#110 Potential crash during startup/reload if global configuration options are set
Closed: Fixed None Opened 6 years ago by pspacek.

  • Define some global DNS option, e.g. idnsAllowSyncPTR attribute in global configuration object cn=dns, dc=example, dc=com.
  • Start or reload BIND.
  • Keep your fingers crossed, this problem not so often on RHEL 6.4.
  • Check logs.

The error is more likely in latest builds from master (e1122fd).

/var/log/messages:

13-Mar-2013 19:50:06.718 examining set of settings 'LDAP idnsConfig object for database ipa'
13-Mar-2013 19:50:06.718 setting 'dyn_update' was found in set 'LDAP idnsConfig object for database ipa'
13-Mar-2013 19:50:06.718 examining set of settings 'LDAP idnsConfig object for database ipa'
13-Mar-2013 19:50:06.718 setting 'dyn_update' was found in set 'LDAP idnsConfig object for database ipa'
13-Mar-2013 19:50:06.718 [settings.c     :  419: setting_update_from_ldap_entry] check failed: ignore
13-Mar-2013 19:50:06.718 zone 168.192.IN-ADDR.ARPA/IN: loaded; checking validity
13-Mar-2013 19:50:06.718 examining set of settings 'LDAP idnsConfig object for database ipa'
13-Mar-2013 19:50:06.718 setting 'sync_ptr' was found in set 'LDAP idnsConfig object for database ipa'
13-Mar-2013 19:50:06.718 examining set of settings 'LDAP idnsConfig object for database ipa'
13-Mar-2013 19:50:06.718 setting 'sync_ptr' was found in set 'LDAP idnsConfig object for database ipa'
13-Mar-2013 19:50:06.718 task.c:1678: REQUIRE(task->state == task_state_running) failed, back trace
13-Mar-2013 19:50:06.718 exiting (due to assertion failure)

BIND will crash if following conditions are met at the same time:

  • Persistent search is enabled (default from IPA 3.0)
  • Configuration of PTR synchronization feature has different value in global configuration and in local /etc/named.conf. I.e. PTR synchronization is globally enabled and locally disabled or vice versa.

Simpler workaround:
1. Configure PTR synchronization in /etc/named.conf or per-zone as described in comment #1.
2. Remove configuration for PTR synchronization from global configuration:
- $ ipa dnsconfig-mod --allow-sync-ptr=*

OR

  • Disable persistent search.

Metadata Update from @pspacek:
- Issue assigned to pspacek
- Issue set to the milestone: Fedora 19

2 years ago

Login to comment on this ticket.

Metadata