{"action":"created","issue":{"url":"https://api.github.com/repos/inkblot/puppet-bind/issues/54","labels_url":"https://api.github.com/repos/inkblot/puppet-bind/issues/54/labels{/name}","comments_url":"https://api.github.com/repos/inkblot/puppet-bind/issues/54/comments","events_url":"https://api.github.com/repos/inkblot/puppet-bind/issues/54/events","html_url":"https://github.com/inkblot/puppet-bind/issues/54","id":105178076,"number":54,"title":"Allow setting option managed-keys-directory","user":{"login":"fonk","id":4289178,"avatar_url":"https://avatars.githubusercontent.com/u/4289178?v=3","gravatar_id":"","url":"https://api.github.com/users/fonk","html_url":"https://github.com/fonk","followers_url":"https://api.github.com/users/fonk/followers","following_url":"https://api.github.com/users/fonk/following{/other_user}","gists_url":"https://api.github.com/users/fonk/gists{/gist_id}","starred_url":"https://api.github.com/users/fonk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/fonk/subscriptions","organizations_url":"https://api.github.com/users/fonk/orgs","repos_url":"https://api.github.com/users/fonk/repos","events_url":"https://api.github.com/users/fonk/events{/privacy}","received_events_url":"https://api.github.com/users/fonk/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":5,"created_at":"2015-09-07T09:07:54Z","updated_at":"2015-12-19T15:15:28Z","closed_at":null,"body":"In RHEL7/CentOS7 the default for managed-keys-directory is /var/named with permissions set to 750 for root.named. This leads to messages like\r\n\r\n> Sep 07 10:56:07 vm-frank2e named[15279]: 89c168d61b4f57625d526c99a6b7bc716b2d02a52f61e793ef4259584bdd7f1a.mkeys.jnl: create: permission denied\r\nSep 07 10:56:07 vm-frank2e named[15279]: managed-keys-zone/10-private: sync_keyzone:dns_journal_open -> unexpected error\r\nSep 07 10:56:07 vm-frank2e named[15279]: managed-keys-zone/10-private: unable to synchronize managed keys: unexpected error\r\nSep 07 10:56:07 vm-frank2e named[15279]: ea864fecfa6aa789293a6ac9e5395bb0eadd9b6725a5d746934176098d9aa656.mkeys.jnl: create: permission denied\r\nSep 07 10:56:07 vm-frank2e named[15279]: managed-keys-zone/99-everyone: sync_keyzone:dns_journal_open -> unexpected error\r\nSep 07 10:56:07 vm-frank2e named[15279]: managed-keys-zone/99-everyone: unable to synchronize managed keys: unexpected error\r\n\r\nThis could be prevented if we're able to set managed-keys-directory to /var/named/dynamic"},"comment":{"url":"https://api.github.com/repos/inkblot/puppet-bind/issues/comments/165995980","html_url":"https://github.com/inkblot/puppet-bind/issues/54#issuecomment-165995980","issue_url":"https://api.github.com/repos/inkblot/puppet-bind/issues/54","id":165995980,"user":{"login":"inkblot","id":982490,"avatar_url":"https://avatars.githubusercontent.com/u/982490?v=3","gravatar_id":"","url":"https://api.github.com/users/inkblot","html_url":"https://github.com/inkblot","followers_url":"https://api.github.com/users/inkblot/followers","following_url":"https://api.github.com/users/inkblot/following{/other_user}","gists_url":"https://api.github.com/users/inkblot/gists{/gist_id}","starred_url":"https://api.github.com/users/inkblot/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/inkblot/subscriptions","organizations_url":"https://api.github.com/users/inkblot/orgs","repos_url":"https://api.github.com/users/inkblot/repos","events_url":"https://api.github.com/users/inkblot/events{/privacy}","received_events_url":"https://api.github.com/users/inkblot/received_events","type":"User","site_admin":false},"created_at":"2015-12-19T15:15:28Z","updated_at":"2015-12-19T15:15:28Z","body":"I am going to merge the `managed_keys_directory` branch as-is and close this issue."}}