Project

General

Profile

Actions
Copy link

Bug #16353

open

failed to dynamically load plugin '/usr/local/lib/named/filter-aaaa.so': plugin API version mismatch: 1/2

Added by Ivars Strazdins 5 months ago. Updated 10 days ago.

Status:
Feedback
Priority:
Normal
Assignee:
-
Category:
BIND
Target version:
-
Start date:
Due date:
% Done:

0%

Estimated time:
Plus Target Version:
Affected Version:
Affected Plus Version:
25.07
Affected Architecture:
amd64

Description

Infamous ( #12869 , #10413 ) filter-aaaa.so plugin issue is back in a new twist, this time the error says it cannot load plugin because of API version mismatch.
This is on freshly upgraded pfSense plus to 25.07.

named logs from /vavr/log/resolver.log file
Aug 5 18:27:00 gw named74993: starting BIND 9.20.6 (Stable Release) <id:>
Aug 5 18:27:00 gw named74993: running on FreeBSD amd64 15.0-CURRENT FreeBSD 15.0-CURRENT #0 plus-RELENG_25_07-n256508-719054fb1f90: Mon Jul 28 16:47:59 UTC 2025 root@freebsd:/var/jenkins/workspace/pfSense-Plus-snapshots-25_07-main/obj/amd64/KX1V1LAU/var/jenkins/workspace/pfSense-Plus-snapshots-25_07-main/sources/FreeB
Aug 5 18:27:00 gw named74993: built with '--localstatedir=/var' '--sysconfdir=/usr/local/etc/namedb' '--with-libxml2' '--with-openssl=/usr' '--enable-dnsrps' '--with-readline=libedit' '--disable-tracing' '--enable-dnstap' '--disable-fixed-rrset' '--disable-geoip' '--without-maxminddb' '--without-gssapi' '--without-libidn2' '--with-json-c' '--disable-largefile' '--without-lmdb' '--disable-querytrace' '--enable-tcp-fastopen' '--prefix=/usr/local' '--mandir=/usr/local/share/man' '--disable-silent-rules' '--infodir=/usr/local/share/info/' '--build=amd64-portbld-freebsd15.0' 'build_alias=amd64-portbld-freebsd15.0' 'CC=cc' 'CFLAGS=-O2 pipe -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing ' 'LDFLAGS= -L/usr/local/lib -ljson-c -fstack-protector-strong ' 'LIBS=-L/usr/local/lib' 'CPPFLAGS=-isystem /usr/local/include' 'CPP=cpp' 'PKG_CONFIG=pkgconf' 'PKG_CONFIG_LIBDIR=/wrkdirs/usr/ports/dns/bind920/work/.pkgconfig:/usr/local/libdata/pkgconfig:/usr/local/share/pkgconfig:/usr/libdata/pkgconfig'
Aug 5 18:27:00 gw named74993: running as: named -4 -c /etc/namedb/named.conf -u bind -t /var/etc/named/
Aug 5 18:27:00 gw named74993: compiled by CLANG FreeBSD Clang 19.1.5 (https://github.com/llvm/llvm-project.git llvmorg-19.1.5-0-gab4b5a2db582)
Aug 5 18:27:00 gw named74993: compiled with OpenSSL version: OpenSSL 3.0.16 11 Feb 2025
Aug 5 18:27:00 gw named74993: linked to OpenSSL version: OpenSSL 3.0.16 11 Feb 2025
Aug 5 18:27:00 gw named74993: compiled with libuv version: 1.49.2
Aug 5 18:27:00 gw named74993: linked to libuv version: 1.49.2
Aug 5 18:27:00 gw named74993: compiled with liburcu version: 0.14.0
Aug 5 18:27:00 gw named74993: compiled with system jemalloc version: 2024073001
