SymptomsWhen the DNS service works in Slave mode for a domain, the domain name is not resolved.
CauseThe DNS service in Slave mode fails to create a zone file on the file system due to the lack of permissions (SELinux restrictions). If the zone file is not created, the service does not have instructions on how to resolve the IP address.
DiagnosisCheck log /var/log/messages if it contains errors like:
# named: dumping master file: tmp-wqlhytJvzE: open: permission denied
# named: transfer of 'domain.com/IN' from 22.214.171.124#53: failed while receiving responses: permission denied
To check SELinux mode run command:
Output should be:
ResolutionSwitch SELinux into Permissive mode - open file /etc/selinux/config in any editor, find row
and change it to
If you have not found this file, open file /boot/grub/grub.conf in any editor and add the parameter enforcing=0 to Grub Boot Loader:
title SE-Linux Test System
kernel /boot/vmlinuz-2.4.20-selinux-XXXXXXXXXX ro root=/dev/hda1 nousb enforcing=0
Reboot the server to apply changes.