{SPAM?} Re: [Pdns-users] chroot environtment - how to fix?

Michiel van Es info at pcintelligence.nl
Wed Jan 21 15:48:44 UTC 2004


Hi bert , what can I say:

[root at server pdns]# service pdns start && tail -f /var/log/messages
Starting PowerDNS authorative nameserver: already running
Jan 21 15:46:45 server pdns[28456]: Guardian is launching an instance
Jan 21 15:46:45 server pdns[28456]: UDP server bound to 0.0.0.0:53
Jan 21 15:46:45 server pdns[28456]: TCP server bound to 0.0.0.0:53
Jan 21 15:47:05 server pdns[28456]: Chrooted to '/var/run'
Jan 21 15:47:05 server pdns[28456]: Set effective group id to 99
Jan 21 15:47:05 server pdns[28456]: Set effective user id to 99
Jan 21 15:47:05 server pdns[28456]: DNS Proxy launched, local port 
26003, remote 127.0.0.1:1053
Jan 21 15:47:05 server pdns[28456]: Launched webserver on 192.168.0.7:8081
Jan 21 15:47:05 server pdns[28456]: Master/slave communicator launching
Jan 21 15:47:05 server pdns[28456]: Creating backend connection for TCP
Jan 21 15:48:05 server pdns[28456]: 1 domain for which we are master 
needs notifications
Jan 21 15:48:06 server pdns[28456]: Received NOTIFY for 
pcintelligence.nl from 82.161.23.36 but slave support is disabled in the 
configuration
Jan 21 15:48:06 server pdns[28456]: AXFR of domain 'pcintelligence.nl' 
initiated by 80.79.192.32
Jan 21 15:48:06 server pdns[28456]: AXFR of domain 'pcintelligence.nl' 
to 80.79.192.32 finished

:)

Thanks!

Michiel





bert hubert schreef op 21-1-2004 16:18 het volgende:

>Michiel, can you try this patch, it may help:
>
>(cd your.pdns.source/pdns ; patch < this.email.message ; make etc etc)
>
>Index: common_startup.cc
>===================================================================
>RCS file: /var/cvsroot/pdns/pdns/common_startup.cc,v
>retrieving revision 1.19
>diff -u -B -b -r1.19 common_startup.cc
>--- common_startup.cc	17 Jan 2004 13:18:22 -0000	1.19
>+++ common_startup.cc	21 Jan 2004 15:15:17 -0000
>@@ -237,6 +237,7 @@
>    if(!arg()["setuid"].empty())        
>      newuid=Utility::makeUidNumeric(arg()["setuid"]); 
> #ifndef WIN32
>+   gethostbyname("ds9a.nl");
>    if(!arg()["chroot"].empty()) {  
>      if(chroot(arg()["chroot"].c_str())<0) {
>        L<<Logger::Error<<"Unable to chroot to '"+arg()["chroot"]+"': "<<strerror(errno)<<", exiting"<<endl; 
>
>On Wed, Jan 21, 2004 at 04:11:23PM +0100, Michiel van Es wrote:
>  
>
>>Norbert Sendetzky schreef op 21-1-2004 15:45 het volgende:
>>
>>    
>>
>>>-----BEGIN PGP SIGNED MESSAGE-----
>>>Hash: SHA1
>>>
>>>On Wednesday 21 January 2004 15:41, Michiel van Es wrote:
>>>
>>>
>>>      
>>>
>>>>When I enable the chrooted environment the default is ./
>>>>What is ./ for directory? Is that the /etc/powerdns folder?
>>>>And I got some problems restarting Pdns..I heard that you have to
>>>>copy the /etc/resolv.conf file to the chrooted directory.
>>>>Does anyone have some experience with the newest pdns version
>>>>running in a chrooted environment?
>>>>  
>>>>
>>>>        
>>>>
>>>Look at last years mailing list archive (4. quarter I think). There's 
>>>a long thread about chroot'ed environments.
>>>
>>>IIRC, you need /etc/resolv.conf, /lib/*nss* and possibly a few other 
>>>files in /var/run/
>>>
>>>
>>>Norbert
>>>
>>>-----BEGIN PGP SIGNATURE-----
>>>Version: GnuPG v1.0.6 (GNU/Linux)
>>>Comment: For info see http://www.gnupg.org
>>>
>>>iEYEARECAAYFAkAOkHwACgkQxMLs5v5/7eByhQCfbxnpIZvvqLIJhd4cL4LabQkG
>>>bvMAnibq+P0jv7z5TQoePPpq2HJ0ih/t
>>>=tivO
>>>-----END PGP SIGNATURE-----
>>>
>>>
>>>
>>>
>>>      
>>>
>>Norbert thanks,
>>but It still does not work for me.
>>The only thing I see in the mailinglist, is to have a chroot directory 
>>(/var/chroot) and make an /etc and /lib directory in that directory.
>>Than copy the /etc/hosts,/etc/resolv.conf and /etc/nsswitch.conf to the 
>>/var/chroot/etc directory.
>>The libnss* copied to the /var/chroot/lib directory, restarted pdns but 
>>still no luck:
>>
>>Jan 21 15:08:00 server pdns[27158]: Unable to queue notification of 
>>domain 'pcintelligence.nl': nameservers do not resolve!
>>
>>Isn't there a specif clue what to be done or to be copied?
>>
>>Thanks in advance.
>>
>>regards,
>>
>>Michiel
>>_______________________________________________
>>Pdns-users mailing list
>>Pdns-users at mailman.powerdns.com
>>http://mailman.powerdns.com/mailman/listinfo/pdns-users
>>    
>>
>
>  
>


More information about the Pdns-users mailing list