Re: named fails to start with bind-9.18.0

2024-05-20 Thread Mark Andrews
As Ondrej said.  Upgrade.  You compiled BIND 9.18.0.  That is 27 release behind 
current.  Unless you are doing archaeological investigations of old code you 
shouldn’t be trying to use old code like that.  Running newer code means that 
you can avoid all the bugs that have been fixed in the meantime.

Named logs what it finds wrong to syslog by default.  Read your logs.  You can 
also run named in the foreground and send the logs to stderr. 

named -g -c /etc/named.conf’

Due to Linux’s co-operating processes as its threading model, named can’t just 
daemonize once it has finished its startup phase.  It has to daemonize then 
finish its startup.  The parent process waits for the startup to complete and 
then exits with an appropriate error code.  Somewhere in that startup something 
has failed. 

Mark

> On 21 May 2024, at 14:10, avijeet gupta  wrote:
> 
> My Apologies. I was just trying to show the snippet of bind library code 
> where named was failing.
> 
> I am trying to run named after compiling the bind library. The command I use 
> to run named is as follows:
> 
> /bin/named -c /etc/named.conf
> 
> It appears that it is failing when it tries to daemonize named. what could be 
> causing it ?
> 
> named will eventually run as daemon in my dns server.
> 
> Please let me know if more information is needed.
> 
> Thanks,
> Avi
> 
> 
> 
> On Mon, May 20, 2024 at 10:47 AM Ondřej Surý  wrote:
>> Can someone please help what could be the issue here?
> 
> 
> Not really. First start by using the latest 9.18 version and not something 
> that’s two years old and then you need to provide more information than a 
> screenshot of random code snippet. If you want free help you need to provide 
> information about what you are actually doing.
> 
> This old essay is still true: 
> https://www.chiark.greenend.org.uk/~sgtatham/bugs.html
> 
> Ondrej
> --
> Ondřej Surý — ISC (He/Him)
> 
> My working hours and your working hours may be different. Please do not feel 
> obligated to reply outside your normal working hours.
> 
>> On 20. 5. 2024, at 17:55, avijeet gupta  wrote:
>> 
>> Hi All,
>> 
>> I compiled bind-9.18.0 successfully but when I try to run named via 
>> configuration file, named exits with return code 1.
>> 
>> The below code in bin/named/os.c is where it is failing.
>> 
>> 
>> 
>> 
>> When i run named with gdb , i see that it is exiting in the above code.
>> 
>> Can someone please help what could be the issue here?
>> 
>> Thanks,
>> Avij
>> 
>> -- 
>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
>> this list
>> 
>> ISC funds the development of this software with paid support subscriptions. 
>> Contact us at https://www.isc.org/contact/ for more information.
>> 
>> 
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Mark Andrews, ISC
1 Seymour St., Dundas Valley, NSW 2117, Australia
PHONE: +61 2 9871 4742  INTERNET: ma...@isc.org

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: named fails to start with bind-9.18.0

2024-05-20 Thread avijeet gupta
My Apologies. I was just trying to show the snippet of bind library code
where named was failing.

I am trying to run named after compiling the bind library. The command I
use to run named is as follows:

/bin/named -c /etc/named.conf

It appears that it is failing when it tries to daemonize named. what could
be causing it ?

named will eventually run as daemon in my dns server.

Please let me know if more information is needed.

Thanks,
Avi



On Mon, May 20, 2024 at 10:47 AM Ondřej Surý  wrote:

