#4923 DNSSEC key regen created as root

[Mark Piercewright]

Hi. I have activated DNSSEC on my DNS zones and turned on auto key regeneration. The keys get created OK in the correct directory but they are owned by root. named is runing under its own user and cant access the newly created files which causes a DNS journal error and bind stops resolving queries. To get around this I have been stopping named, deleting the journal files, changing the ownership of the newly created keys to the user under which named runs and then restarting the service. If this is not a bug is there an config change I can make to stop this happening? Thanks.

[Jamie Cameron]

Can you give an example of a particular file that is created with the wrong ownership?

[Mark Piercewright]

Sure, It is these two. They get created as root:root.
-rw-r--r-- 1 named named 476 Mar 13 22:25 Kxxx.+005+02325.key
-rw------- 1 named named 1198 Mar 13 22:25 Kxxx.+005+02325.private

[Jamie Cameron]

Ok, thanks. This will be fixed in the next Webmin release.