(new Soapbox())->shout(array_map('strtoupper', $opinions)); //Shaun's blog


Me, elsewhere

GitHub
parseword
Miscellaneous public code

snuze
A PHP API client for Reddit

Twitter
@parseword
I don't tweet much

XMPP chat
xmpp@shaunc.com
(Pidgin, Miranda, Swift, etc.)


Perfect is the enemy of good enough.

BIND client log error "query_find: query_getdb failed"

Posted May 24, 2019 by shaun

If you see an error message like this one in the BIND DNS server's client log, it may be harmless:

24-May-2019 21:00:05.019 client: error: (example.com/A): query_find: query_getdb failed

I couldn't find anything explaining the error (hence this post) so I looked at the source; this message comes from query.c. What's happening here is that BIND is trying to figure out which zone contains the answer it needs, but it can't find the zone, so query_getdb failed is logged and a SERVFAIL response is sent to the client.

As it turns out, the timing of this error in the log coincides exactly with the BIND service being restarted. In this case I had just upgraded a server from 9.11.6-P1 to 9.11.7 and bounced the service. At the precise moment the logged query arrived, BIND hadn't loaded that zone yet, so of course it couldn't be located in memory. The zone in question was loaded a few millis later:

24-May-2019 21:00:05.026 general: info: zone example.com/IN (signed): loaded serial 2019021705 (DNSSEC signed)

..after which, no subsequent query_getdb failed errors were logged.



Recent articles

📰 Introducing Snuze, a PHP client for the Reddit API

📰 jisusaiche: Java's installer telemetry

📰 BIND client log error "query_find: query_getdb failed"

📰 Resolving "The lang/perl5.24 port has been deleted: Has expired" portmaster error

📰 Armagaddon2 interim fix for Firefox 56 and other old versions

📰 Strange DNS queries: qname "miep", qtype ANY

📰 Undeliverable as addressed: A massive broken spam campaign?

📰 Using WITH_META_MODE and ccache for FreeBSD build boosts

📰 Resolving subversion error E000013: Unable to create pristine install stream

📰 Enhancements to SmokePing's AnotherDNS probe

📰 Generating vanity DNSSEC key tags

📰 DDoS involving forged packets from 23.225.141.70

📰 Website integrity monitoring through version control

📰 SpamAssassin 3.4.2 fixes security problems, adds HashBL and phishing plugins

📰 Bug or turf war? ICQ via Pidgin now fails with "startOSCARSession: Request Timeout"

▲ Back to top | Permalink to this page