[SOLVED] [TROUBLESHOOT] Folder permissions /var/named

[aljaxus]

Hello, we're having some issues with our DA instance - folder permissions to be more specific.
When a new domain is added (be it via WHMCS or DA ui) the domain can not be fully "created", because the permissions of the "/var/named/" are presumably incorrect.
Which user is used for creating the .db files in the /var/named directory?

Currently the files in /var/named and the folder itself are owned by root. Should they be owned by named or diradmin ?

Spoiler: error when creating new domain via DA ui

Could not write domain's db file in /var/named
Unable to save dns zone: named-checkzone returned:
loading "domain.tld" from "/var/named/domain.tld.db.temp.4181" class "IN"
dns_master_load: /var/named/domain.tld.db.temp.4181:43: www.domain.tld: CNAME and other data
zone domain.tld/IN: loading from master file /var/named/domain.tld.db.temp.4181 failed: CNAME and other data
zone domain.tld/IN: not loaded due to errors.

Thank you in advance for any clues or reply.

 

[aljaxus]

Update; I have executed the set_permissions.sh script - nothing has changed.

 

[floyd]

On my CentOS server:
/var root:root
/var/named root:named
/var/named/* root:root

 

[aljaxus]

I have the very same permissions and yet, when adding a new domain the action errors out with a permission error. What version of DA are you running? Presumably the latest one (1.61.3) ?

 

[floyd]

Yes.

Anything in the log?

 

[aljaxus]

Yes.

Anything in the log?

Looking at the DA error log, there's multiple issues with the permissions.
Is it possible that an update triggered this? We've never had any filesystem permission issues so far and I am not aware of anyone messing with any configuration or permissions.

2020:06:14-16:04:30: Named::readDB (): Can't open /var/named/domain.tld.db for reading

2020:06:14-16:04:54: addIPtoFailedAttempts: Error creating ./data/admin/ip_access/[IPv6address]: mkdir(./data/admin/ip_access/[IPv6address]) error: Permission denied<br>


2020:06:14-16:05:17: Error Creating Domain: <b>Could not write domain's db file in /var/named</b><br>


2020:06:14-16:14:01: Ssl::getKeyBit: Error checking for key bit size:
2020:06:14-16:16:38: Can't connect to ssl!
2020:06:14-16:16:38: ->syscall

Can these give any clues to what might be the issue?