> Can someone please help what could be the issue here?
>
>
> Not really. First start by using the latest 9.18 version and not something
> that’s two years old and then you need to provide more information than a
> screenshot of random code snippet. If you want free help you need to
> provide information about what you are actually doing.
>
> This old essay is still true:
> https://www.chiark.greenend.org.uk/~sgtatham/bugs.html
>
> Ondrej
> --
> Ondřej Surý — ISC (He/Him)
>
> My working hours and your working hours may be different. Please do not
> feel obligated to reply outside your normal working hours.
>
> On 20. 5. 2024, at 17:55, avijeet gupta  wrote:
>
> 
> Hi All,
>
> I compiled bind-9.18.0 successfully but when I try to run named via
> configuration file, named exits with return code 1.
>
> The below code in bin/named/os.c is where it is failing.
>
> 
>
>
> When i run named with gdb , i see that it is exiting in the above code.
>
> Can someone please help what could be the issue here?
>
> Thanks,
> Avij
>
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe
> from this list
>
> ISC funds the development of this software with paid support
> subscriptions. Contact us at https://www.isc.org/contact/ for more
> information.
>
>
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
>
>
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: RFC8482: Implementation through HINFO record

2024-05-20 Thread Mark Andrews
And named already handles ANY being used as an reflection amplifier. 

This was written for servers using databases where getting the ANY response is 
actually hard. Cloudflare was using a response model that most thought was not 
really correct but wasn’t broken enough to say “Don’t do that”. If their 
customers where happy with this behaviour then ok.  This RFC was written to 
allow them to continue doing what they where doing without having to fight that 
they where not RFC compliant. It was not written to say this is how you should 
respond to ANY.  It also requires online signing for DNSSEC or adding a HINFO 
record for every name in your zone when offline signing. 

Mark
-- 
Mark Andrews

> On 21 May 2024, at 00:31, Ondřej Surý  wrote:
> 
> I would suggest you to create a feature request in our GitLab. This way it 
> won't get lost
> in the tides of time.
> 
> Personally, I actually quite like the idea, but it would have to be an option 
> to turn off and on,
> so it's not going to save us from having a code that supports ANY anyway.
> 
> Ondřej
> --
> Ondřej Surý (He/Him)
> ond...@isc.org
> 
> My working hours and your working hours may be different. Please do not feel 
> obligated to reply outside your normal working hours.
> 
>> On 20. 5. 2024, at 16:03, Amaury Van Pevenaeyge  
>> wrote:
>> 
>> Hello everyone,
>> 
>> How is it possible to set up a resource record of type HINFO so that it is 
>> returned on every ANY request without all the other records in the zone? I'm 
>> looking to implement RFC8482 as Cloudflare can do in the following article: 
>> https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any
>> 
>> Thanks in advance for your help.
>> -- 
>> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
>> this list
>> 
>> ISC funds the development of this software with paid support subscriptions. 
>> Contact us at https://www.isc.org/contact/ for more information.
>> 
>> 
>> bind-users mailing list
>> bind-users@lists.isc.org
>> https://lists.isc.org/mailman/listinfo/bind-users
> 
> 
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users

-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: named fails to start with bind-9.18.0

2024-05-20 Thread Ondřej Surý
> Can someone please help what could be the issue here?

Not really. First start by using the latest 9.18 version and not something 
that’s two years old and then you need to provide more information than a 
screenshot of random code snippet. If you want free help you need to provide 
information about what you are actually doing.

This old essay is still true: 
https://www.chiark.greenend.org.uk/~sgtatham/bugs.html

Ondrej
--
Ondřej Surý — ISC (He/Him)

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 20. 5. 2024, at 17:55, avijeet gupta  wrote:
> 
> 
> Hi All,
> 
> I compiled bind-9.18.0 successfully but when I try to run named via 
> configuration file, named exits with return code 1.
> 
> The below code in bin/named/os.c is where it is failing.
> 
> 
> 
> 
> When i run named with gdb , i see that it is exiting in the above code.
> 
> Can someone please help what could be the issue here?
> 
> Thanks,
> Avij
> 
> --
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


named fails to start with bind-9.18.0

2024-05-20 Thread avijeet gupta
Hi All,

I compiled bind-9.18.0 successfully but when I try to run named via
configuration file, named exits with return code 1.

The below code in bin/named/os.c is where it is failing.

[image: image.png]

When i run named with gdb , i see that it is exiting in the above code.

