nsd users - Nov 2014 - NSD db permissions error after upgrade?

I am running NSD on a FreeBSD 10 machine. It's not in production yet, just 
a beta.

I noticed last month NSD stopped running. Hadn't had time to dig into it 
till now. But discovered these errors in the log whenever I'd attempt to 
start it:

[2014-11-02 17:52:04.966] nsd[3900]: error: /var/db/nsd/nsd.db: Permission
denied
[2014-11-02 17:52:04.967] nsd[3900]: error: unable to open the database
/var/db/nsd/nsd.db: Permission denied
[2014-11-02 17:52:04.967] nsd[3900]: warning: failed to unlink pidfile
/var/run/nsd/nsd.pid: Permission denied
[2014-11-02 17:52:04.968] nsd[3900]: error: server preparation failed, nsd could
not be started
[2014-11-02 17:52:04.968] nsd[3899]: error: did not get start signal from main


It seemed to be similar to what was described here:

https://bugs.archlinux.org/task/37588


But the post is a year old, and I didn't want to blindly go changing 
permissions, especially since the post never implies their changes fixed 
anything.


I think the errors started happening when a system-wide pkg update was 
performed that updated it to 4.1.0.


I found your blog post about the new ability to disable use of nsd.db:

http://www.nlnetlabs.nl/blog/2014/09/19/nsd-4-1-zonefile-mode-and-fork-fix/


That seemed to work, but I am not sure if I just went around the problem? 
Does the blog post imply that nsd.db still should be able to be used if 
you so opt to?


  -------------------------------------------------------------------------
  shot through the heart              ooh baby do you know what that's worth
  and you're to blame                         ooh heaven is a place on earth
  darling you give love                  they say in heaven love comes first
  a bad name                              we'll make heaven a place on earth
  ORBITAL                                                     "Halcyon
Live"

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi fongaboo,

On 03/11/14 00:10, nsd at fongaboo.com wrote:
> 
> I am running NSD on a FreeBSD 10 machine. It's not in production
> yet, just a beta.
> 
> I noticed last month NSD stopped running. Hadn't had time to dig
> into it till now. But discovered these errors in the log whenever
> I'd attempt to start it:
> 
> [2014-11-02 17:52:04.966] nsd[3900]: error: /var/db/nsd/nsd.db: 
> Permission denied [2014-11-02 17:52:04.967] nsd[3900]: error:
> unable to open the database /var/db/nsd/nsd.db: Permission denied 
> [2014-11-02 17:52:04.967] nsd[3900]: warning: failed to unlink
> pidfile /var/run/nsd/nsd.pid: Permission denied [2014-11-02
> 17:52:04.968] nsd[3900]: error: server preparation failed, nsd
> could not be started [2014-11-02 17:52:04.968] nsd[3899]: error:
> did not get start signal from main
> 
> 
> It seemed to be similar to what was described here:
> 
> https://bugs.archlinux.org/task/37588
> 
> 
> But the post is a year old, and I didn't want to blindly go
> changing permissions, especially since the post never implies their
> changes fixed anything.
> 
> 
> I think the errors started happening when a system-wide pkg update
> was performed that updated it to 4.1.0.
> 
> 
> I found your blog post about the new ability to disable use of
> nsd.db:
> 
> http://www.nlnetlabs.nl/blog/2014/09/19/nsd-4-1-zonefile-mode-and-fork-fix/
>
> 
> 
> That seemed to work, but I am not sure if I just went around the 
> problem? Does the blog post imply that nsd.db still should be able
> to be used if you so opt to?
Yes, I think you simply went around some sort of permissions problem
(perhaps the username was changed or removed during the upgrade?).

You can still use nsd.db also with the new version if you want to.
But I think you would then have to fix your permissions.  The system
wide pkg update somehow messed up your permissions?

Best regards,
   Wouter


> -------------------------------------------------------------------------
>
> 
shot through the heart              ooh baby do you know what that's
worth
> and you're to blame                         ooh heaven is a place
> on earth darling you give love                  they say in heaven
> love comes first a bad name                              we'll make
> heaven a place on earth ORBITAL
> "Halcyon Live" _______________________________________________ 
> nsd-users mailing list nsd-users at NLnetLabs.nl 
> http://open.nlnetlabs.nl/mailman/listinfo/nsd-users
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJUVznzAAoJEJ9vHC1+BF+NUsoQAKFzkyhbRxq6u2V807uqO/iu
2BQbEP2gl9vXqM3xwKxfkv+jU+XvN1PBDa/WK71ItbO7z0nz1SzJlhxo6KeP5Yma
3vpDa6mdTh7AOIZGkWZmP3acHiHBYVYxQ8ImaSPYWTBeLXAyeke8DZuO5ISKvZMM
HRdWA2QTHyCAz/2z0KIT6+2Q9vibJ+O/2V7rxdF0QqsH4X2aoRsr92gKsL8hwOYA
bGd0NQIY8h2D9eIMDVBh8IfVqNZpy5cUZAQvfu0DkT+drdz3ow5LQiP4sm/utpZR
geTPdjz9y5cSnSA0LgXn+ycwkEIGp5Drw0VlJclz+7nluzJt5/fyoPqwYY2VjFeF
RhZsifMwrgswNOT4FXAOcnMTfh4ccIyyIB6rnte1emVQzcbg3+jrtTFwF5G8MsAt
VIzXOmCLi4IB4qRAZy3uJicyE4AwHr4i1pzfxXsaHqTvwtTlRVZddD+AR2FGnY1V
zRAfjYUf7AVZUBDK3o6m0P4KYJYKwsCDwEErc/ZbiVJDnHerh3gYK+2y/tQPISWg
KZisL9C5N7nKvzkOXmeJRChfZ+1+IZ2IFnj7pOa4BiJRnPjewrMZYhBgpcSWxGGD
YF98AbJVhJvULVodtjUkbg6r1VGzXnQJoYSpullRojHiFdyJ2OqUVCJS7+vSd2Tf
FkChF0BgZjnrfFGkhJNs
=Mlfc
-----END PGP SIGNATURE-----