Aug 5 18:27:00 gw named74993: compiled with libnghttp2 version: 1.64.0
Aug 5 18:27:00 gw named74993: linked to libnghttp2 version: 1.64.0
Aug 5 18:27:00 gw named74993: compiled with libxml2 version: 2.11.9
Aug 5 18:27:00 gw named74993: linked to libxml2 version: 21109
Aug 5 18:27:00 gw named74993: compiled with json-c version: 0.18
Aug 5 18:27:00 gw named74993: linked to json-c version: 0.18
Aug 5 18:27:00 gw named74993: compiled with zlib version: 1.3.1
Aug 5 18:27:00 gw named74993: linked to zlib version: 1.3.1
Aug 5 18:27:00 gw named74993: compiled with protobuf-c version: 1.4.1
Aug 5 18:27:00 gw named74993: linked to protobuf-c version: 1.4.1
Aug 5 18:27:00 gw named74993: ---------------------------------------------------
Aug 5 18:27:00 gw named74993: BIND 9 is maintained by Internet Systems Consortium,
Aug 5 18:27:00 gw named74993: Inc. (ISC), a non-profit 501(c)(3) public-benefit
Aug 5 18:27:00 gw named74993: corporation. Support and training for BIND 9 are
Aug 5 18:27:00 gw named74993: available at https://www.isc.org/support
Aug 5 18:27:00 gw named74993: ----------------------------------------------------
Aug 5 18:27:00 gw named74993: the limit on open files is already at the maximum allowed value: 113904
Aug 5 18:27:00 gw named74993: found 4 CPUs, using 4 worker threads
Aug 5 18:27:00 gw named74993: DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
Aug 5 18:27:00 gw named74993: DS algorithms: SHA-1 SHA-256 SHA-384
Aug 5 18:27:00 gw named74993: HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
Aug 5 18:27:00 gw named74993: TKEY mode 2 support (Diffie-Hellman): no
Aug 5 18:27:00 gw named74993: TKEY mode 3 support (GSS-API): no
Aug 5 18:27:00 gw named74993: the initial working directory is '/'
Aug 5 18:27:00 gw named74993: loading configuration from '/etc/namedb/named.conf'
Aug 5 18:27:00 gw named74993: the working directory is now '/etc/namedb'
Aug 5 18:27:00 gw named74993: using default UDP/IPv4 port range: [49152, 65535]
Aug 5 18:27:00 gw named74993: listening on IPv4 interface lo0, 127.0.0.1#10053
Aug 5 18:27:00 gw named74993: listening on IPv4 interface igb1.26, 10.10.1.1#10053
Aug 5 18:27:00 gw named74993: generating session key for dynamic DNS
Aug 5 18:27:00 gw named74993: using built-in root key for view all
Aug 5 18:27:00 gw named74993: set up managed keys zone for view all, file 'all.mkeys'
Aug 5 18:27:00 gw named74993: loading plugin '/usr/local/lib/named/filter-aaaa.so'
Aug 5 18:27:00 gw named74993: plugin API version mismatch: 1/2
Aug 5 18:27:00 gw named74993: failed to dynamically load plugin '/usr/local/lib/named/filter-aaaa.so': failure
Aug 5 18:27:00 gw named74993: /usr/local/lib/named/filter-aaaa.so: plugin configuration failed: failure
Aug 5 18:27:00 gw named74993: loading configuration: failure
Aug 5 18:27:00 gw named74993: exiting (due to fatal error)

