the permissions on /var/aegir/config is 711 this prevents bind from accessing and loading the required aegir provided files.

this is on centos with 1.4 and on ubuntu with 1.5

changing permissions to 755 works on ubuntu.

Comments

marafa’s picture

marafa CreditAttribution: marafa commented
Title: permissions on /var/aegir/config prevents bind/named from access the zone file » permissions on /var/aegir/config prevents bind/named from accessing the zone file
Steven Jones’s picture

Steven Jones CreditAttribution: Steven Jones commented
Component: DNS Service » Miscellaneous
Priority: Normal » Critical

Yes!

Need to confirm this is still a bug in the current version of Aegir, but yes, this is really annoying and should be a simple fix.

Steven Jones’s picture

Steven Jones CreditAttribution: Steven Jones commented

Right, this is coming from drush_provision_drupal_pre_provision_verify() so we need to review the permissions and decide if they are required to be 711 or can they be relaxed to 755?

Steven Jones’s picture

Steven Jones CreditAttribution: Steven Jones commented
Title: permissions on /var/aegir/config prevents bind/named from accessing the zone file » permissions on /var/aegir/config/server_NAME/SERVICE prevents access

Actually I'm confused as to why 711 would stop bind being able to read a single file in that directory, it looks more like the issue is with the config/server_NAME/bind folders, and the same with apache.

Steven Jones’s picture

Steven Jones CreditAttribution: Steven Jones commented
Status: Active » Fixed

This has been fixed in 6.x-2.x.

Status: Fixed » Closed (fixed)

Automatically closed -- issue fixed for 2 weeks with no activity.

anarcat’s picture

anarcat CreditAttribution: anarcat commented
Version: 6.x-1.5 » 6.x-2.x-dev

  • Commit d8ee162 on dev-drupal-8, 6.x-2.x, dev-ssl-ip-allocation-refactor, dev-1205458-move_sites_out_of_platforms, 7.x-3.x, dev-subdir-multiserver, 6.x-2.x-backports, dev-helmo-3.x by Steven Jones: 
    Issue #1334950 by marafa: Fixed permissions on /var/aegir/config/...