Date:  Wed, 19 Dec 2007 13:49:59 -0500
From:  Richard Siddall <cobalt (at mark) elirion.net>
Subject:  [coba-e:11567] Re: BQ secondary DNS problem
To:  coba-e (at mark) bluequartz.org
Message-Id:  <476967D7.6030009 (at mark) elirion.net>
In-Reply-To:  <056a01c841f6$8f69e060$6700a8c0@OfficeKen>
References:  <013301c841a2$fb323c60$3546460a (at mark) CIIC2> <BAY129-DAV159D3710C4FE135F3F4033CA630 (at mark) phx.gbl> <419AFC1B7E21447D9384A69A7581527A (at mark) vistaltea> <000301c841e7$8ce11070$150a43c0 (at mark) dhp.rhf> <056a01c841f6$8f69e060$6700a8c0 (at mark) OfficeKen>
X-Mail-Count: 11567

Ken Marcus - Precision Web Hosting, Inc. wrote:
[snip]
> Dec 18 20:09:53 ns4 named[16934]: transfer of 
> 'a-real-domain-of-mine.com/IN' from 209.216.51.44#53: failed while 
> receiving responses: permission denied
[snip]
> According to:
> http://www.revsys.com/writings/quicktips/bind-permission.html
> we need to
> chmod 775 /var/named/chroot/var/named

Thanks for the tip.

We had a similar problem when we switched our secondary from a vanilla
Fedora < 7 box to CentOS 5.

I believe newer CentOS named RPMs are set up to have secondary zone
files in /var/named/chroot/var/named/slaves.  We'd need to modify the BQ
code to put secondary files in that folder.  Looks like it's 
/usr/sausalito/handlers/base/dns/dns_generate.pl, around line 1157, change:
	file \"$fname\";
to
	file \"slaves/$fname\";

I don't know if this breaks anything else.

Regards,

	Richard.