Actions
Copy link
 #1

Updated by Kris Phillips 23 days ago

  • Status changed from New to Feedback

Tested on 25.11-RC. BIND starts normally and without issue for me.

Nov 29 17:08:50 pfSenseKVMTest named93670: starting BIND 9.20.13 (Stable Release) <id:>
Nov 29 17:08:50 pfSenseKVMTest named93670: running on FreeBSD amd64 16.0-CURRENT FreeBSD 16.0-CURRENT #39 plus-RELENG_25_11-n256500-a43915e7ef55: Thu Nov 27 22:40:19 UTC 2025 :/var/jenkins/workspace/pfSense-Plus-snapshots-25_11-main/obj/amd64/mjYGPXLl/var/jenkins/workspace/pfSe
Nov 29 17:08:50 pfSenseKVMTest named93670: built with '--enable-dnsrps' '--localstatedir=/var' '--sysconfdir=/usr/local/etc/namedb' '--with-openssl=/usr' '--with-readline=libedit' '--disable-tracing' '--enable-dnstap' '--disable-fixed-rrset' '--disable-geoip' '--without-maxminddb' '--without-gssapi' '--without-libidn2' '--disable-largefile' '--without-lmdb' '--disable-querytrace' '--with-json-c' '--with-libxml2' '--enable-tcp-fastopen' '--prefix=/usr/local' '--mandir=/usr/local/share/man' '--disable-silent-rules' '--infodir=/usr/local/share/info/' '--build=amd64-portbld-freebsd16.0' 'build_alias=amd64-portbld-freebsd16.0' 'CC=cc' 'CFLAGS=-O2 pipe -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing ' 'LDFLAGS= -L/usr/local/lib -ljson-c ' 'LIBS=-L/usr/local/lib' 'CPPFLAGS=-isystem /usr/local/include' 'CPP=cpp' 'PKG_CONFIG=pkgconf' 'PKG_CONFIG_LIBDIR=/wrkdirs/usr/ports/dns/bind920/work/.pkgconfig:/usr/local/libdata/pkgconfig:/usr/local/share/pkgconfig:/usr/libdata/pkgconfig'
Nov 29 17:08:50 pfSenseKVMTest named93670: running as: named -c /etc/namedb/named.conf -u bind -t /var/etc/named/
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled by CLANG FreeBSD Clang 19.1.7 (https://github.com/llvm/llvm-project.git llvmorg-19.1.7-0-gcd708029e0b2)
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled with OpenSSL version: OpenSSL 3.5.3 16 Sep 2025
Nov 29 17:08:50 pfSenseKVMTest named93670: linked to OpenSSL version: OpenSSL 3.5.3 16 Sep 2025
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled with libuv version: 1.51.0
Nov 29 17:08:50 pfSenseKVMTest named93670: linked to libuv version: 1.51.0
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled with liburcu version: 0.15.3
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled with system jemalloc version: 2024073001
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled with libnghttp2 version: 1.67.0
Nov 29 17:08:50 pfSenseKVMTest named93670: linked to libnghttp2 version: 1.67.0
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled with libxml2 version: 2.14.5
Nov 29 17:08:50 pfSenseKVMTest named93670: linked to libxml2 version: 21405
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled with json-c version: 0.18
Nov 29 17:08:50 pfSenseKVMTest named93670: linked to json-c version: 0.18
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled with zlib version: 1.3.1
Nov 29 17:08:50 pfSenseKVMTest named93670: linked to zlib version: 1.3.1
Nov 29 17:08:50 pfSenseKVMTest named93670: compiled with protobuf-c version: 1.5.1
Nov 29 17:08:50 pfSenseKVMTest named93670: linked to protobuf-c version: 1.5.1
Nov 29 17:08:50 pfSenseKVMTest named93670: ---------------------------------------------------
Nov 29 17:08:50 pfSenseKVMTest named93670: BIND 9 is maintained by Internet Systems Consortium,
Nov 29 17:08:50 pfSenseKVMTest named93670: Inc. (ISC), a non-profit 501(c)(3) public-benefit
Nov 29 17:08:50 pfSenseKVMTest named93670: corporation. Support and training for BIND 9 are
Nov 29 17:08:50 pfSenseKVMTest named93670: available at https://www.isc.org/support
Nov 29 17:08:50 pfSenseKVMTest named93670: ----------------------------------------------------
Nov 29 17:08:50 pfSenseKVMTest named93670: the limit on open files is already at the maximum allowed value: 57411
Nov 29 17:08:50 pfSenseKVMTest named93670: found 2 CPUs, using 2 worker threads
Nov 29 17:08:50 pfSenseKVMTest named93670: DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
Nov 29 17:08:50 pfSenseKVMTest named93670: DS algorithms: SHA-1 SHA-256 SHA-384
Nov 29 17:08:50 pfSenseKVMTest named93670: HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
Nov 29 17:08:50 pfSenseKVMTest named93670: TKEY mode 2 support (Diffie-Hellman): no
Nov 29 17:08:50 pfSenseKVMTest named93670: TKEY mode 3 support (GSS-API): no
Nov 29 17:08:50 pfSenseKVMTest named93670: the initial working directory is '/'
Nov 29 17:08:50 pfSenseKVMTest named93670: loading configuration from '/etc/namedb/named.conf'
Nov 29 17:08:50 pfSenseKVMTest named93670: the working directory is now '/etc/namedb'

