#1054314 bind9: Obsolete delegation-only option causes startup failure with no logging

Package:
bind9
Source:
bind9
Description:
Internet Domain Name Server
Submitter:
Chris Chiappa
Date:
2025-04-17 19:06:04 UTC
Severity:
normal
#1054314#5
Date:
2023-10-21 16:09:56 UTC
From:
To:
I've got a bind configuration that's been around for many years at
this point.  Noticed today that named had failed to restart at some
time in the past.  Nothing in /var/log/bind after it had shut down,
nothing visible in systemctl status, nor journalctl -xeu named.service
apart from note of a bad return code.  Running with named -g found it
complaining about these lines in my named.conf.local:

zone "com" { type delegation-only; };
zone "net" { type delegation-only; };

I don't have a memory of why or when I added these (maybe when bad
lookups suddenly were redirecting to advertising?), but
https://bind9.readthedocs.io/en/v9.18.18/notes.html mentions the
delegation-only option being deprecated.  So, not great that it was
hard to debug, but it's probably peculiar to my configuration.  I
thought it was worth filing a bug in any case anyone else runs across
this.

My fix was simply to remove those two lines since they do not
appear to be relevant any more.  If support for delegation-only has
indeed been removed, it seems a little strange it's not in the bind
release notes etc.

#1054314#10
Date:
2025-04-17 19:04:47 UTC
From:
To:
We believe that the bug you reported is fixed in the latest version of
bind9, which is due to be installed in the Debian FTP archive.

A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 1054314@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Ondřej Surý <ondrej@debian.org> (supplier of updated bind9 package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@ftp-master.debian.org)
Format: 1.8
Date: Thu, 17 Apr 2025 18:49:10 +0200
Source: bind9
Architecture: source
Version: 1:9.20.8-2
Distribution: unstable
Urgency: medium
Maintainer: Debian DNS Team <team+dns@tracker.debian.org>
Changed-By: Ondřej Surý <ondrej@debian.org>
Closes: 995310 1054314
Changes:
 bind9 (1:9.20.8-2) unstable; urgency=medium
 .
   * Validate configuration file before service restart
     (Closes: #995310, #1054314)
Checksums-Sha1:
 6074635b45d2091b29d15deba6b6be959fd13d19 3158 bind9_9.20.8-2.dsc
 17ce462d43dc96a7f8da9cc930971adcb8a3d1fd 60060 bind9_9.20.8-2.debian.tar.xz
 01e445a855812446605ede8ea011804325ca7bcd 14631 bind9_9.20.8-2_amd64.buildinfo
Checksums-Sha256:
 22764f391224e697694a64e564d6478b837b97f5338b2a8b632a113288559700 3158 bind9_9.20.8-2.dsc
 9279f745bba059fe425018fb0daac99f12aab3f1255c93813ce9e5e76c818267 60060 bind9_9.20.8-2.debian.tar.xz
 7ed5824b3e4cf193c9d47acf6fae9b934066cbc0161bc241a8f92fa52942fd56 14631 bind9_9.20.8-2_amd64.buildinfo
Files:
 2a2818f5d626e15e2f5f279b1c9a67d8 3158 net optional bind9_9.20.8-2.dsc
 818854446d3762b953f92c33911f0bd1 60060 net optional bind9_9.20.8-2.debian.tar.xz
 7124154163dc16ca3205bb06c7d167c3 14631 net optional bind9_9.20.8-2_amd64.buildinfo
-----BEGIN PGP SIGNATURE-----
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=sY9r
-----END PGP SIGNATURE-----