Submit a ticketCall us

Announcing NPM 12.2
With NPM 12.2 you can monitor your Cisco ASA firewalls, to monitor VPN tunnels for basic visibility and troubleshooting tunnels. NPM 12.2 also uses the SolarWinds Orion Installer so you can easily install and upgrade one or more Orion Platform products simultaneously.
See new features and improvements.

Home > Success Center > IP Address Manager (IPAM) > IPAM Bind Error: Syntax Error in BIND configuration

IPAM Bind Error: Syntax Error in BIND configuration

Overview

When trying to configure IPAM to manage BIND server, you get the error message:

Syntax Error in BIND configuration

Environment

All versions of IPAM

Resolution

Solarwinds recommends to try the following as a workaround:

You may allow any binary to call chroot() system function, even if it is not executed under the root account. To set this up for named-checkconf do the following:
  1. Execute following command to find out named-checkconf binary absolute path: whereis named-checkconf
  2. Execute following command to allow binary to call chroot(). This needs to be executed under root, or using sudo: setcap cap_sys_chroot+ep <absolute_path/>

You may execute “named-checkconf –z –t /var/named/chroot /etc/named.conf” under user account used for IPAM. It should no longer report the “error: isc_dir_chroot: permission denied” error.

If syntax check reports any issues, make sure that permissions on chroot are set correctly. User account for IPAM needs to have the same access right like user account used for running BIND service itself. R/W access to config repository and R/W access to BIND Directory (specified in options). Also, it needs R/W access to “/tmp” (the real one, not the one under /var/named/chroot/tmp). 

 

Note: IPAM does not support BIND version 9.9 and later. 

Cause


When attempting to test the BIND credentials from the set-up wizard, IPAM logs in as the specified user, and runs the following commands:

named -V
ps -A -o comm,pid,args | grep ^named
if [ -r "/var/named/chroot/etc/named.conf" ] ; then echo 'true'; else echo 'false'; fi
if [ -w "/var/named/chroot/etc/named.conf" ] ; then echo 'true'; else echo 'false'; fi
named-checkconf -z -t "/var/named/chroot" "/etc/named.conf"
if [ $? -eq 0 ] ; then echo 'true'; else echo 'false'; fi


IPAM is fails to the command named -checkconf -z -t "/var/named/chroot" "/etc/named.conf" and then shows the error: isc_dir_chroot: permission denied

Last modified
14:24, 13 Nov 2015

Tags

Classifications

Public