samba - Jul 2018 - Configuring the BIND9_DLZ Module

I have configured DNS BIND, but at the time of restarting bind I get
permission denied message in the file /var/lib/samba/private/named.conf.
The file has been edited, where the module for the BIND version was
decompressed, in addition to the owner being changed to the file, however,
the same message still appears. Should a special permission be applied?

root @ adsserver: / etc / netplan # ll /var/lib/samba/private/named.conf
-rw-r - r-- 1 bind bind 780 Jul 28 17:18 /var/lib/samba/private/named.conf


root at adsserver:/etc/netplan# systemctl status bind9
● bind9.service - BIND Domain Name Server
   Loaded: loaded (/lib/systemd/system/bind9.service; enabled; vendor
preset: enabled)
   Active: failed (Result: exit-code) since Sat 2018-07-28 17:38:07 UTC; 1s
ago
     Docs: man:named(8)
  Process: 9205 ExecStop=/usr/sbin/rndc stop (code=exited, status=0/SUCCESS)
  Process: 9297 ExecStart=/usr/sbin/named -f $OPTIONS (code=exited,
status=1/FAILURE)
 Main PID: 9297 (code=exited, status=1/FAILURE)

jul 28 17:38:07 adsserver.soporte.local named[9297]: adjusted limit on open
files from 4096 to 1048576
jul 28 17:38:07 adsserver.soporte.local named[9297]: found 1 CPU, using 1
worker thread
jul 28 17:38:07 adsserver.soporte.local named[9297]: using 1 UDP listener
per interface
jul 28 17:38:07 adsserver.soporte.local named[9297]: using up to 4096
sockets
jul 28 17:38:07 adsserver.soporte.local named[9297]: loading configuration
from '/etc/bind/named.conf'
jul 28 17:38:07 adsserver.soporte.local named[9297]:
/etc/bind/named.conf:22: open: /var/lib/samba/private/named.conf:
permission denied
jul 28 17:38:07 adsserver.soporte.local named[9297]: loading configuration:
permission denied
jul 28 17:38:07 adsserver.soporte.local named[9297]: exiting (due to fatal
error)
jul 28 17:38:07 adsserver.soporte.local systemd[1]: bind9.service: Main
process exited, code=exited, status=1/FAILURE
jul 28 17:38:07 adsserver.soporte.local systemd[1]: bind9.service: Failed
with result 'exit-code'.

On Sat, 28 Jul 2018 13:01:04 -0500
Ivan Rojas via samba <samba at lists.samba.org> wrote:
> I have configured DNS BIND, but at the time of restarting bind I get
> permission denied message in the
> file /var/lib/samba/private/named.conf. The file has been edited,
> where the module for the BIND version was decompressed,
I take it you mean 'uncommented' (remove '#')
> in addition
> to the owner being changed to the file, however, the same message
> still appears. Should a special permission be applied?
> 
> root @ adsserver: / etc / netplan #
> ll /var/lib/samba/private/named.conf -rw-r - r-- 1 bind bind 780 Jul
> 28 17:18 /var/lib/samba/private/named.conf
I don't change the ownership:

root at dc4:~# ls -la /var/lib/samba/private/named.conf
-rw-r--r-- 1 root root 780 Mar 24 20:18 /var/lib/samba/private/named.conf
root at dc4:~# ls -lad /var/lib/samba/private/
drwxr-xr-x 8 root root 4096 Jul 28 19:21 /var/lib/samba/private/

I use Devuan, so should be the same as yours, if you look at your
permissions, it is world readable and, on my machine, anybody can enter
its dir.

Rowland