☰

由於權限和連線失敗錯誤，命名失敗

tag-icon • tag-icon bind connection named-conf domain-name-system
由於權限和連線失敗錯誤，命名失敗

我面臨一個嚴重的問題，導致我的伺服器癱瘓。

由於某種未知的原因，儘管我盡最大努力修復日誌中發現的問題，但命名不再工作。

每當我嘗試運行時都會收到此錯誤重建DNS配置（控制面板）

warn [fixrndc] /usr/sbin/rndc status failed: rndc: connect failed: 127.0.0.1#953: connection refused

當我檢查命名的狀態時：

root@host [/etc]# /etc/init.d/named status
rndc: connect failed: 127.0.0.1#953: connection refused

這是我的 /var/log/messages 尾部

root@host [/etc]# tail /var/log/messages
Nov 24 22:32:25 host named[21687]: listening on IPv4 interface eth1, 108.xx.18.18#53
Nov 24 22:32:25 host named[21687]: listening on IPv4 interface eth1:cp1, 108.xx.18.19#53
Nov 24 22:32:25 host named[21687]: listening on IPv4 interface eth1:cp2, 108.xx.18.20#53
Nov 24 22:32:25 host named[21687]: listening on IPv4 interface eth1:cp3, 108.xx.18.21#53
Nov 24 22:32:25 host named[21687]: listening on IPv4 interface eth1:cp4, 108.xx.18.22#53
Nov 24 22:32:25 host named[21687]: listening on IPv4 interface eth1:cp5, 108.xx.18.23#53
Nov 24 22:32:25 host named[21687]: command channel listening on 127.0.0.1#953
Nov 24 22:32:25 host named[21687]: couldn't open pid file '/var/run/named/named.pid': Permission denied
Nov 24 22:32:25 host named[21687]: exiting (due to early fatal error)
Nov 24 22:32:25 host /etc/init.d/named: named startup succeeded

我的配置被授予以下權限：

root@host [/etc]# ls -lh | grep named.conf
-rw-r--r--  1 named root  4.9K Nov 24 22:11 named.conf

我的named.conf具有以下程式碼：（減去區域）

include "/etc/rndc.key";

controls {
    inet 127.0.0.1 allow { localhost; } keys { "rndc-key"; };
};  

options {
    /* make named use port 53 for the source of all queries, to allow
         * firewalls to block all ports except 53:
         */

    // query-source    port 53;

    recursion no;

    /* We no longer enable this by default as the dns posion exploit
        has forced many providers to open up their firewalls a bit */

    // Put files that named is allowed to write in the data/ directory:
    directory                "/var/named"; // the default
    pid-file                 "/var/run/named/named.pid";
    dump-file                "data/cache_dump.db";
    statistics-file          "data/named_stats.txt";
   /* memstatistics-file     "data/named_mem_stats.txt"; */
    allow-transfer    { "none"; };
};

rndc 的權限：

root@host [/etc]# ls -lh | grep rndc
-rw-rw----  1 named named  479 Nov 24 21:29 rndc.conf
-rw-rw----  1 named named  479 Nov 24 21:16 rndc.conf.bak
-rw-rw----  1 named named   77 Nov 24 21:29 rndc.key

我的命名資料夾權限：

ls -lh /var/run/named/
total 8.0K
drwxrwxr-x  2 named named 4.0K Jan  7  2013 ./
drwxrwx--- 22 root  root  4.0K Nov 24 22:29 ../

這裡有什麼突出的地方嗎？

感謝您的幫忙！

答案1

似乎很明顯，(a) 名為無法寫入其 pid 檔案的基本問題。我想到的可能性是

  1. passwd 檔案中指定使用者的條目存在衝突
  2. SELinux

關於如何在評論中測試這些理論的建議。

由於更改named.conf中pid檔案的位置已經修復了一些問題，因此/var/run下的資料夾權限似乎仍然存在問題。

相關內容