Submit a ticketCall us

Webinar: Web Help Desk for HR, Facilities and Accounting Departments
This webinar will focus on use cases for HR, Facilities and Accounting.

Having a unified ticketing and asset management system for all the departments in your company can provide end-users with a seamless experience and make things easier for your IT team. Yet, with different business tasks and objectives, many departments don’t fully understand the capabilities of Web Help Desk and how the software can be customized for effective use in their departments.
Register Now.

Home > Success Center > IP Address Manager (IPAM) > IPAM Bind Error: Syntax Error in BIND configuration

IPAM Bind Error: Syntax Error in BIND configuration

Overview

When trying to configure IPAM to manage BIND server, you get the error message:

Syntax Error in BIND configuration

Environment

All versions of IPAM

Resolution

Solarwinds recommends to try the following as a workaround:

You may allow any binary to call chroot() system function, even if it is not executed under the root account. To set this up for named-checkconf do the following:
  1. Execute following command to find out named-checkconf binary absolute path: whereis named-checkconf
  2. Execute following command to allow binary to call chroot(). This needs to be executed under root, or using sudo: setcap cap_sys_chroot+ep <absolute_path/>

You may execute “named-checkconf –z –t /var/named/chroot /etc/named.conf” under user account used for IPAM. It should no longer report the “error: isc_dir_chroot: permission denied” error.

If syntax check reports any issues, make sure that permissions on chroot are set correctly. User account for IPAM needs to have the same access right like user account used for running BIND service itself. R/W access to config repository and R/W access to BIND Directory (specified in options). Also, it needs R/W access to “/tmp” (the real one, not the one under /var/named/chroot/tmp). 

 

Note: IPAM does not support BIND version 9.9 and later. 

Cause


When attempting to test the BIND credentials from the set-up wizard, IPAM logs in as the specified user, and runs the following commands:

named -V
ps -A -o comm,pid,args | grep ^named
if [ -r "/var/named/chroot/etc/named.conf" ] ; then echo 'true'; else echo 'false'; fi
if [ -w "/var/named/chroot/etc/named.conf" ] ; then echo 'true'; else echo 'false'; fi
named-checkconf -z -t "/var/named/chroot" "/etc/named.conf"
if [ $? -eq 0 ] ; then echo 'true'; else echo 'false'; fi


IPAM is fails to the command named -checkconf -z -t "/var/named/chroot" "/etc/named.conf" and then shows the error: isc_dir_chroot: permission denied

Last modified
14:24, 13 Nov 2015

Tags

Classifications

Public