rndc confusion

[Alan Clegg]

On 1/26/2011 9:39 PM, donovan jeffrey j wrote:

> I had some issue with an invalid key so i ran rndc-confgen -a which
> gave me a new key in /etc/rndc.key. so now rndc works fine.
> 
> but when looked at /etc/rndc.conf the key was different than the
> /etc/rndc.key. i thought they had to be the same for this to work.
> I'm assuming that i should replace the key the rndc.conf, or maybe
> it's not needed since I'm loading directly from named.conf ?
> 
> any insight or flames welcome. -j

If you use /etc/rndc.key, you don't want an /etc/rndc.conf.

BIND reads /etc/rndc.key on startup and rndc reads /etc/rndc.key when it
runs.

AlanC

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 196 bytes
Desc: OpenPGP digital signature
URL: <https://lists.isc.org/pipermail/bind-users/attachments/20110126/ebfe4d5d/attachment.bin>