Marking Feedback.

Actions
Copy link
 #2

Updated by Ivars Strazdins 10 days ago

Unfortunately, not.
Bind version is new, but the isue is still there.

it is not about whether named can start, but if it can start with plugins.

Dec 12 16:48:55 gw named[69089]: starting BIND 9.20.13 (Stable Release) <id:>
Dec 12 16:48:55 gw named[69089]: running on FreeBSD amd64 16.0-CURRENT FreeBSD 16.0-CURRENT #41 plus-RELENG_25_11-n256500-a43915e7ef55: Mon Dec  1 19:02:15 UTC 2025     root@pfsense-build-release-amd64-1.eng.atx.netgate.com:/var/jenkins/workspace/pfSense-Plus-snapshots-25_11-main/obj/amd64/mjYGPXLl/var/jenkins/workspace/pfSe
Dec 12 16:48:55 gw named[69089]: built with  '--enable-dnsrps' '--localstatedir=/var' '--sysconfdir=/usr/local/etc/namedb' '--with-openssl=/usr' '--with-readline=libedit' '--disable-tracing' '--enable-dnstap' '--disable-fixed-rrset' '--disable-geoip' '--without-maxminddb' '--without-gssapi' '--without-libidn2' '--disable-largefile' '--without-lmdb' '--disable-querytrace' '--with-json-c' '--with-libxml2' '--enable-tcp-fastopen' '--prefix=/usr/local' '--mandir=/usr/local/share/man' '--disable-silent-rules' '--infodir=/usr/local/share/info/' '--build=amd64-portbld-freebsd16.0' 'build_alias=amd64-portbld-freebsd16.0' 'CC=cc' 'CFLAGS=-O2 -pipe  -fstack-protector-strong -isystem /usr/local/include -fno-strict-aliasing ' 'LDFLAGS= -L/usr/local/lib -ljson-c  ' 'LIBS=-L/usr/local/lib' 'CPPFLAGS=-isystem /usr/local/include' 'CPP=cpp' 'PKG_CONFIG=pkgconf' 'PKG_CONFIG_LIBDIR=/wrkdirs/usr/ports/dns/bind920/work/.pkgconfig:/usr/local/libdata/pkgconfig:/usr/local/share/pkgconfig:/usr/libdata/pkgconfig'
Dec 12 16:48:55 gw named[69089]: running as: named -4 -c /etc/namedb/named.conf -u bind -t /var/etc/named/
Dec 12 16:48:55 gw named[69089]: compiled by CLANG FreeBSD Clang 19.1.7 (https://github.com/llvm/llvm-project.git llvmorg-19.1.7-0-gcd708029e0b2)
Dec 12 16:48:55 gw named[69089]: compiled with OpenSSL version: OpenSSL 3.5.3 16 Sep 2025
Dec 12 16:48:55 gw named[69089]: linked to OpenSSL version: OpenSSL 3.5.3 16 Sep 2025
Dec 12 16:48:55 gw named[69089]: compiled with libuv version: 1.51.0
Dec 12 16:48:55 gw named[69089]: linked to libuv version: 1.51.0
Dec 12 16:48:55 gw named[69089]: compiled with liburcu version: 0.15.3
Dec 12 16:48:55 gw named[69089]: compiled with system jemalloc version: 2024073001
Dec 12 16:48:55 gw named[69089]: compiled with libnghttp2 version: 1.67.0
Dec 12 16:48:55 gw named[69089]: linked to libnghttp2 version: 1.67.0
Dec 12 16:48:55 gw named[69089]: compiled with libxml2 version: 2.14.5
Dec 12 16:48:55 gw named[69089]: linked to libxml2 version: 21405
Dec 12 16:48:55 gw named[69089]: compiled with json-c version: 0.18
