sam wrote:

> Uwe Dippel wrote:
>
>> On Sun, 13 Jun 2004 05:24:28 +0800, sam wrote:
>>
>>
>>>I scrue up the named permission and ownership, I can start up the
>>>named service any more, the error is:
>>>none:0: open: /var/named/etc/named: file not found
>>
>>
>> May it really *is* gone ?
>>
>> What does
>>
>> ls -l /var/named/etc/
>>
>> show ?
>>
>>
>>>What shoudl be the ownship and permission on directory named
>>>(including its subdirectories) and files?
>>
>>
>> ls -l /var/named
>> total 20
>> drwxr-xr-x 2 root wheel 512 Jun 13 10:51 dev
>> drwxr-x--- 2 root named 512 May 10 21:40 etc
>> drwxr-xr-x 2 root wheel 512 May 10 21:37 master
>> drwxrwxr-x 2 root named 512 Mar 30 03:47 slave
>> drwxr-xr-x 2 root wheel 512 Mar 30 03:47 standard
>>
>>
>> In etc/ everything is 640
>
> Here is the the permission:
> root@sec [12:32pm] [/var/named]# ls -l
> total 9
> drwxr-xr-x 7 named named 512 Jun 10 17:43 ./
> drwxr-xr-x 22 root wheel 512 Jun 13 05:50 ../
> drwxr-xr-x 2 root wheel 512 Jun 10 20:19 dev/
> drwxr-x--x 2 root named 512 Jun 10 17:44 etc/
> -rwxr-xr-x 1 named named 1028 Jun 10 17:43 make-localhost*
> drwxr-xr-x 2 root wheel 512 Mar 30 03:47 master/
> drwxr-xr-x 2 root named 512 Mar 30 03:47 slave/
> drwxr-xr-x 2 root wheel 512 Jun 10 18:02 standard/
> root@sec [12:32pm] [/var/named]# ls -l etc/named.conf
> -rw-r----- 1 root named 2208 Jun 10 23:25 etc/named.conf
> root@sec [12:33pm] [/var/named]#
>
> Executing named resulted the folloiwng error:
> root@sec [12:33pm] [/var/named]# !nam
> named -c /var/named/etc/named.conf -u named
> root@sec [12:33pm] [/var/named]# tail /var/log/messages
> .....
> Jun 13 12:33:53 sec named[20920]: starting BIND 9.2.3 -c
> /var/named/etc/named.conf -u named
> Jun 13 12:33:53 sec named[20920]: none:0: open:
> /var/named/etc/named.conf: file not found
> Jun 13 12:33:53 sec named[20920]: loading configuration: file not
> found Jun 13 12:33:53 sec named[20920]: exiting (due to fatal error)
> root@sec [12:34pm] [/var/named]#
>

Did you mess around with the startup parameters, ie no chroot anymore?

EJ
--
Remove the obvious part (including the dot) for my email address.
http://www.vanwesten.net for examples of ipf and pf.