DNS Function bug with DNSSEC (claims db.signed.jnl.db failed: file not found)

Started by n8v8r, February 04, 2018, 02:38:50 PM

Previous topic - Next topic

n8v8r

CentOS Linux release 7.4.1708 (Core)
Kernel Version: 3.10.0-693.17.1.el7.x86_64
Apache & Varnish Cache & Nginx Reverse Proxy
Apache/2.4.29
nginx/1.12.2
PHP 5.6.30
suPHP 0.7.2
MySQL 10.1.30-MariaDB
BIND 9.9.4-RedHat-9.9.4-51.el7_4.2 (Extended Support Version)
CWPpro version: 0.9.8.444

Bug
dns_list_zones >> Reload Zone or dns_list_zones >> Check Records
Quotezone foo.bar.db.signed.jnl/IN: loading from master file /var/named/foo.bar.db.signed.jnl.db failed: file not found
zone foo.bar.db.signed.jnl/IN: not loaded due to errors.

dns_list_zones >> Edit Records
QuoteChecking DNS Zone Record for Domain: foo.bar.db.signed.jnl   
Checking Zone File: /var/named/foo.bar.db.signed.jnl.db

zone foo.bar.db.signed.jnl/IN: loading from master file /var/named/foo.bar.db.signed.jnl.db failed: file not found
zone foo.bar.db.signed.jnl/IN: not loaded due to error
followed by a 70 count repeat of
QuoteNotice: Undefined offset:3 in /usr/local/cwpsrv/htdocs/resources/admin/modules/zone_editor.php on line 0

Debugging undertaken
Quote[root@server ~]# named-checkconf  /etc/named.conf
[root@server ~]# named-checkzone foo.bar /var/named/foo.bar.db
zone foo.bar/IN: loaded serial 2013071600
OK


[root@server ~]# service named status -l
QuoteRedirecting to /bin/systemctl status  -l named.service
● named.service - Berkeley Internet Name Domain (DNS)
   Loaded: loaded (/usr/lib/systemd/system/named.service; enabled; vendor preset: disabled)
   Active: active (running) since Sun 2018-02-04 13:35:17 GMT; 41min ago
  Process: 21602 ExecStop=/bin/sh -c /usr/sbin/rndc stop > /dev/null 2>&1 || /bin/kill -TERM $MAINPID (code=exited, status=0/SUCCESS)
  Process: 30045 ExecStart=/usr/sbin/named -u named -c ${NAMEDCONF} $OPTIONS (code=exited, status=0/SUCCESS)
  Process: 30042 ExecStartPre=/bin/bash -c if [ ! "$DISABLE_ZONE_CHECKING" == "yes" ]; then /usr/sbin/named-checkconf -z "$NAMEDCONF"; else echo "Checking of zone files is disabled"; fi (code=exited, status=0/SUCCESS)
Main PID: 30047 (named)
   CGroup: /system.slice/named.service
           └─30047 /usr/sbin/named -u named -c /etc/named.conf

Feb 04 13:35:17 server.foo.bar named[30047]: zone foo.bar/IN (signed): reconfiguring zone keys
Feb 04 13:35:17 server.foo.bar named[30047]: zone dns2.registrar-servers.com/IN: sending notifies (serial 2013071600)
Feb 04 13:35:17 server.foo.bar named[30047]: zone foo.bar/IN (signed): next key event: 04-Feb-2018 14:35:17.133
Feb 04 13:36:38 server.foo.bar named[30047]: received control channel command 'signing -list foo.bar'
Feb 04 13:37:02 server.foo.bar named[30047]: received control channel command 'loadkeys foo.bar'
Feb 04 13:37:02 server.foo.bar named[30047]: zone foo.bar/IN (signed): reconfiguring zone keys
Feb 04 13:37:02 server.foo.bar named[30047]: zone foo.bar/IN (signed): next key event: 04-Feb-2018 14:37:02.362



The debugging indicates that filed claimed missing is present.






n8v8r

deleted the zones and than rebuilt from scratch after which the error did not reoccur

n8v8r

The relief was only temporarily, probably until the zone got resigned. Now the error is back in full swing.

Would appreciate this either to be ironed out by CWP, as it seems to be a bug, or advise how to resolve.

Currently on CWPpro version: 0.9.8.447

n8v8r