Dec 12 16:48:55 gw named[69089]: linked to json-c version: 0.18
Dec 12 16:48:55 gw named[69089]: compiled with zlib version: 1.3.1
Dec 12 16:48:55 gw named[69089]: linked to zlib version: 1.3.1
Dec 12 16:48:55 gw named[69089]: compiled with protobuf-c version: 1.5.1
Dec 12 16:48:55 gw named[69089]: linked to protobuf-c version: 1.5.1
Dec 12 16:48:55 gw named[69089]: ----------------------------------------------------
Dec 12 16:48:55 gw named[69089]: BIND 9 is maintained by Internet Systems Consortium,
Dec 12 16:48:55 gw named[69089]: Inc. (ISC), a non-profit 501(c)(3) public-benefit 
Dec 12 16:48:55 gw named[69089]: corporation.  Support and training for BIND 9 are 
Dec 12 16:48:55 gw named[69089]: available at https://www.isc.org/support
Dec 12 16:48:55 gw named[69089]: ----------------------------------------------------
Dec 12 16:48:55 gw named[69089]: the limit on open files is already at the maximum allowed value: 113958
Dec 12 16:48:55 gw named[69089]: found 4 CPUs, using 4 worker threads
Dec 12 16:48:55 gw named[69089]: DNSSEC algorithms: RSASHA1 NSEC3RSASHA1 RSASHA256 RSASHA512 ECDSAP256SHA256 ECDSAP384SHA384 ED25519 ED448
Dec 12 16:48:55 gw named[69089]: DS algorithms: SHA-1 SHA-256 SHA-384
Dec 12 16:48:55 gw named[69089]: HMAC algorithms: HMAC-MD5 HMAC-SHA1 HMAC-SHA224 HMAC-SHA256 HMAC-SHA384 HMAC-SHA512
Dec 12 16:48:55 gw named[69089]: TKEY mode 2 support (Diffie-Hellman): no
Dec 12 16:48:55 gw named[69089]: TKEY mode 3 support (GSS-API): no
Dec 12 16:48:55 gw named[69089]: the initial working directory is '/'
Dec 12 16:48:55 gw named[69089]: loading configuration from '/etc/namedb/named.conf'
Dec 12 16:48:55 gw named[69089]: the working directory is now '/etc/namedb'
Dec 12 16:48:55 gw named[69089]: using default UDP/IPv4 port range: [49152, 65535]
Dec 12 16:48:55 gw named[69089]: listening on IPv4 interface lo0, 127.0.0.1#10053
Dec 12 16:48:55 gw named[69089]: listening on IPv4 interface igb1.26, 10.10.1.1#10053
Dec 12 16:48:55 gw named[69089]: generating session key for dynamic DNS
Dec 12 16:48:55 gw named[69089]: using built-in root key for view all
Dec 12 16:48:55 gw named[69089]: set up managed keys zone for view all, file 'all.mkeys'
Dec 12 16:48:55 gw named[69089]: loading plugin '/usr/local/lib/named/filter-aaaa.so'
Dec 12 16:48:55 gw named[69089]: plugin API version mismatch: 1/2
Dec 12 16:48:55 gw named[69089]: failed to dynamically load plugin '/usr/local/lib/named/filter-aaaa.so': failure
Dec 12 16:48:55 gw named[69089]: /usr/local/lib/named/filter-aaaa.so: plugin configuration failed: failure
Dec 12 16:48:55 gw named[69089]: loading configuration: failure
Dec 12 16:48:55 gw named[69089]: exiting (due to fatal error)
Actions
Copy link

Also available in: Atom PDF