Can someone please help what could be the issue here?

Thanks,
Avij
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: RFC8482: Implementation through HINFO record

2024-05-20 Thread Ondřej Surý
I would suggest you to create a feature request in our GitLab. This way it 
won't get lost
in the tides of time.

Personally, I actually quite like the idea, but it would have to be an option 
to turn off and on,
so it's not going to save us from having a code that supports ANY anyway.

Ondřej
--
Ondřej Surý (He/Him)
ond...@isc.org

My working hours and your working hours may be different. Please do not feel 
obligated to reply outside your normal working hours.

> On 20. 5. 2024, at 16:03, Amaury Van Pevenaeyge  
> wrote:
> 
> Hello everyone,
> 
> How is it possible to set up a resource record of type HINFO so that it is 
> returned on every ANY request without all the other records in the zone? I'm 
> looking to implement RFC8482 as Cloudflare can do in the following article: 
> https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any
> 
> Thanks in advance for your help.
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users


-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: RFC8482: Implementation through HINFO record

2024-05-20 Thread Mark Andrews
Named does not support this.  There is no requirement to support this. 

-- 
Mark Andrews

> On 21 May 2024, at 00:04, Amaury Van Pevenaeyge  
> wrote:
> 
> 
> Hello everyone,
> 
> How is it possible to set up a resource record of type HINFO so that it is 
> returned on every ANY request without all the other records in the zone? I'm 
> looking to implement RFC8482 as Cloudflare can do in the following article: 
> https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any
> 
> Thanks in advance for your help.
> -- 
> Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
> this list
> 
> ISC funds the development of this software with paid support subscriptions. 
> Contact us at https://www.isc.org/contact/ for more information.
> 
> 
> bind-users mailing list
> bind-users@lists.isc.org
> https://lists.isc.org/mailman/listinfo/bind-users
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


RFC8482: Implementation through HINFO record

2024-05-20 Thread Amaury Van Pevenaeyge
Hello everyone,

How is it possible to set up a resource record of type HINFO so that it is 
returned on every ANY request without all the other records in the zone? I'm 
looking to implement RFC8482 as Cloudflare can do in the following article: 
https://blog.cloudflare.com/rfc8482-saying-goodbye-to-any

Thanks in advance for your help.
-- 
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users


Re: queries for "_.domain"

2024-05-20 Thread Matus UHLAR - fantomas

On 18.05.24 07:10, Mark Andrews wrote:

Correct. Later versions use NS queries as that allows named to cache the 
non-existence of the NS RRset.


I see this happened since 9.18.17
Luckily Debian 11/backports and Debian 12 have incorporated this version.


Using _.domain doesn’t allow that to happen.


Which I guess caused my problem.

Looking at the docs, I can only turn it off in previous versions.
(QNAME minimization was added in 9.13.2)

NS queries do however expose broken delegations.  Make sure you have 
working NS records at the zone apex and at the delegation point.  This is 
especially important when the server serves multiple levels in the zone 
hierarchy as intermediate delegations are often not seen without QNAME 
minimisation but are with QNAME minimisation.


Luckily this is resolving-only server.


We have had bug reports due to all delegating NS records referring to 
non-existing servers.

We have had bug reports due to garbage records at the zone apex.


I encountered problems like this in the past. And then people wonder they 
DNS work properly.


The "google (8.8.8.8) works" argument is problematic because google violates 
DNS in cases like this.


--
Matus UHLAR - fantomas, uh...@fantomas.sk ; http://www.fantomas.sk/
Warning: I wish NOT to receive e-mail advertising to this address.
Varovanie: na tuto adresu chcem NEDOSTAVAT akukolvek reklamnu postu.
Honk if you love peace and quiet.
--
Visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from 
this list

ISC funds the development of this software with paid support subscriptions. 
Contact us at https://www.isc.org/contact/ for more information.


bind-users mailing list
bind-users@lists.isc.org
https://lists.isc.org/mailman/listinfo/bind-users