checkconf), code was >> changed that enforced what was believed to have been the default >> previously: specifically, allow-update was only allowed in zone stanzas. > > Can I ask who believed it was

Re: allow-update in global options (was Re: bind and certbot with dns-challenge)

2019-04-02 Thread Sam Wilson
On 2019-03-17 20:37:56 +, Alan Clegg said: On 3/17/19 2:51 PM, Alan Clegg wrote: On 3/17/19 7:13 AM, Stephan von Krawczynski wrote: Hello all, I am using "BIND 9.13.7 (Development Release) " on arch linux. Up to few days ago everything was fine using "certbot renew". I had "allow-update"

Re: BIND 9.14.0: unable to set effective uid to 0: Operation not permitted

2019-04-02 Thread Tony Finch
Anand Buddhdev wrote: > > I'm not sure why it's doing that, but I think I know the reason for this > error message. The release notes of 9.14.0 say that on Linux, BIND uses > libcap to set certain privileges. However, if the /usr/sbin/named binary > is not marked as being able to use privileges,

Re: BIND 9.14.0: unable to set effective uid to 0: Operation not permitted

2019-04-02 Thread Anand Buddhdev
On 28/03/2019 14:40, Gasoo wrote: Hi Stephan, > Mar 25 16:41:56 dnsserver named[1348]: unable to set effective uid to 0: > Operation not permitted [snip] > Why does named want to set the uid of itself back to 0? > Has anyone seen this as well? I'm not sure why it's doing that, but I think I