When trying to configure IPAM to manage BIND server, you get the error message:
Syntax Error in BIND configuration
Solarwinds recommends to try the following as a workaround:
You may allow any binary to call chroot() system function, even if it is not executed under the root account. To set this up for named-checkconf do the following:
- Execute following command to find out named-checkconf binary absolute path: whereis named-checkconf
- Execute following command to allow binary to call chroot(). This needs to be executed under root, or using sudo: setcap cap_sys_chroot+ep <absolute_path/>
You may execute “named-checkconf –z –t /var/named/chroot /etc/named.conf” under user account used for IPAM. It should no longer report the “error: isc_dir_chroot: permission denied” error.
If syntax check reports any issues, make sure that permissions on chroot are set correctly. User account for IPAM needs to have the same access right like user account used for running BIND service itself. R/W access to config repository and R/W access to BIND Directory (specified in options). Also, it needs R/W access to “/tmp” (the real one, not the one under /var/named/chroot/tmp).
Note: IPAM does not support BIND version 9.9 and later.
When attempting to test the BIND credentials from the set-up wizard, IPAM logs in as the specified user, and runs the following commands:
ps -A -o comm,pid,args | grep ^named
if [ -r "/var/named/chroot/etc/named.conf" ] ; then echo 'true'; else echo 'false'; fi
if [ -w "/var/named/chroot/etc/named.conf" ] ; then echo 'true'; else echo 'false'; fi
named-checkconf -z -t "/var/named/chroot" "/etc/named.conf"
if [ $? -eq 0 ] ; then echo 'true'; else echo 'false'; fi
IPAM is fails to the command named -checkconf -z -t "/var/named/chroot" "/etc/named.conf" and then shows the error: isc_dir_chroot: permission denied